Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1246F22CD3C11ECA4C3EE49C4F9AE02.roa
File: B1246F22CD3C11ECA4C3EE49C4F9AE02.roa (raw, json)
Hash identifier: P6W4fMaC4a9H3tCEi7byLhk3uzkQzC9vd7TM2ZEtuTw=
Subject key identifier: 81:11:B5:19:88:00:73:A7:D9:41:13:5F:7A:7D:83:F9:07:58:19:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 54FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1246F22CD3C11ECA4C3EE49C4F9AE02.roa
Signing time: Mon 16 May 2022 04:32:41 +0000
ROA not before: Mon 16 May 2022 04:32:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45954
IP address blocks: 43.254.176.0/24 maxlen: 24
103.7.80.0/22 maxlen: 24
103.235.68.0/24 maxlen: 24
103.235.69.0/24 maxlen: 24
103.235.70.0/24 maxlen: 24
103.235.71.0/24 maxlen: 24
150.107.100.0/22 maxlen: 24
180.150.240.0/22 maxlen: 24
223.255.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21759 (0x54ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:32:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d3e8-6c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:2b:74:d4:20:8a:95:d3:d4:2a:5c:d0:63:
92:f6:d9:d7:d8:62:63:eb:c4:7a:e5:d1:4b:a5:91:
4d:02:8f:96:8b:b7:47:27:05:db:c6:97:36:2f:0f:
e1:4d:62:84:17:4f:3d:28:c5:38:29:2d:cb:fe:9c:
2d:8c:66:22:c0:57:e1:4a:70:76:12:45:d0:8b:40:
d7:8a:5e:be:8b:b8:7a:55:c6:16:8d:0f:9a:f5:2e:
a1:85:37:43:a8:08:d6:6b:30:25:bf:6b:6c:fe:ad:
1e:b7:43:d2:02:8a:42:4d:ef:d4:99:0e:74:38:6e:
cf:4f:97:a6:db:73:8b:9b:06:4d:2c:b9:dd:fe:f7:
36:e7:d7:32:48:72:98:d6:34:06:17:e3:f8:63:23:
33:49:67:f9:06:e3:f1:77:d8:51:d0:47:69:4b:12:
dc:63:84:8d:c4:1e:a6:0b:1d:cb:40:77:6d:c0:66:
62:7f:ae:eb:2c:fc:6b:68:3d:7c:1a:a4:64:df:e4:
8a:6e:df:c4:d4:49:68:bb:7b:15:f5:a5:83:47:ae:
4f:60:76:4a:5b:90:6c:0b:bf:9f:df:c3:df:3d:4f:
82:e5:8a:00:af:35:7c:5c:6e:cf:7e:43:78:39:a1:
77:24:98:f8:bb:7b:69:20:fa:a2:c6:1b:d8:8f:28:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:B5:19:88:00:73:A7:D9:41:13:5F:7A:7D:83:F9:07:58:19:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1246F22CD3C11ECA4C3EE49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.176.0/24
103.7.80.0/22
103.235.68.0/22
150.107.100.0/22
180.150.240.0/22
223.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e8:0c:18:48:75:b9:11:ee:65:6b:00:17:79:33:5e:91:d2:
7a:4f:06:39:33:3e:ae:d7:e9:36:e2:79:92:cf:51:a0:62:e1:
98:07:07:89:6c:30:1c:60:7e:06:f7:0d:c5:9b:f9:26:04:92:
d2:68:de:e5:b4:a3:b1:88:fd:3b:4b:92:33:e6:e4:20:d5:c6:
de:f7:1a:e8:e5:bf:b9:55:55:8b:14:ac:1a:72:27:dd:6b:bf:
a0:7c:ec:d1:59:2c:e2:30:3b:aa:2a:92:53:88:6c:07:d1:9d:
2c:11:56:34:bf:b2:1f:6e:87:d2:b1:73:38:00:01:e7:e3:f7:
9b:b7:3f:d5:fd:ff:6e:b2:46:5f:8b:c8:b2:c3:83:7e:c5:eb:
0b:3c:8d:d4:34:8f:cd:24:27:9c:6b:75:a1:30:c6:d5:1d:b4:
2f:8c:1a:fd:47:60:52:5d:cd:9c:7a:f2:87:d1:93:fe:29:70:
bf:5d:5f:6a:ba:5d:b4:cb:06:5a:00:84:15:12:34:e3:61:0b:
9d:f4:74:ab:1a:86:d8:08:1b:9a:6e:d1:59:b4:02:75:82:e5:
bd:76:97:c0:b5:11:14:e1:d1:d3:0d:37:ac:df:72:9f:6a:33:
4b:88:bd:fe:6c:d4:fa:8f:b7:43:4c:04:82:7a:41:fd:90:a5:
c2:6e:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org