Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3835844BDD411EAA2D98325C4F9AE02.roa
File: E3835844BDD411EAA2D98325C4F9AE02.roa (raw, json)
Hash identifier: 3CrwewhZ31clL5pO8t1II0yjNczWadvSs1PXIjag1No=
Subject key identifier: 05:7A:46:99:6B:89:68:E0:FA:5B:9B:38:CA:15:A9:0F:EC:65:D3:F6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 608C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3835844BDD411EAA2D98325C4F9AE02.roa
Signing time: Wed 23 Nov 2022 06:41:34 +0000
ROA not before: Wed 23 Nov 2022 06:41:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134034
IP address blocks: 103.13.40.0/23 maxlen: 24
103.66.8.0/24 maxlen: 24
103.66.9.0/24 maxlen: 24
103.66.10.0/24 maxlen: 24
103.66.11.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
2400:ae60::/32 maxlen: 32
2400:ae60::/36 maxlen: 36
2400:ae60:1000::/36 maxlen: 36
2400:ae60:2000::/36 maxlen: 36
2400:ae60:3000::/36 maxlen: 36
2400:ae60:4000::/36 maxlen: 36
2400:ae60:5000::/36 maxlen: 36
2400:ae60:6000::/36 maxlen: 36
2400:ae60:7000::/36 maxlen: 36
2400:ae60:8000::/36 maxlen: 36
2400:ae60:9000::/36 maxlen: 36
2400:ae60:a000::/36 maxlen: 36
2400:ae60:b000::/36 maxlen: 36
2400:ae60:c000::/36 maxlen: 36
2400:ae60:d000::/36 maxlen: 36
2400:ae60:e000::/36 maxlen: 36
2400:ae60:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24716 (0x608c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 23 06:41:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=637dc09e-8c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:cb:28:da:c5:bd:76:7a:2e:a4:72:6f:42:
af:c4:af:0e:24:14:35:32:89:5d:ea:62:d8:49:5c:
79:46:c2:fe:d2:f8:07:7c:df:be:8e:cb:9a:cc:f6:
ea:37:47:d2:e0:cc:e8:64:a8:51:47:37:5d:c9:5f:
f8:f2:63:ee:4c:66:7e:ea:4e:d9:c5:27:84:07:29:
a1:78:f6:91:34:df:b3:56:4f:8e:bd:a7:84:78:4c:
4f:8d:59:dd:c8:1f:10:8d:c4:b7:c9:41:00:7a:68:
cd:6b:b4:d5:1a:0f:0c:5f:24:03:bc:c8:ea:34:39:
f2:73:2a:0f:9e:f6:b8:d8:24:7d:52:1f:8a:bb:f6:
b9:17:bb:76:43:9b:f8:ec:97:72:ca:04:70:2c:b5:
87:e0:ff:20:98:09:02:8a:3f:54:f7:0c:aa:d6:13:
13:89:aa:e0:94:4b:55:c9:5d:2b:a7:fb:13:62:c8:
a0:dd:88:a8:7c:33:49:3e:18:15:54:ec:5a:cd:09:
db:01:01:67:64:80:bf:c5:4a:a0:1b:25:0b:55:2e:
7b:10:6a:29:1e:d0:89:59:3c:ed:c4:0e:1c:35:d0:
9f:ce:fa:3e:77:cc:53:fe:81:de:64:a7:7d:95:21:
3b:6d:84:e9:6c:24:48:5a:34:54:b8:fd:08:61:94:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:46:99:6B:89:68:E0:FA:5B:9B:38:CA:15:A9:0F:EC:65:D3:F6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3835844BDD411EAA2D98325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.40.0/23
103.66.8.0/22
103.173.208.0/23
IPv6:
2400:ae60::/32
Signature Algorithm: sha256WithRSAEncryption
8b:98:5f:43:b4:34:25:8f:db:da:07:4b:9f:57:3e:47:b1:aa:
b3:8d:f0:f3:c9:59:2a:f1:3f:a7:c4:1c:72:df:a4:ce:15:c6:
89:0b:86:e6:30:b3:39:45:d0:0b:38:b6:8f:97:8a:c3:84:39:
0f:c0:44:dc:1f:a8:3c:68:c4:a5:90:4e:fc:58:21:14:81:4d:
ce:1e:60:27:db:7c:65:8b:b0:ee:11:c3:15:ff:18:33:95:33:
8a:8d:e3:ca:c3:eb:44:de:53:92:f1:f6:22:f4:7b:d0:13:f2:
93:bb:1e:a0:81:30:05:38:4e:17:8b:8e:e6:30:8b:4e:67:00:
52:80:63:c1:ac:8a:b3:fb:4a:4f:23:01:17:d4:7d:76:ee:76:
fa:4f:d7:20:55:9d:11:53:6c:ca:72:46:d5:55:4e:12:6e:08:
a1:10:d8:65:bc:e8:4d:1e:af:62:4c:12:fd:c9:39:5a:43:0c:
4c:99:cf:90:2e:0f:6c:ed:8c:ae:4b:80:14:74:46:37:17:65:
aa:da:b4:44:ed:16:0c:b8:f0:54:87:d5:a8:5f:db:f4:ab:d2:
7f:ae:7b:f1:73:38:e2:e7:84:ab:e3:c0:57:d2:83:79:2b:87:
78:f9:31:90:a1:43:ff:67:17:29:7c:dc:20:da:21:b1:45:5a:
62:01:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org