Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B92300BCFDF711EC896E7D74C4F9AE02.roa
File: B92300BCFDF711EC896E7D74C4F9AE02.roa (raw, json)
Hash identifier: EiO5wmz+cLCqVyZLD+m4iiQ1gjPnbS0CTaTfZ4+Zg+0=
Subject key identifier: A1:3F:4A:3B:B0:63:D6:37:5E:68:68:31:8C:91:B5:EE:27:AF:2D:1C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 63EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B92300BCFDF711EC896E7D74C4F9AE02.roa
Signing time: Mon 30 Jan 2023 05:21:40 +0000
ROA not before: Mon 30 Jan 2023 05:21:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140171
IP address blocks: 103.38.182.0/23 maxlen: 24
103.53.30.0/23 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.162.160.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25582 (0x63ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 30 05:21:40 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d753e3-5555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:76:73:fb:2f:62:7a:cb:31:74:e1:03:f9:
52:9b:f4:7b:ac:77:8d:cc:6b:3a:80:9e:99:92:07:
cf:82:08:1e:87:a4:9c:08:71:dc:d2:fb:cb:03:10:
1f:95:58:49:a7:73:9a:3e:18:9c:b9:8a:e4:9c:f3:
01:fd:26:e6:46:47:7a:db:70:43:5c:75:6a:95:69:
c0:44:9e:60:a7:6b:d1:d9:4e:92:b2:34:d0:a1:1c:
03:bb:07:73:c1:49:b9:ba:f6:22:f0:6b:d1:ec:57:
d3:78:65:83:1b:3b:82:c6:7d:39:a7:a3:19:56:b3:
32:45:74:00:14:bc:29:e1:f3:87:e4:4f:fc:d0:1e:
0b:5d:bc:9b:80:7a:f6:fa:4e:cb:9a:d5:5f:de:dd:
44:13:63:9d:51:53:36:80:05:d2:6c:21:94:cb:3b:
f3:34:0b:ec:11:d7:c6:57:2d:21:f1:89:81:0c:54:
0a:bb:c9:8b:7e:bb:a0:af:1b:d4:e0:58:3b:98:fe:
60:30:c5:49:d7:45:7e:2d:8e:62:1c:6a:9a:51:d1:
e6:b4:47:97:4f:a2:24:31:53:01:17:24:da:72:52:
68:19:75:00:19:40:56:fe:75:71:10:61:e4:0f:db:
f2:78:01:0a:11:f4:eb:71:24:e0:38:c5:6c:89:18:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:4A:3B:B0:63:D6:37:5E:68:68:31:8C:91:B5:EE:27:AF:2D:1C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B92300BCFDF711EC896E7D74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.182.0/23
103.53.30.0/23
103.77.14.0/24
103.80.152.0/22
103.144.192.0/24
103.156.200.0/23
103.159.162.0/24
103.161.32.0/23
103.162.160.0/24
103.163.42.0/23
103.163.158.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
IPv6:
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
Signature Algorithm: sha256WithRSAEncryption
9a:21:be:5c:d4:f2:50:92:5a:54:23:3d:2c:7b:c1:50:10:7c:
f8:0e:22:e3:8a:04:82:18:ec:10:28:8d:4e:8b:74:e4:91:65:
ab:9c:30:fc:44:62:3f:fa:44:c2:f6:7b:8f:e0:4b:bd:bd:22:
2d:84:55:c4:38:39:a4:07:d2:91:ca:b3:36:4d:c4:eb:89:0e:
6d:49:cb:1b:d0:b5:09:1a:d3:5b:d6:df:e2:8f:d6:a7:8c:01:
14:4f:66:ce:d5:03:e9:53:47:48:69:c9:e8:a2:83:09:ea:24:
9e:20:7d:70:d8:46:35:b6:d1:1f:9d:cd:3b:b5:92:3e:3c:ef:
fa:fc:ed:dc:63:c7:a0:f5:c8:44:2b:18:6f:1d:1a:b3:31:c6:
7e:80:22:15:7f:e4:5d:4d:9f:a1:f1:10:83:90:0a:61:98:f5:
31:45:0e:e1:82:5f:0a:0d:8a:f1:36:93:92:67:ee:e9:4a:4b:
f6:6a:68:13:df:29:66:d0:92:d6:33:2e:6c:f1:b0:58:97:17:
f4:3b:82:42:10:bb:0e:42:6c:5f:30:b6:2e:fb:21:a9:f7:af:
d4:36:d0:30:05:07:f4:ba:60:2c:10:cb:8e:61:ff:10:a0:38:
a5:29:fe:c6:f4:0c:2a:08:69:29:65:b7:b3:00:da:fb:4a:6a:
60:1b:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org