Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D997E5D8DC2311EC8D685D3CC4F9AE02.roa
File: D997E5D8DC2311EC8D685D3CC4F9AE02.roa (raw, json)
Hash identifier: CtxLIGX3k0Zs7p16fsW4It6HwygRYQACes84v1Jt7CU=
Subject key identifier: 74:08:FC:57:D2:B5:E8:8F:5A:8B:AE:A6:36:85:FD:E3:6C:47:0B:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5652
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D997E5D8DC2311EC8D685D3CC4F9AE02.roa
Signing time: Mon 30 May 2022 12:11:51 +0000
ROA not before: Mon 30 May 2022 12:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 45.120.37.0/24 maxlen: 24
103.61.148.0/23 maxlen: 24
139.5.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22098 (0x5652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 12:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6294b487-4708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:06:02:fd:9c:d4:68:89:6c:ef:30:f4:d9:
de:07:4b:5f:81:3d:51:a3:57:d8:b4:ac:31:49:16:
39:dd:9c:7f:44:5a:39:5e:d2:2c:5c:e3:6a:ec:00:
b1:4f:06:e9:f5:7a:01:39:2a:1d:27:04:48:f3:0a:
fb:13:f1:07:70:83:8c:7b:1d:53:0b:5f:fb:25:db:
19:cf:8f:8b:02:22:b3:1d:63:61:ed:d3:b5:33:cc:
e5:51:78:86:b9:a2:c5:76:d8:d4:11:34:af:9c:63:
9b:8e:1a:03:d8:6f:45:64:52:08:58:18:3e:56:69:
61:23:c4:39:79:dc:ad:e6:da:2a:88:bb:97:fc:60:
fe:fa:97:6b:c9:e7:f3:68:d9:2a:b0:41:ac:7d:f4:
63:0b:9e:6a:4c:64:f8:b9:7f:0d:e3:b3:61:c7:76:
55:bb:09:28:6b:3f:9f:2f:09:76:13:cd:30:ad:f8:
52:4c:81:7d:e5:af:3f:00:0f:69:58:46:fa:01:52:
9e:06:ca:f9:6b:44:47:78:ec:c8:04:21:fd:37:29:
18:e4:44:b8:3f:ad:ce:fe:18:ab:49:d3:5b:8e:c1:
9e:b3:41:9f:98:90:6a:ca:c2:ad:c4:48:91:7c:69:
88:17:57:e0:96:ac:d1:33:e6:c9:60:6c:4c:e4:53:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:FC:57:D2:B5:E8:8F:5A:8B:AE:A6:36:85:FD:E3:6C:47:0B:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D997E5D8DC2311EC8D685D3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.37.0/24
103.61.148.0/23
139.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d2:e1:11:8b:9f:91:e1:44:31:35:33:e9:ef:9f:c8:cb:35:
22:21:36:7b:38:80:80:3b:a7:29:3f:13:51:b9:1f:20:5d:36:
3b:8a:33:d1:29:65:1a:aa:74:d5:1b:4a:7d:f0:59:fc:bc:0e:
8f:d6:18:0f:ce:7c:dc:0d:9d:a0:26:34:aa:64:15:e0:8d:31:
c0:cc:d9:54:ee:d9:d9:3e:d6:4f:38:58:9c:96:85:e2:9b:96:
54:f4:c0:1a:20:a8:62:2b:95:6b:d5:2a:9b:14:9f:3c:7e:1f:
6a:0a:aa:93:5e:de:2b:ea:53:58:3e:82:7f:f7:dd:a8:dd:2d:
5d:a3:99:b4:f5:22:36:43:ae:af:77:ae:fd:00:21:17:64:66:
1a:ee:b8:7e:fa:01:6e:52:d2:aa:fb:b5:51:5b:cc:12:83:69:
28:f5:5e:bd:da:01:3f:9a:10:db:00:c3:8b:fb:58:38:7a:af:
8b:79:aa:ee:f4:ee:00:a8:51:3f:9c:ff:60:0a:88:5d:df:0a:
8b:2e:4e:26:37:02:8d:de:69:57:fe:16:6a:72:bc:f1:23:e8:
07:80:be:ce:f5:1e:fd:f8:1b:f2:af:0f:ac:87:a3:77:81:1a:
48:ea:2d:ed:d2:45:2d:48:7e:eb:f7:12:2d:9d:a4:7c:73:7c:
c6:34:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org