Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9BA6805C0811ED810A766CC4F9AE02.roa
File: EE9BA6805C0811ED810A766CC4F9AE02.roa (raw, json)
Hash identifier: 5j7/ES1R+ZljF3c79hETYu087XlNNXK0XY6CvCANShI=
Subject key identifier: 43:3A:B4:44:9B:66:17:11:61:87:72:18:6F:2B:29:ED:8B:DB:45:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5FB1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9BA6805C0811ED810A766CC4F9AE02.roa
Signing time: Fri 04 Nov 2022 06:21:35 +0000
ROA not before: Fri 04 Nov 2022 06:21:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150091
IP address blocks: 103.179.120.0/23 maxlen: 23
103.179.120.0/24 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.181.150.0/23 maxlen: 23
103.181.150.0/24 maxlen: 24
103.181.174.0/24 maxlen: 24
103.181.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24497 (0x5fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 4 06:21:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6364af6f-bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:2c:32:99:9a:19:54:f4:b6:dc:da:1a:5a:
f1:75:aa:5c:90:14:f5:c2:53:2d:bf:46:69:80:20:
31:06:4b:24:19:b1:6f:be:59:b2:68:8d:2f:9a:a1:
33:3b:c0:62:1f:7c:cd:57:26:c4:ef:be:0c:44:d0:
9c:99:82:6e:15:70:95:42:cb:ff:90:a4:67:cd:b6:
b7:d6:17:f4:1f:c5:ce:9d:47:b3:71:73:76:4e:da:
92:40:f2:62:56:75:d4:ca:03:d6:12:bc:04:f2:b8:
c5:7c:40:7b:98:8a:86:98:cb:0a:25:17:81:66:8a:
a7:47:3a:64:3f:88:26:f5:1c:83:48:99:2c:51:eb:
38:b3:28:6f:a5:b3:a9:8d:10:b8:be:f1:47:23:52:
ed:cd:f3:43:0d:9c:f8:d1:27:5f:e7:c5:df:fd:d9:
61:ba:42:2f:7b:ef:13:22:2e:06:33:c1:21:14:93:
d0:fa:e8:ae:04:19:07:ba:eb:f1:cd:3c:21:0d:8d:
24:fe:a6:2d:4c:ea:8a:c7:28:a6:72:b4:2f:96:4b:
f9:48:ce:79:52:e1:ca:6d:a4:8e:63:a5:13:89:6c:
d5:c8:ee:1c:54:48:c7:71:27:11:33:23:e1:00:3c:
87:6b:09:6f:31:d3:32:d8:f8:1b:f8:56:24:8f:48:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:B4:44:9B:66:17:11:61:87:72:18:6F:2B:29:ED:8B:DB:45:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9BA6805C0811ED810A766CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.120.0/23
103.180.168.0/23
103.180.212.0/23
103.181.86.0/24
103.181.150.0/23
103.181.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:8f:32:52:1e:bf:b5:35:f8:a2:63:1a:40:29:65:3a:d5:77:
b5:39:52:3d:be:d8:55:14:81:c9:c7:3a:43:18:c5:98:88:4c:
b8:91:21:9c:f2:79:f2:78:e9:3c:0a:d1:10:e9:72:0c:c9:26:
51:2e:94:fa:b5:4c:17:7d:78:5f:51:5c:df:da:69:f0:3c:54:
3e:61:9d:ae:b5:c1:f6:c8:97:13:76:8b:f9:86:1e:b6:03:68:
a4:10:6d:68:bc:2a:cc:a2:49:14:b0:05:ba:03:2f:21:40:8a:
13:a8:97:3c:36:06:ec:50:85:1e:79:25:79:31:c8:09:fa:ac:
48:94:e8:70:95:36:1f:90:08:51:e4:0b:01:26:32:24:01:38:
3c:eb:91:03:0b:64:0f:a5:43:65:86:2a:53:56:27:b8:e2:9c:
33:1b:40:07:7a:9d:88:a0:19:60:22:29:7e:89:2f:5a:b8:4b:
fe:99:50:52:8e:23:e8:9d:e4:f8:88:6f:d2:30:fc:39:23:27:
86:ba:07:cf:6c:a0:49:36:bd:cf:97:e4:1a:d9:e0:ba:82:80:
69:21:1a:f5:1f:ce:94:a1:39:2c:66:34:fa:6b:cf:16:6f:ea:
bd:aa:df:57:cc:41:4d:fb:39:a5:7b:95:1c:7d:8c:bf:c5:a6:
af:76:42:da
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICX7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMTA0MDYyMTM1WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzY0YWY2Zi1iZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1ksMpmaGVT0ttzaGlrxdapckBT1wlMtv0ZpgCAxBkskGbFvvlmyaI0vmqEz
O8BiH3zNVybE774MRNCcmYJuFXCVQsv/kKRnzba31hf0H8XOnUezcXN2TtqSQPJi
VnXUygPWErwE8rjFfEB7mIqGmMsKJReBZoqnRzpkP4gm9RyDSJksUes4syhvpbOp
jRC4vvFHI1LtzfNDDZz40Sdf58Xf/dlhukIve+8TIi4GM8EhFJPQ+uiuBBkHuuvx
zTwhDY0k/qYtTOqKxyimcrQvlkv5SM55UuHKbaSOY6UTiWzVyO4cVEjHcScRMyPh
ADyHawlvMdMy2Pgb+FYkj0hLQQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEM6tESb
ZhcRYYdyGG8rKe2L20U4MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUU5QkE2ODA1
QzA4MTFFRDgxMEE3NjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBAFns3gDBAFntKgDBAFntNQDBABntVYDBAFntZYDBAFnta4w
DQYJKoZIhvcNAQELBQADggEBAKCPMlIev7U1+KJjGkApZTrVd7U5Uj2+2FUUgcnH
OkMYxZiITLiRIZzyefJ46TwK0RDpcgzJJlEulPq1TBd9eF9RXN/aafA8VD5hna61
wfbIlxN2i/mGHrYDaKQQbWi8KsyiSRSwBboDLyFAihOolzw2BuxQhR55JXkxyAn6
rEiU6HCVNh+QCFHkCwEmMiQBODzrkQMLZA+lQ2WGKlNWJ7jinDMbQAd6nYigGWAi
KX6JL1q4S/6ZUFKOI+id5PiIb9Iw/DkjJ4a6B89soEk2vc+X5BrZ4LqCgGkhGvUf
zpShOSxmNPprzxZv6r2q31fMQU37OaV7lRx9jL/Fpq92Qto=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org