Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1D04CC8C4D611EA87160A1CC4F9AE02.roa
File: A1D04CC8C4D611EA87160A1CC4F9AE02.roa (raw, json)
Hash identifier: ZYxWrojjkJKSc4NI7N/QgINMI268JOoh0RlWpYzRVtA=
Subject key identifier: F8:A0:43:39:3E:AF:4F:A7:23:99:C7:58:5A:DA:28:C9:02:90:F4:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5003
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1D04CC8C4D611EA87160A1CC4F9AE02.roa
Signing time: Mon 16 May 2022 04:08:59 +0000
ROA not before: Mon 16 May 2022 04:08:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134916
IP address blocks: 103.113.29.0/24 maxlen: 24
103.132.206.0/24 maxlen: 24
103.211.152.0/22 maxlen: 24
2402:e5c0::/32 maxlen: 32
2402:e5c0::/36 maxlen: 36
2402:e5c0:1000::/36 maxlen: 36
2402:e5c0:2000::/36 maxlen: 36
2402:e5c0:3000::/36 maxlen: 36
2402:e5c0:4000::/36 maxlen: 36
2402:e5c0:5000::/36 maxlen: 36
2402:e5c0:6000::/36 maxlen: 36
2402:e5c0:7000::/36 maxlen: 36
2402:e5c0:8000::/36 maxlen: 36
2402:e5c0:9000::/36 maxlen: 36
2402:e5c0:a000::/36 maxlen: 36
2402:e5c0:b000::/36 maxlen: 36
2402:e5c0:c000::/36 maxlen: 36
2402:e5c0:d000::/36 maxlen: 36
2402:e5c0:e000::/36 maxlen: 36
2402:e5c0:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20483 (0x5003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:08:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ce5a-b62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:1c:37:b4:0b:b1:59:0b:d6:0f:61:09:a6:
66:c9:48:2b:90:8c:4a:a8:70:f2:63:c2:cd:b3:73:
24:9d:2c:bf:ae:81:0f:17:5e:04:e9:90:f1:8c:fc:
ac:7d:37:b2:40:5c:ff:fc:e8:9b:0c:91:73:8c:b6:
3d:3d:3f:60:5a:8f:16:19:81:c3:c8:03:55:11:f1:
2f:4d:ee:90:cb:5c:5f:b5:ab:c8:52:03:6d:16:38:
27:60:01:bf:f3:ef:a0:32:46:09:48:e2:b2:0a:00:
be:e8:c9:be:ad:c1:71:ff:00:86:e3:88:ec:4e:65:
cc:bb:f8:f6:ed:24:35:8c:bf:26:59:e1:f3:60:5b:
a7:27:bc:0e:42:8f:ee:91:c9:c4:e7:ee:68:e2:77:
7f:15:70:f9:ed:82:2a:25:18:da:aa:94:a4:e2:6c:
73:0c:58:3b:7d:89:88:b5:86:80:26:fc:78:cb:14:
27:61:85:fb:c1:83:58:a2:97:f8:95:99:7f:19:90:
e9:d1:ee:ca:48:0a:3a:db:61:e0:6a:b5:6e:ef:6c:
3c:5d:f5:21:7a:8c:64:f0:06:23:fd:cd:1d:c7:17:
54:d4:ca:11:47:77:d9:b7:cf:05:e7:a5:f4:44:57:
ed:8c:b6:2f:78:44:e9:dd:a2:13:ce:43:7b:db:82:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:43:39:3E:AF:4F:A7:23:99:C7:58:5A:DA:28:C9:02:90:F4:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1D04CC8C4D611EA87160A1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.29.0/24
103.132.206.0/24
103.211.152.0/22
IPv6:
2402:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:d9:0f:47:60:73:ef:8b:ba:3f:b8:36:aa:72:e9:76:2b:e7:
f0:72:5a:f0:e9:7b:0e:9e:7c:1c:67:75:90:50:ed:b7:01:d2:
c8:e7:d6:ce:b7:5e:0f:71:8b:11:b2:0d:c3:a2:46:cc:9a:f2:
db:28:67:ad:f8:1c:25:fd:15:a5:e8:15:fc:4a:ea:50:71:1a:
c6:14:84:07:9a:71:0b:56:a8:dc:74:d6:88:d8:fb:34:9f:0d:
f6:45:a3:93:04:4e:de:e8:93:db:38:51:c8:5a:38:77:b9:83:
00:a6:be:ab:0e:1e:b6:16:87:ed:da:42:b8:ee:0d:1a:97:96:
6a:cc:f6:e7:e2:b1:c3:e4:d1:b5:f1:85:63:a6:c2:07:be:e5:
5b:0b:29:bd:c3:aa:da:2c:59:fa:42:8a:9f:e4:da:9f:3d:4e:
14:b5:8c:74:67:01:9c:48:f1:47:f8:b1:37:ab:2b:d4:ac:e0:
e4:bd:cd:cd:9d:9c:28:4f:74:05:b0:98:90:62:47:d8:d3:ae:
17:c2:99:7f:42:67:b1:16:a2:dd:be:2e:a9:ff:9c:d3:d5:23:
74:d4:fd:d7:77:fa:5e:1d:a4:85:b9:e3:d0:0c:ec:ab:18:ec:
9f:5b:55:c5:23:49:c4:6a:72:ad:6c:ed:ca:e9:9f:e7:0a:0e:
f0:71:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org