Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90FE7F9E3B1411EDADCA805BC4F9AE02.roa
File: 90FE7F9E3B1411EDADCA805BC4F9AE02.roa (raw, json)
Hash identifier: pjuWvJvYWEgPPQM+QbT+KqfTCORa7DkN8tjmNg4oUjg=
Subject key identifier: 45:EC:B8:7E:C1:44:9A:8B:1A:A7:47:30:43:2B:16:04:FE:79:FC:14
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5DCF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90FE7F9E3B1411EDADCA805BC4F9AE02.roa
Signing time: Tue 27 Sep 2022 13:31:47 +0000
ROA not before: Tue 27 Sep 2022 13:31:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141875
IP address blocks: 45.125.252.0/22 maxlen: 22
45.125.252.0/24 maxlen: 24
45.125.253.0/24 maxlen: 24
45.125.254.0/24 maxlen: 24
45.125.255.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24015 (0x5dcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 27 13:31:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6332fb42-4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:55:fd:d2:e2:16:37:50:af:d2:75:f6:25:
45:bc:7e:41:e6:21:76:e9:81:b0:62:9d:fb:ae:73:
d7:1f:a3:ba:24:ab:0e:b6:1e:86:58:6d:cf:51:d8:
d7:c4:a6:32:2a:10:33:f7:5a:28:c5:a9:9e:09:da:
47:1e:89:1d:05:16:30:b2:24:6a:02:1c:64:f0:cb:
7f:ee:f0:9c:53:1f:32:d1:50:87:23:86:dc:e4:fa:
5a:b5:49:80:c6:51:b2:a3:8a:56:7e:44:10:84:02:
fc:e4:d5:97:80:58:c6:1b:4c:29:5f:20:9c:b5:e3:
97:19:dd:b8:11:28:a3:58:e1:26:65:82:eb:b8:d3:
ee:f7:2e:44:05:38:a0:dd:36:dc:59:0a:2f:6c:fd:
c8:f3:1c:c1:ec:1b:0d:79:22:42:b7:53:0f:db:03:
8b:b0:60:2f:29:98:7e:88:85:d4:81:ac:34:c9:3d:
c1:73:a0:67:0c:00:00:57:fc:cc:eb:ca:bd:b4:c9:
93:d1:f6:3e:79:72:e2:16:2f:0c:6c:bd:d9:d1:1e:
52:45:ed:d0:1f:75:b6:97:3e:d8:c2:bd:c8:1b:b8:
f6:7a:9b:03:ef:f0:1f:50:d2:4b:d9:b5:ce:1b:27:
f5:b8:17:89:91:c1:01:68:41:23:2b:f8:a3:c7:92:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:B8:7E:C1:44:9A:8B:1A:A7:47:30:43:2B:16:04:FE:79:FC:14
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90FE7F9E3B1411EDADCA805BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.252.0/22
103.165.88.0/23
Signature Algorithm: sha256WithRSAEncryption
49:d4:7e:78:0f:6a:9f:0c:67:63:73:d5:b1:bb:8b:28:40:1c:
4f:27:f1:7f:b2:bf:ba:9a:02:0f:ca:da:85:ba:c1:47:d3:84:
b6:d2:46:20:71:d0:bb:77:9a:57:1a:78:be:a3:90:cd:30:81:
4a:08:e0:b0:2a:c1:f3:95:07:a6:a4:5c:39:f7:97:88:14:52:
28:30:84:e5:1b:e9:de:ee:6c:ad:b3:11:1d:22:9f:24:1d:ee:
33:67:e5:59:13:3c:bf:e9:27:7e:df:20:0e:48:ed:6e:ea:95:
7f:7d:b5:02:41:78:67:f8:0e:79:67:43:ac:fc:2a:1c:8b:ba:
d4:b2:ea:9a:df:fd:fd:15:e9:30:ab:8f:8e:fe:9a:47:3a:41:
b8:80:f1:b7:a9:f7:3f:ba:7d:80:ca:94:ad:dc:e1:df:bd:52:
30:2f:4a:d3:66:4b:62:ad:bb:cc:12:54:db:1d:8c:f8:00:8e:
25:9f:95:3d:cd:b5:7d:42:3a:79:c0:db:8e:98:fd:10:71:35:
f3:ad:56:30:74:62:a4:15:cf:eb:01:e3:7a:b7:69:0f:15:96:
38:0d:e5:41:91:3d:e5:b2:aa:bb:55:1d:3d:a1:b0:a3:1c:58:
93:3c:aa:e0:4f:44:02:6e:4b:b9:08:1a:32:2e:dc:73:6f:bd:
2d:b8:eb:51
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICXc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwOTI3MTMzMTQ3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzMyZmI0Mi00YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshRV/dLiFjdQr9J19iVFvH5B5iF26YGwYp37rnPXH6O6JKsOth6GWG3PUdjX
xKYyKhAz91ooxameCdpHHokdBRYwsiRqAhxk8Mt/7vCcUx8y0VCHI4bc5PpatUmA
xlGyo4pWfkQQhAL85NWXgFjGG0wpXyCcteOXGd24ESijWOEmZYLruNPu9y5EBTig
3TbcWQovbP3I8xzB7BsNeSJCt1MP2wOLsGAvKZh+iIXUgaw0yT3Bc6BnDAAAV/zM
68q9tMmT0fY+eXLiFi8MbL3Z0R5SRe3QH3W2lz7Ywr3IG7j2epsD7/AfUNJL2bXO
Gyf1uBeJkcEBaEEjK/ijx5KOewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEXsuH7B
RJqLGqdHMEMrFgT+efwUMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTBGRTdGOUUz
QjE0MTFFREFEQ0E4MDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAItffwDBAFnpVgwDQYJKoZIhvcNAQELBQADggEBAEnUfngP
ap8MZ2Nz1bG7iyhAHE8n8X+yv7qaAg/K2oW6wUfThLbSRiBx0Lt3mlcaeL6jkM0w
gUoI4LAqwfOVB6akXDn3l4gUUigwhOUb6d7ubK2zER0inyQd7jNn5VkTPL/pJ37f
IA5I7W7qlX99tQJBeGf4DnlnQ6z8KhyLutSy6prf/f0V6TCrj47+mkc6QbiA8bep
9z+6fYDKlK3c4d+9UjAvStNmS2Ktu8wSVNsdjPgAjiWflT3NtX1COnnA246Y/RBx
NfOtVjB0YqQVz+sB43q3aQ8VljgN5UGRPeWyqrtVHT2hsKMcWJM8quBPRAJuS7kI
GjIu3HNvvS2461E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org