Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4E998CEBDD011EA9702FC12C4F9AE02.roa
File: D4E998CEBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: sNxcPoF/sQC0cJrwA1EswL86l5Nd2Jxl+sff9xAzxC8=
Subject key identifier: 13:38:6C:62:66:07:EF:FB:8B:76:2D:E9:38:C1:71:95:A8:C6:5B:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4CE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4E998CEBDD011EA9702FC12C4F9AE02.roa
Signing time: Tue 26 Apr 2022 06:41:30 +0000
ROA not before: Tue 26 Apr 2022 06:41:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135817
IP address blocks: 103.148.144.0/24 maxlen: 24
103.155.208.0/23 maxlen: 24
103.170.56.0/23 maxlen: 24
103.201.136.0/22 maxlen: 22
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.201.138.0/24 maxlen: 24
103.201.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19684 (0x4ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 26 06:41:30 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6267941a-46cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:26:31:c6:a6:f2:f6:ac:50:d2:24:15:f9:
c7:87:61:c3:41:31:7d:85:20:47:2b:05:a5:e6:d6:
29:4a:e3:1a:48:87:e0:05:49:67:46:f5:5e:9f:a2:
47:5c:b3:d3:5b:ff:1d:93:7f:0c:a8:3c:66:ad:18:
1f:c1:aa:0c:06:c0:72:fa:68:22:26:69:44:19:e3:
c8:ba:74:52:40:e7:19:e0:fa:c5:44:29:98:24:41:
f6:e0:af:ec:f7:a6:e3:6b:f8:90:ff:d4:d7:87:52:
20:84:6a:84:45:4f:4a:0f:38:0e:f8:86:de:76:b6:
2b:7a:db:c4:1c:74:a9:65:0e:9c:cd:36:7d:91:cf:
90:3d:22:27:b2:26:cb:07:e6:2f:ed:c1:e4:c0:b3:
d3:67:da:36:d3:44:e6:6e:44:7e:41:f2:f9:20:45:
77:14:6b:d9:89:0e:a1:78:07:77:d2:e2:17:d8:2b:
b7:3e:a3:df:e4:3c:b5:96:2a:38:a0:fe:d3:48:50:
e1:ba:38:cb:2f:c6:b7:5b:ef:89:0a:c9:d2:ff:7b:
dc:38:18:6a:90:4a:fa:f6:5e:b2:f3:b2:b4:8f:d0:
74:7c:9f:59:2c:04:8d:cb:9a:e1:bf:27:13:88:c0:
92:49:ff:3f:81:f6:75:d6:9c:0b:32:72:3c:b3:94:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:38:6C:62:66:07:EF:FB:8B:76:2D:E9:38:C1:71:95:A8:C6:5B:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4E998CEBDD011EA9702FC12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.144.0/24
103.155.208.0/23
103.170.56.0/23
103.201.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:00:54:fb:e4:12:7d:ac:65:9e:a4:7f:e6:d2:de:a1:06:93:
d0:c5:23:66:18:57:f5:ed:9f:4a:30:4a:a3:3c:0c:73:ef:8a:
6a:fe:3f:ee:5d:fb:a1:9e:7f:1e:2e:e4:e3:c4:67:08:5e:35:
39:20:d7:6a:ce:c5:20:cc:72:c6:af:25:e6:98:25:6f:b0:3e:
4b:d6:b5:da:a5:4b:e3:06:c3:d5:c8:9d:23:98:bf:8b:cb:ef:
c7:2e:e9:9e:2f:63:ea:dc:5a:52:1c:75:d6:47:12:7a:dd:83:
04:1e:a2:50:b6:81:6f:a5:28:8a:dd:0f:c6:80:12:33:a4:b4:
80:2a:bc:14:20:be:d0:87:83:a7:a8:61:6a:8f:8a:90:b4:5e:
70:02:21:c2:cf:1a:d4:cf:2e:b2:4a:d4:35:f1:f2:e5:14:8e:
e4:ef:ad:36:dd:a0:3a:9f:9d:3e:fe:68:6f:04:b8:ea:62:91:
91:8f:e7:40:56:7a:66:0e:9f:fd:64:ec:06:dc:46:aa:2b:5c:
5c:a9:89:07:f3:38:51:f0:0e:6c:32:1f:04:fd:1a:d4:bf:80:
f5:73:2f:d7:8b:28:01:bf:ed:87:ba:66:1e:0a:d8:61:db:da:
40:8e:1d:8d:13:01:5f:eb:87:e4:fd:74:7e:61:00:24:97:d4:
c8:94:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org