Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3BB9AE4453611ED80ACF941C4F9AE02.roa
File: C3BB9AE4453611ED80ACF941C4F9AE02.roa (raw, json)
Hash identifier: OizFr+xrkQpM5ygzVQ6Yd5+E1cPYF+Fx/QQznjkLUNE=
Subject key identifier: E8:2F:05:CE:D4:14:18:8A:70:A3:9A:04:EA:D5:74:7B:A4:F3:0D:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5E63
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3BB9AE4453611ED80ACF941C4F9AE02.roa
Signing time: Mon 10 Oct 2022 07:01:53 +0000
ROA not before: Mon 10 Oct 2022 07:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150091
IP address blocks: 103.179.120.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.174.0/24 maxlen: 24
103.181.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24163 (0x5e63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 10 07:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6343c361-224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:92:1d:c3:42:d5:d4:37:3a:4c:14:21:a6:
52:78:17:a7:15:e6:97:b0:d3:91:16:22:e7:dc:65:
a8:68:40:51:64:f6:4e:ee:b8:6b:06:69:f2:d9:4f:
1f:d4:16:73:71:b7:ca:b9:2a:8f:c6:3c:6e:a0:9f:
fc:e3:a6:62:c3:41:4b:a0:af:5c:2d:f8:12:c1:f6:
7a:97:00:6f:f9:68:d6:93:38:97:8f:39:6e:60:d5:
cc:69:74:1d:1c:5e:3a:f5:47:d1:09:58:cb:26:33:
7d:11:38:52:9f:37:e5:a0:ba:83:6a:5e:c2:26:09:
75:79:c9:52:5c:3f:7b:26:5f:2d:9d:44:d3:2c:11:
87:e6:69:ef:f0:7a:5b:98:a7:fc:7d:ba:24:a9:df:
02:3d:65:8d:8c:66:7e:54:a7:bd:0b:df:40:dd:39:
89:8c:e5:80:fc:f4:ee:c8:b4:a0:ed:a5:dc:6d:fb:
a2:e7:6d:ea:1d:22:49:21:03:ad:ae:ab:93:62:99:
db:5c:e0:4e:3b:a1:80:bb:62:62:d4:7f:6c:e4:ec:
df:bb:9e:68:d0:73:66:97:39:24:84:a2:df:9c:7d:
fb:1f:5a:d1:29:58:ba:f1:2a:51:68:75:3e:15:83:
4d:2f:73:f7:ab:09:6c:c3:0f:2d:65:20:84:69:cc:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:05:CE:D4:14:18:8A:70:A3:9A:04:EA:D5:74:7B:A4:F3:0D:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3BB9AE4453611ED80ACF941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.120.0/23
103.180.168.0/23
103.180.212.0/23
103.181.86.0/23
103.181.150.0/23
103.181.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:eb:f8:54:3a:49:98:0d:94:41:28:0f:18:02:bc:46:bf:93:
97:f6:f1:e0:61:fe:26:a8:6d:5e:d1:38:57:af:aa:40:ce:5c:
ad:39:86:82:83:35:85:4c:cd:eb:e7:dc:74:5f:bb:a0:7c:e7:
c2:70:65:1f:18:7d:d8:f4:97:54:6a:70:d1:6b:9a:e8:f1:20:
a4:44:87:8a:50:89:a3:78:62:1f:3f:91:95:37:e9:66:1b:90:
8f:4d:5e:b5:b9:e8:0b:e7:b1:05:8e:c5:37:30:7a:4d:ba:39:
2c:90:72:58:72:51:11:91:77:4c:6b:3a:43:22:be:55:14:e4:
b7:8e:37:82:75:29:75:7b:7b:c0:e1:73:e6:56:58:21:8a:1c:
14:4d:2d:f8:fe:64:06:e3:77:5d:d9:96:4f:09:7a:9a:1d:9a:
24:93:68:13:01:f0:85:54:39:bc:34:91:9d:16:3c:38:b7:24:
d4:4d:14:00:ea:25:ce:fe:fc:2a:5e:79:43:cd:9c:ee:4e:73:
d0:bb:09:c3:20:9d:55:00:09:49:bf:cb:5f:aa:f0:cf:07:bc:
d6:6a:c2:e2:77:0f:42:76:ab:8d:c3:8b:98:6f:db:3b:b4:31:
cd:75:b8:ea:d8:3a:0c:3b:65:ee:a7:a2:bb:b8:df:61:ec:9a:
90:d9:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org