Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C77D79681D5911EDBE0AB35DC4F9AE02.roa
File: C77D79681D5911EDBE0AB35DC4F9AE02.roa (raw, json)
Hash identifier: IMlDtQoslhmrlsXGGmF0TOWDfKZuo4hgzxvfTO6UWxU=
Subject key identifier: 94:0D:35:1F:71:66:C2:74:F4:DE:2F:99:25:B4:4D:09:CB:DD:76:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5B7A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C77D79681D5911EDBE0AB35DC4F9AE02.roa
Signing time: Tue 16 Aug 2022 11:51:36 +0000
ROA not before: Tue 16 Aug 2022 11:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.163.14.0/23 maxlen: 23
103.163.15.0/24 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 23
103.167.239.0/24 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.23.0/24 maxlen: 24
103.168.32.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 23
103.177.227.0/24 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.121.0/24 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 23
103.181.85.0/24 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23418 (0x5b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 16 11:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fb84c7-dfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:d3:64:3f:7b:24:62:64:10:87:21:78:06:
39:db:3a:80:15:c2:c5:19:b9:2f:56:a1:a8:5b:bf:
f1:ea:1d:e9:e7:f2:0c:7f:c4:03:5f:77:a1:a8:1e:
2d:a3:0e:ea:3e:09:f6:ae:d7:90:b4:b1:b6:28:34:
c7:63:e3:9e:2d:1e:c7:ee:ea:4e:41:bb:48:af:ca:
6c:f2:bc:ba:be:80:28:eb:60:6c:93:c6:fd:37:72:
58:46:02:01:4a:07:f0:49:a6:bf:52:e5:b9:11:70:
a0:b6:14:4d:db:81:9d:51:bb:b9:15:72:85:2d:19:
82:5f:0c:1f:02:09:49:f4:dc:75:4c:4b:41:6b:88:
dc:05:cd:4c:45:0b:ed:0b:2f:1a:49:85:30:1f:a0:
cd:ad:a3:88:8d:d6:1a:e0:77:b1:fe:bb:36:7e:6d:
c0:61:88:a7:76:8b:41:7b:f9:19:b1:a2:e0:e7:aa:
79:3e:e4:af:35:54:8c:a8:9c:8c:3b:63:ce:f2:52:
8d:bb:4d:78:89:61:be:bc:ff:83:0b:14:78:19:e1:
dd:8a:16:ac:5b:67:b8:e3:c5:b3:ff:22:d4:f3:30:
c3:6b:b3:80:af:81:2a:c8:7c:c3:e7:29:d9:5e:5c:
8c:45:8d:6e:46:45:51:0e:4e:f8:11:b5:1f:55:f2:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:35:1F:71:66:C2:74:F4:DE:2F:99:25:B4:4D:09:CB:DD:76:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C77D79681D5911EDBE0AB35DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.14.0/23
103.167.224.0/23
103.167.238.0/23
103.168.0.0/23
103.168.23.0/24
103.168.32.0/23
103.170.36.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0/23
103.179.121.0/24
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.238.0/23
103.181.64.0/23
103.181.84.0/23
103.181.110.0/23
103.181.114.0/23
103.181.152.0/22
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.189.82.0/23
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ad:36:11:b0:90:dc:ba:de:e3:22:3f:59:9d:21:c6:b0:70:
e2:fb:08:d9:d8:49:99:26:39:d0:3d:57:ec:03:cc:63:85:c4:
8a:58:1f:da:85:4a:44:3d:49:7d:76:d0:34:0e:61:3e:44:2a:
d4:07:c2:86:20:0c:fc:cd:a2:ad:9d:29:34:42:3e:e9:4a:fd:
64:bb:f1:3d:71:a6:0f:77:da:6a:aa:76:64:04:e5:aa:a8:49:
d5:be:08:20:c4:b0:f2:f2:bd:d2:44:80:d1:43:f5:3a:ef:f5:
54:34:cb:4b:5a:23:ff:ec:02:c9:83:7c:5e:37:6f:26:02:46:
b2:6b:46:94:29:bf:67:70:c8:36:04:8f:e9:a2:d4:12:51:14:
99:ff:3a:80:aa:be:d4:e5:53:39:af:7c:d6:a4:d1:f3:96:b4:
17:5d:6c:83:cc:05:1e:9f:c4:5f:8c:92:9b:16:a6:cf:89:9c:
52:e6:76:da:7a:0e:fc:40:11:3d:2d:10:ed:92:ab:b1:cd:d2:
89:d8:4a:94:d9:46:48:a0:ba:78:1f:da:26:ab:26:27:23:a0:
c3:3c:97:0e:09:dc:db:24:a1:cf:d0:11:07:21:a4:55:bc:29:
31:69:b7:c0:3f:39:73:ce:0f:9c:6a:e0:88:bf:9a:f8:3f:d3:
e2:24:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org