Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E694D9EF87011ECAA22AA1FC4F9AE02.roa
File: 9E694D9EF87011ECAA22AA1FC4F9AE02.roa (raw, json)
Hash identifier: G6z97aajY/HdVtvTo9WS2k6dC8bWawUVnixXCwSvmmI=
Subject key identifier: 29:6A:3C:DD:DF:40:EE:F3:9B:E1:18:46:52:47:79:DD:D3:B0:20:C8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 594B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E694D9EF87011ECAA22AA1FC4F9AE02.roa
Signing time: Thu 14 Jul 2022 06:41:32 +0000
ROA not before: Thu 14 Jul 2022 06:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.82.48.0/22 maxlen: 24
103.114.64.0/22 maxlen: 24
103.163.14.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.194.118.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.229.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22859 (0x594b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 14 06:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62cfba9c-218f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:56:bb:a4:f5:f9:46:e1:d3:fa:26:5f:a1:
a9:7e:a6:cd:c7:51:49:53:69:f5:e7:e0:44:18:55:
9c:c0:bd:b6:1d:a4:32:9c:85:42:a9:90:eb:a0:72:
40:03:7d:54:02:7a:f3:64:21:85:de:24:2e:de:6e:
e3:f0:f6:db:6d:35:6d:ea:05:40:cc:2b:be:f8:2d:
55:14:f3:f2:44:13:3f:51:cb:4a:3b:cf:b6:e9:21:
e7:8b:67:cd:90:e1:85:6e:28:79:06:ca:1d:28:fa:
da:1d:6e:a5:06:6c:c3:93:8d:53:a6:54:c7:e5:74:
02:24:7c:6a:9a:c1:16:a4:5b:b9:a0:4c:d6:87:69:
e1:e6:ba:dc:a4:f0:4f:9c:e6:fc:82:a1:34:c6:ea:
4e:71:86:21:a8:da:e9:1d:67:cb:be:40:27:1f:0b:
cd:89:15:d7:e8:cd:63:09:b0:68:46:dc:94:b0:82:
ee:0c:8f:fa:7d:e7:d1:d7:c7:d6:4a:ba:d0:d1:3a:
96:a1:ad:15:5e:ab:4f:87:0b:6e:30:6a:a8:a0:2c:
74:38:60:a3:d8:28:42:f9:0c:2a:30:79:2e:9b:b6:
63:05:a7:fd:f6:8d:e3:84:7c:39:5c:d9:6f:be:35:
f7:40:fe:f0:2e:7e:38:3e:87:82:55:df:2d:54:43:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:3C:DD:DF:40:EE:F3:9B:E1:18:46:52:47:79:DD:D3:B0:20:C8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E694D9EF87011ECAA22AA1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.48.0/22
103.114.64.0/22
103.163.14.0/23
103.167.212.0/23
103.167.224.0/23
103.167.238.0/23
103.168.0.0/23
103.168.32.0/23
103.168.60.0/23
103.170.36.0/22
103.170.148.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.178.166.0/23
103.178.202.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.187.92.0/23
103.189.82.0/23
103.194.118.0/24
103.212.134.0/24
103.229.208.0/22
Signature Algorithm: sha256WithRSAEncryption
84:27:db:fa:f7:53:65:70:a9:de:f5:e9:21:fb:c4:5c:e5:9c:
ae:5e:f5:f7:08:f1:8b:15:f2:d4:f9:b8:38:1a:f6:52:1f:16:
f8:d2:0a:d2:35:99:04:f8:7c:8d:fa:68:25:57:8d:5f:38:58:
09:e7:2f:48:dc:2b:ca:34:97:c2:da:66:a7:3e:c8:b2:0c:91:
85:fe:27:39:26:e7:cc:cd:f7:85:ec:8a:f6:33:f5:0e:10:47:
33:0b:01:97:1c:e1:49:79:21:48:dd:0f:a9:0f:7d:36:21:4b:
46:4e:af:57:4e:be:d1:7a:6b:f8:ed:fc:20:7e:18:0a:2a:47:
78:53:a4:df:3c:4a:12:28:b1:07:e3:cd:4a:fb:56:b4:90:b2:
4d:f3:14:13:29:71:ee:7f:e8:a9:81:61:2e:93:55:3e:fa:9b:
50:f3:e1:6c:fd:05:74:1e:f6:e7:08:b0:25:e7:bc:7b:24:6e:
90:47:86:f5:61:1c:c4:23:b0:0c:39:49:16:17:c6:e1:58:a5:
93:a7:34:b4:af:36:45:a0:67:76:5b:cf:00:65:98:c4:51:43:
39:59:b6:89:8b:28:24:68:07:9f:3e:02:71:7f:c4:b7:88:7f:
8e:44:bc:04:5a:25:ab:ba:f6:22:19:a7:94:b7:11:d0:8f:b8:
fb:fb:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org