Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC536234696111EDA58A1F2CC4F9AE02.roa
File: FC536234696111EDA58A1F2CC4F9AE02.roa (raw, json)
Hash identifier: wHas/3KiowYsQyui8Z3NRZcRF7YaHF7ieNZAgRpmGEU=
Subject key identifier: BD:FF:D6:BA:73:8A:A0:C0:2E:1E:34:B0:EB:91:D1:7D:4E:9D:B3:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 606A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC536234696111EDA58A1F2CC4F9AE02.roa
Signing time: Mon 21 Nov 2022 06:01:48 +0000
ROA not before: Mon 21 Nov 2022 06:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58762
IP address blocks: 45.117.180.0/24 maxlen: 24
45.117.181.0/24 maxlen: 24
45.117.182.0/24 maxlen: 24
45.117.183.0/24 maxlen: 24
103.18.72.0/24 maxlen: 24
103.18.73.0/24 maxlen: 24
103.18.74.0/24 maxlen: 24
103.18.75.0/24 maxlen: 24
103.69.12.0/22 maxlen: 24
103.84.184.0/22 maxlen: 24
103.85.16.0/22 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.138.8.0/24 maxlen: 24
103.147.0.0/24 maxlen: 24
103.147.1.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.157.4.0/23 maxlen: 24
103.157.10.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.170.158.0/23 maxlen: 24
103.225.56.0/22 maxlen: 22
103.225.56.0/24 maxlen: 24
103.225.57.0/24 maxlen: 24
103.225.58.0/24 maxlen: 24
103.225.59.0/24 maxlen: 24
150.129.44.0/24 maxlen: 24
150.129.45.0/24 maxlen: 24
150.129.46.0/24 maxlen: 24
150.129.47.0/24 maxlen: 24
2001:df0:8000::/48 maxlen: 56
2407:c140::/32 maxlen: 38
2407:c140::/36 maxlen: 40
2407:c140:1000::/37 maxlen: 40
2407:c140:1800::/38 maxlen: 40
2407:c140:1c00::/39 maxlen: 40
2407:c140:1e00::/40 maxlen: 40
2407:c140:1f00::/40 maxlen: 40
2407:c140:2000::/35 maxlen: 40
2407:c140:4000::/34 maxlen: 40
2407:c140:8000::/33 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24682 (0x606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 21 06:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=637b144c-7372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:0f:16:ad:c6:e2:15:2d:c2:84:08:ae:29:
2a:9e:4a:7c:0c:12:d5:3c:81:64:a0:da:04:d4:7c:
73:54:4b:a7:28:02:97:7b:35:43:f3:ae:84:be:50:
34:c3:48:3d:c5:4d:02:a9:f3:0f:b8:9c:3e:ec:d0:
8b:3c:66:ad:37:4a:be:e4:7a:be:0c:22:1a:51:88:
d7:c6:8e:76:ca:a3:d5:5b:4e:ef:e0:48:b2:e1:a0:
6b:f4:76:2b:6f:c9:a9:7c:b4:d9:90:f5:13:39:9c:
a3:1a:a7:7b:49:82:e1:ae:d0:45:59:47:e2:30:c0:
f3:4f:34:3d:42:05:4f:8c:80:a1:26:3b:a5:0a:91:
c6:95:2a:2f:cf:21:37:29:a9:ac:b6:7b:a8:e4:95:
9e:80:cb:d4:73:04:95:3c:6f:14:9d:04:3a:ba:c1:
fc:02:f5:36:77:74:24:bf:89:e3:9d:ec:38:97:07:
ec:eb:39:bd:12:9a:00:cf:b5:29:f6:15:a2:f2:c6:
81:8f:04:1f:8a:20:5f:30:d7:e8:b7:43:45:d5:dd:
b9:49:8c:81:5e:c6:3e:6f:51:2e:57:7e:62:e5:6e:
b6:80:42:e1:5d:db:58:b0:c9:f7:50:25:a0:34:51:
f2:30:96:55:85:66:39:21:b5:04:91:b3:87:ce:3e:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:D6:BA:73:8A:A0:C0:2E:1E:34:B0:EB:91:D1:7D:4E:9D:B3:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC536234696111EDA58A1F2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.180.0/22
103.18.72.0/22
103.69.12.0/22
103.84.184.0/22
103.85.16.0/22
103.88.56.0/22
103.138.8.0/24
103.147.0.0/23
103.153.12.0/24
103.157.4.0/23
103.157.10.0/23
103.164.46.0/23
103.165.28.0/23
103.165.102.0/23
103.170.158.0/23
103.225.56.0/22
150.129.44.0/22
IPv6:
2001:df0:8000::/48
2407:c140::/32
Signature Algorithm: sha256WithRSAEncryption
87:27:ce:08:90:66:92:f3:e9:ac:f0:75:fb:bc:11:a8:52:0d:
16:7f:64:fe:78:c7:f7:af:fa:bb:86:13:b6:aa:93:8a:6b:58:
ec:50:af:d3:f8:73:ee:95:64:85:67:32:03:db:bf:2a:10:3e:
c7:8a:88:2b:4f:2c:8d:81:5f:d9:bf:fe:1f:07:92:cb:91:75:
07:3f:65:23:63:be:5e:32:60:a2:b3:8b:11:08:81:d8:b4:54:
c6:32:7c:39:f9:43:e6:ff:30:f2:0c:92:30:ec:0e:c6:fc:88:
58:47:84:80:b9:69:12:a1:04:45:19:85:16:a4:8f:b8:4e:86:
92:8c:7b:8c:0c:d4:fe:bd:cf:c4:de:c4:a1:8d:4e:a6:21:26:
a9:7f:e0:32:29:b9:82:f0:c7:8d:4c:4f:7d:f6:36:e7:00:69:
db:1e:18:e4:b3:10:32:de:d1:22:cc:de:a4:ec:16:33:41:7d:
d4:3f:69:7c:d3:e4:92:6f:93:d9:1a:fc:1b:81:e0:4d:fe:98:
2d:df:29:38:3e:f9:e0:90:8f:e6:84:5f:4e:22:f5:a6:20:e6:
2b:4f:1d:0d:df:52:6c:6d:49:2a:15:84:7b:dc:99:09:22:f0:
39:74:95:9e:30:9d:73:4a:56:af:6e:26:9f:f8:e2:ee:9c:38:
49:96:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org