Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA7F3F0E3A5311EDB9410C50C4F9AE02.roa
File: CA7F3F0E3A5311EDB9410C50C4F9AE02.roa (raw, json)
Hash identifier: 0vu+72G67Sg1yHHsOJK0Z4kEvytcaGZ6yGYoze98ru8=
Subject key identifier: 17:3B:E4:7C:04:8F:B0:D3:12:57:AB:D5:CA:3B:E5:85:57:1B:7F:C0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5DE6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA7F3F0E3A5311EDB9410C50C4F9AE02.roa
Signing time: Thu 29 Sep 2022 11:51:43 +0000
ROA not before: Thu 29 Sep 2022 11:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 23
103.181.85.0/24 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24038 (0x5de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 29 11:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633586cf-977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:90:0b:cb:74:c9:fe:af:d4:83:58:67:e4:
41:da:b4:a1:83:6f:0f:97:f4:ef:f8:45:54:14:54:
40:eb:41:dd:94:97:69:31:fe:56:a4:7b:5c:99:1b:
b4:66:01:94:06:a0:6f:f5:c6:05:d0:c5:14:7f:88:
b1:be:a6:ee:d3:4d:ae:0e:d7:89:4d:b9:e9:7e:bc:
58:50:db:40:09:95:6d:75:c1:2d:0d:a2:ae:6d:04:
bf:17:13:6e:3a:a3:ef:6d:d5:6d:fb:a4:85:cd:89:
73:b0:40:a7:89:1b:99:11:65:15:d6:02:53:0b:71:
5b:40:ca:f2:df:37:86:0f:01:a3:69:e1:3d:f6:6c:
b9:96:e7:26:e1:57:9b:e0:35:4d:e1:e5:fd:d5:8d:
f2:df:5d:1a:7b:dd:94:d5:5b:aa:76:75:0e:f8:87:
12:64:fc:e4:1b:3e:1a:80:c3:ea:cc:53:a0:00:92:
6e:0c:58:67:f6:82:0d:8d:e0:e1:97:0e:db:1e:b7:
c5:54:ed:0c:43:b5:2e:d1:7a:4e:a5:ad:55:2d:49:
2e:ae:25:02:41:ee:6f:53:3a:3a:4b:44:01:1c:97:
e0:1d:11:03:96:8b:bb:31:bf:03:cc:3e:46:d3:24:
d0:58:97:e3:ab:3c:94:e4:cf:f4:aa:d6:9d:83:8b:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:E4:7C:04:8F:B0:D3:12:57:AB:D5:CA:3B:E5:85:57:1B:7F:C0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA7F3F0E3A5311EDB9410C50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.238.0/23
103.181.64.0/23
103.181.84.0/23
103.181.110.0/23
103.181.114.0/23
103.181.152.0/22
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.189.82.0/23
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e9:24:d2:d1:f9:54:84:5e:72:6a:ce:7d:5a:71:9b:7b:f9:
1a:15:a2:8a:4e:07:2c:76:81:03:d7:95:1e:42:6d:e1:7a:9e:
db:cf:35:5c:8f:36:25:b5:ad:f6:84:85:38:05:24:5d:22:9d:
49:09:db:a3:66:72:c1:a0:62:a3:9d:a2:2c:64:fe:05:49:2b:
80:6f:09:be:e8:61:0a:65:73:7a:a2:dc:66:67:7d:1d:d9:ab:
b7:7e:38:79:a0:9d:75:dd:16:75:c9:9e:bc:6f:4a:4f:4b:3a:
db:2c:c4:07:a7:cd:4f:35:5e:1d:1d:ed:c0:36:7b:b5:06:f0:
08:ea:f0:0f:e5:37:08:f8:f2:0c:96:b6:19:6d:1f:fe:ce:0a:
66:6c:e9:20:7d:bb:ab:03:c3:2c:a4:bf:26:1d:b0:4e:34:a9:
85:53:88:2d:4d:84:83:0f:c3:e7:d6:24:62:ac:95:8f:82:ce:
f0:ae:99:47:b0:36:61:f9:09:c1:7c:f4:01:fd:bd:e0:64:b6:
42:1e:3a:f0:dd:fb:59:1e:cd:45:09:a3:4d:b8:20:d9:0c:84:
b8:fa:be:cc:d0:05:0a:f8:81:15:13:0c:61:b4:86:3c:60:9e:
3e:84:bc:a4:50:b9:7f:74:0a:2b:2e:d7:84:b3:74:da:59:6b:
a7:59:a2:56
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgICXeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwOTI5MTE1MTQzWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzM1ODZjZi05NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAud6QC8t0yf6v1INYZ+RB2rShg28Pl/Tv+EVUFFRA60HdlJdpMf5WpHtcmRu0
ZgGUBqBv9cYF0MUUf4ixvqbu002uDteJTbnpfrxYUNtACZVtdcEtDaKubQS/FxNu
OqPvbdVt+6SFzYlzsECniRuZEWUV1gJTC3FbQMry3zeGDwGjaeE99my5lucm4Veb
4DVN4eX91Y3y310ae92U1VuqdnUO+IcSZPzkGz4agMPqzFOgAJJuDFhn9oINjeDh
lw7bHrfFVO0MQ7Uu0XpOpa1VLUkuriUCQe5vUzo6S0QBHJfgHREDlou7Mb8DzD5G
0yTQWJfjqzyU5M/0qtadg4ssewIDAQABo4IDMDCCAywwHQYDVR0OBBYEFBc75HwE
j7DTEler1co75YVXG3/AMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0E3RjNGMEUz
QTUzMTFFREI5NDEwQzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbkGCCsGAQUFBwEHAQH/
BIGpMIGmMIGjBAIAATCBnAMEAWeoAAMEAWetDjAMAwQBZ7NeAwQBZ7NgAwQBZ7Nk
MAwDBAFns3YDBAFns3gDBAJns+ADBAFntG4DBAFntKgwDAMEAme0rAMEAWe0sAME
Ame01AMEAWe07gMEAWe1QAMEAWe1VAMEAWe1bgMEAWe1cgMEAme1mAMEAWe1rgME
AWe1xgMEAWe2OgMEAWe32AMEAWe9UgMEAGfl0TANBgkqhkiG9w0BAQsFAAOCAQEA
Lekk0tH5VIRecmrOfVpxm3v5GhWiik4HLHaBA9eVHkJt4Xqe2881XI82JbWt9oSF
OAUkXSKdSQnbo2ZywaBio52iLGT+BUkrgG8JvuhhCmVzeqLcZmd9Hdmrt344eaCd
dd0WdcmevG9KT0s62yzEB6fNTzVeHR3twDZ7tQbwCOrwD+U3CPjyDJa2GW0f/s4K
ZmzpIH27qwPDLKS/Jh2wTjSphVOILU2Egw/D59YkYqyVj4LO8K6ZR7A2YfkJwXz0
Af294GS2Qh468N37WR7NRQmjTbgg2QyEuPq+zNAFCviBFRMMYbSGPGCePoS8pFC5
f3QKKy7XhLN02llrp1miVg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org