Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACD1CF54528611EC807D277AC4F9AE02.roa
File: ACD1CF54528611EC807D277AC4F9AE02.roa (raw, json)
Hash identifier: zJovV3RLNmQ/SscpjIBHPFHYReQfafPuCmusyl2H49I=
Subject key identifier: 50:C7:9C:E7:9B:45:81:F3:DC:89:72:BB:97:93:D8:F0:28:BD:F1:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C55
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACD1CF54528611EC807D277AC4F9AE02.roa
Signing time: Tue 30 Aug 2022 07:51:39 +0000
ROA not before: Tue 30 Aug 2022 07:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134319
IP address blocks: 103.75.32.0/24 maxlen: 24
103.75.33.0/24 maxlen: 24
103.75.34.0/24 maxlen: 24
103.75.35.0/24 maxlen: 24
103.85.132.0/23 maxlen: 23
103.106.192.0/24 maxlen: 24
103.106.193.0/24 maxlen: 24
103.106.194.0/24 maxlen: 24
103.106.195.0/24 maxlen: 24
103.194.88.0/22 maxlen: 22
103.194.88.0/24 maxlen: 24
103.194.89.0/24 maxlen: 24
103.194.90.0/24 maxlen: 24
103.194.91.0/24 maxlen: 24
103.206.128.0/24 maxlen: 24
103.206.129.0/24 maxlen: 24
103.206.130.0/24 maxlen: 24
103.206.131.0/24 maxlen: 24
2001:df2:4480::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23637 (0x5c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 30 07:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630dc18b-7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:dc:2d:dd:4a:42:fb:d4:25:24:67:c7:eb:
4f:cb:39:80:ee:b0:ce:09:89:32:3b:a5:9d:0b:1d:
25:86:d8:18:30:7e:e3:c4:1a:35:1f:ed:b8:55:61:
64:1a:32:b9:9a:92:d3:6e:eb:3c:e1:21:39:96:5a:
d3:60:b9:84:8c:95:50:16:04:47:60:da:3b:a1:71:
44:f5:6e:83:bf:49:68:be:ad:3d:d7:17:60:ff:1b:
12:e9:6d:77:5e:67:05:65:0b:20:12:4e:fe:91:e3:
7d:76:74:83:90:c2:fb:df:16:ad:59:13:35:ec:00:
32:96:64:61:ab:be:47:26:77:d9:d7:b8:e2:80:13:
ff:98:cf:30:b6:04:0e:80:8d:d9:da:c9:79:87:e1:
e5:47:14:f1:0e:e8:e2:3a:1a:cc:81:5d:64:47:d3:
1b:a9:67:d4:64:b3:6a:c8:df:31:e8:03:39:cc:44:
97:de:5b:b0:6a:52:a9:42:ac:5a:e5:05:a5:97:81:
86:d7:46:2d:23:58:9e:7b:3c:ea:14:8a:6b:f6:07:
c8:0f:55:8d:e7:65:bf:1c:0e:e0:96:e6:c7:6b:5f:
4a:4d:9b:d3:50:b5:a7:e2:5a:9f:fe:cd:c5:c8:2e:
08:d7:8f:64:7c:77:3b:44:d2:e2:f4:5a:c2:5d:d1:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:9C:E7:9B:45:81:F3:DC:89:72:BB:97:93:D8:F0:28:BD:F1:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACD1CF54528611EC807D277AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.32.0/22
103.85.132.0/23
103.106.192.0/22
103.194.88.0/22
103.206.128.0/22
IPv6:
2001:df2:4480::/48
Signature Algorithm: sha256WithRSAEncryption
22:4d:4d:59:5f:3e:44:27:50:40:39:47:eb:34:d2:a7:f5:b5:
82:76:3c:cb:1f:92:1f:20:d5:7b:f1:fd:f0:a6:ca:30:c1:43:
fd:1f:24:6e:7f:19:49:33:81:1e:3b:72:1f:b4:f8:af:08:6d:
aa:85:0f:5e:34:12:95:f4:4f:50:bc:85:ac:ff:82:fc:c1:5d:
0f:90:d6:18:b4:81:1b:f1:df:3e:67:c7:62:61:64:aa:52:7d:
91:37:af:f7:2b:07:57:00:84:db:18:38:2b:b9:76:a3:0f:5b:
d0:27:36:46:30:b7:24:25:e1:0a:08:b4:e1:d9:73:e5:0c:f8:
09:2b:57:6d:6d:18:23:60:e2:41:88:5c:01:ce:0c:bb:07:c6:
cd:55:55:7f:92:35:17:06:32:50:66:52:31:ce:55:13:66:dc:
fa:e0:e7:46:aa:78:36:80:75:fe:2f:e8:9e:7c:03:6b:6c:b7:
ad:df:52:1f:96:a1:1e:1f:bd:d2:2e:fe:15:20:f6:a7:91:bc:
57:c7:e5:84:f4:d3:28:56:04:06:d8:8c:94:3b:b2:93:31:85:
dd:6e:27:7e:a5:a5:c3:c6:2c:c5:b7:4b:09:87:d6:ed:3b:5d:
8e:be:8c:f4:25:4a:7a:27:55:e6:4f:0c:92:f1:71:60:b8:72:
6f:4f:10:e5
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgICXFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwODMwMDc1MTM5WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzBkYzE4Yi03NjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPTcLd1KQvvUJSRnx+tPyzmA7rDOCYkyO6WdCx0lhtgYMH7jxBo1H+24VWFk
GjK5mpLTbus84SE5llrTYLmEjJVQFgRHYNo7oXFE9W6Dv0lovq091xdg/xsS6W13
XmcFZQsgEk7+keN9dnSDkML73xatWRM17AAylmRhq75HJnfZ17jigBP/mM8wtgQO
gI3Z2sl5h+HlRxTxDujiOhrMgV1kR9MbqWfUZLNqyN8x6AM5zESX3luwalKpQqxa
5QWll4GG10YtI1ieezzqFIpr9gfID1WN52W/HA7glubHa19KTZvTULWn4lqf/s3F
yC4I149kfHc7RNLi9FrCXdHdUQIDAQABo4ICvjCCArowHQYDVR0OBBYEFFDHnOeb
RYHz3Ilyu5eT2PAovfHEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUNEMUNGNTQ1
Mjg2MTFFQzgwN0QyNzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E
OTA3MCQEAgABMB4DBAJnSyADBAFnVYQDBAJnasADBAJnwlgDBAJnzoAwDwQCAAIw
CQMHACABDfJEgDANBgkqhkiG9w0BAQsFAAOCAQEAIk1NWV8+RCdQQDlH6zTSp/W1
gnY8yx+SHyDVe/H98KbKMMFD/R8kbn8ZSTOBHjtyH7T4rwhtqoUPXjQSlfRPULyF
rP+C/MFdD5DWGLSBG/HfPmfHYmFkqlJ9kTev9ysHVwCE2xg4K7l2ow9b0Cc2RjC3
JCXhCgi04dlz5Qz4CStXbW0YI2DiQYhcAc4MuwfGzVVVf5I1FwYyUGZSMc5VE2bc
+uDnRqp4NoB1/i/onnwDa2y3rd9SH5ahHh+90i7+FSD2p5G8V8flhPTTKFYEBtiM
lDuykzGF3W4nfqWlw8YsxbdLCYfW7Ttdjr6M9CVKeidV5k8MkvFxYLhyb08Q5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org