Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A601E25B7411ED8B9FEC34C4F9AE02.roa
File: D9A601E25B7411ED8B9FEC34C4F9AE02.roa (raw, json)
Hash identifier: X42g41oMc0an0CuWYMZqPgtGqbsSvDfuFTq6rfuaZJY=
Subject key identifier: FB:E2:E5:68:FF:7D:81:FD:F2:35:05:AF:41:FC:A6:D3:18:BD:E0:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5FA5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A601E25B7411ED8B9FEC34C4F9AE02.roa
Signing time: Thu 03 Nov 2022 12:41:34 +0000
ROA not before: Thu 03 Nov 2022 12:41:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136367
IP address blocks: 103.179.96.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.180.174.0/24 maxlen: 24
103.180.175.0/24 maxlen: 24
103.180.236.0/23 maxlen: 23
103.180.237.0/24 maxlen: 24
103.181.110.0/24 maxlen: 24
103.181.111.0/24 maxlen: 24
103.189.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24485 (0x5fa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 3 12:41:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6363b6fe-6f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:f6:37:55:58:95:0a:b6:57:71:69:30:cd:
7e:3c:0b:f1:86:c3:03:ee:a7:2c:fd:04:07:4a:50:
3d:b3:41:0b:65:1f:da:f9:1f:40:32:7e:a9:e4:a2:
2b:62:12:7a:85:d5:61:ff:8a:5b:ad:26:6f:ec:97:
72:48:6c:d0:70:37:57:3c:f7:99:9d:81:96:a6:e6:
a0:f5:35:2a:51:82:a7:18:83:2b:2f:d5:c8:18:f3:
3c:f4:e6:84:db:d8:66:69:16:8c:d9:ef:94:5a:71:
75:57:81:bc:ac:94:79:0c:c7:c2:d4:df:c6:c6:a4:
2b:3c:b1:3e:65:89:12:0e:31:5c:53:b2:8f:2f:1a:
09:7e:bb:31:05:04:37:81:88:9e:7a:0f:90:9d:8a:
9f:0a:4e:41:d0:5e:fe:67:fd:32:58:28:6e:9e:7e:
ca:eb:67:af:21:4e:3b:ae:5d:7a:41:44:4a:46:48:
bb:2d:11:ec:38:67:e9:4e:fb:44:05:3c:38:b9:3c:
c8:9e:f0:28:d7:1e:8d:10:cf:ad:7d:91:cd:be:5f:
6b:9c:90:1b:06:9e:e6:59:66:af:73:b4:bb:53:1b:
5f:83:9b:13:c5:24:12:9e:21:c9:23:ff:80:05:53:
b6:96:7e:49:2f:7d:d5:b0:97:41:e1:62:a8:03:b7:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:E5:68:FF:7D:81:FD:F2:35:05:AF:41:FC:A6:D3:18:BD:E0:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A601E25B7411ED8B9FEC34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.96.0/23
103.179.224.0/23
103.180.174.0/23
103.180.236.0/23
103.181.110.0/23
103.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
74:27:b5:bc:90:f2:1e:40:3c:41:5e:6a:9c:5c:90:34:09:14:
eb:5b:d2:eb:40:57:8f:33:94:86:ee:e4:d6:af:22:92:5a:16:
b8:2a:11:53:4d:2d:97:0d:1b:ae:30:b8:df:f5:2f:c6:83:f3:
92:02:78:06:49:5f:10:49:b0:27:6b:51:62:9e:c8:c4:cb:56:
03:d8:64:b6:42:c9:eb:23:68:32:9e:16:01:a0:e5:45:bf:1a:
cd:d5:ca:c4:7f:5e:e4:36:b6:d8:5d:5c:4a:05:d4:4d:5e:77:
62:5b:2e:73:88:dd:99:32:ea:5f:a7:3e:86:39:90:48:b8:8d:
82:f0:cc:a4:5f:45:6e:dd:25:86:8c:11:3d:8a:1a:03:e4:ff:
48:00:0d:f1:d5:4e:90:87:e6:4f:dd:27:95:35:b7:59:c0:4d:
30:77:04:4d:5d:33:eb:36:08:32:03:5c:c1:be:4b:69:88:0c:
96:29:f3:f3:9c:64:b8:29:d4:e7:eb:cc:ef:b8:80:95:27:8d:
3e:0e:22:ec:e7:3f:7f:3f:48:af:25:ef:f4:34:45:5a:ef:f0:
7e:a9:5a:3c:d5:5d:be:53:48:b7:aa:81:ca:68:23:8f:39:c2:
be:93:34:a5:b2:17:41:53:3e:14:24:af:98:29:ae:4b:96:ad:
55:cf:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org