Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B773F3E4124111ED991DD055C4F9AE02.roa
File: B773F3E4124111ED991DD055C4F9AE02.roa (raw, json)
Hash identifier: n9Mitb+icTBHkPuTiIFnkzoeNFj8E67o+6ggYcbSo4M=
Subject key identifier: 22:51:AF:03:E7:E2:C6:76:49:59:44:B3:A0:C8:A3:B2:F0:EE:81:85
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5AA8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B773F3E4124111ED991DD055C4F9AE02.roa
Signing time: Tue 02 Aug 2022 09:01:38 +0000
ROA not before: Tue 02 Aug 2022 09:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.163.14.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23208 (0x5aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 2 09:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e8e7f2-e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:71:8a:f2:73:a9:01:13:96:d9:f7:a6:d8:
6f:a5:ad:59:95:a7:78:56:2c:c1:1a:8d:17:c8:e4:
c3:e6:a1:d6:81:9b:78:08:b1:41:f4:dc:77:50:06:
0c:61:70:70:89:14:78:ea:19:5d:65:e1:0a:20:99:
30:cd:3f:dc:a3:30:9d:fe:6c:2c:37:c6:74:22:7b:
f2:ed:c2:ce:64:7b:61:72:8c:1a:e1:42:55:a5:9a:
28:bd:98:76:1d:a0:c4:f6:ae:ab:18:dd:cd:0b:fe:
af:79:f7:27:0f:98:1f:37:cc:0f:64:5e:dd:9f:b1:
6f:74:15:76:63:21:d4:fa:83:81:41:29:68:93:fb:
5f:ac:84:69:6e:12:10:4a:c3:e0:de:cf:cd:7f:9c:
b9:ed:db:a0:74:3c:b9:cf:46:b7:a0:2e:e1:d4:08:
62:71:b6:76:d0:23:9e:9d:57:5d:ac:ef:17:79:32:
ea:67:52:e4:a4:25:17:fd:bf:af:f4:a8:fb:e8:83:
b3:5f:4f:cc:08:34:90:47:72:3d:de:26:ab:c8:f7:
83:37:e6:86:69:f7:54:86:80:38:38:79:b6:f4:bb:
68:d4:81:58:5d:40:88:1e:ba:f1:69:07:e8:12:5f:
d5:af:b1:36:fb:48:7d:db:0d:ee:15:0e:f3:e1:b6:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:AF:03:E7:E2:C6:76:49:59:44:B3:A0:C8:A3:B2:F0:EE:81:85
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B773F3E4124111ED991DD055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.14.0/23
103.167.212.0/23
103.167.224.0/23
103.167.238.0/23
103.168.0.0/23
103.168.32.0/23
103.168.60.0/23
103.170.36.0/22
103.170.148.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.178.166.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.187.92.0/23
103.189.82.0/23
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:57:a9:64:ea:b4:68:61:77:90:f2:cd:cf:cd:48:34:f1:
b6:e9:ff:ae:4e:a4:38:4f:8c:34:66:1e:e4:27:7c:6d:2b:e1:
52:bb:90:65:7e:03:d3:06:b7:07:5b:b6:d0:96:8a:e1:bb:b8:
e8:bb:dc:e0:3c:0e:e7:f4:60:51:2d:c9:d7:58:96:94:62:f2:
1b:5e:f7:3b:03:d9:3f:50:6c:cd:f9:98:d7:ce:09:48:ae:7b:
ac:6f:de:bb:a5:2a:af:7f:04:db:29:1c:2c:b2:fb:b9:f0:c3:
6c:6c:16:25:90:04:11:71:d1:c5:e6:ca:eb:23:bb:c5:7c:1d:
23:9b:03:2b:de:66:b5:d8:a3:6f:15:3b:9d:56:dc:8f:81:9b:
ed:05:a6:b1:84:7f:0a:53:91:a9:f6:e1:1f:cb:db:bc:b9:91:
62:1c:c9:6e:ff:a8:dc:21:15:aa:da:f7:cf:c0:22:da:f9:88:
10:6d:5c:84:ca:85:35:4f:2e:96:85:f2:5a:60:7d:19:f1:88:
ff:f6:1b:85:5f:8a:1d:3b:46:7d:da:23:9e:bb:a3:f0:7c:29:
33:67:bf:04:29:1b:e5:ee:06:07:3b:8e:a6:2e:f6:bf:fb:c8:
cc:d4:69:92:4f:7e:91:75:87:12:81:5a:84:53:c6:e0:c0:9c:
e3:7b:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org