Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/F0F0C2C0C60411ECA41C213BC4F9AE02.roa
File: F0F0C2C0C60411ECA41C213BC4F9AE02.roa (raw, json)
Hash identifier: /7lz+voz6x0yUl5UoVgwwWIFSdoOUlNMC9XpD+E1Xxk=
Subject key identifier: 98:39:BF:75:B2:52:15:8F:27:57:AE:C1:E6:4E:B8:26:9C:A1:73:F7
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 02
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/F0F0C2C0C60411ECA41C213BC4F9AE02.roa
Signing time: Wed 27 Apr 2022 08:35:07 +0000
ROA not before: Wed 27 Apr 2022 08:35:07 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 132742
IP address blocks: 43.243.208.0/22 maxlen: 22
103.39.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Apr 27 08:35:07 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6269003a-7dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:21:57:4d:55:02:c2:6d:22:5a:57:1a:77:
b0:d5:51:c9:8a:6e:a1:e2:b3:c2:f9:d3:eb:c7:42:
a6:3a:00:fa:c6:81:21:3c:73:26:7b:09:f5:92:46:
16:a6:4b:1f:0c:84:ec:60:f3:73:d8:8f:b3:83:2d:
32:5a:61:1d:ac:df:9a:c1:b8:ca:a1:7e:89:d9:d7:
d2:77:51:08:a1:39:11:07:d7:64:5d:6d:9e:62:a0:
9a:ef:d8:9d:9f:38:ab:20:03:8a:2c:69:2d:32:3e:
6b:58:06:5b:c6:18:62:19:2a:3f:0b:e3:6b:7c:9c:
5a:da:84:07:a8:44:4c:54:ab:6f:09:90:ad:0d:b9:
68:d3:3d:e1:b4:a3:78:08:aa:17:e3:36:57:32:5a:
57:e0:b0:60:5e:4f:56:49:25:dd:ad:7f:08:77:88:
00:9c:bf:9c:d6:97:d0:b3:a3:d6:44:fc:93:26:4f:
ed:02:29:54:1b:e7:df:84:e9:65:cb:84:17:8a:74:
6e:25:55:44:75:e1:a9:62:99:02:a7:1f:6b:53:11:
c6:0b:1d:55:57:09:2c:ed:d8:ae:eb:6c:28:9f:63:
a5:86:bd:d3:fc:63:cb:39:16:0c:45:4f:00:e2:9a:
e1:3c:61:61:d3:1e:fa:b3:05:f4:63:31:4d:0b:5e:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:BF:75:B2:52:15:8F:27:57:AE:C1:E6:4E:B8:26:9C:A1:73:F7
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/F0F0C2C0C60411ECA41C213BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.208.0/22
103.39.24.0/22
Signature Algorithm: sha256WithRSAEncryption
47:d3:42:15:b6:eb:ca:c6:29:85:84:3a:40:0a:7e:df:76:98:
67:9d:ff:f0:1d:27:ab:13:66:02:00:74:6d:15:eb:d9:4f:df:
cf:6a:54:f9:7c:02:47:ea:26:18:22:37:8c:99:f2:38:3a:f4:
f1:1d:62:ce:aa:96:6b:85:78:a1:d2:46:95:17:fb:c4:cb:d7:
20:ec:09:c1:b1:81:f9:62:42:af:c7:56:40:f1:e0:e6:60:2a:
e2:ca:16:72:ab:21:1d:49:97:1a:43:9a:8f:4c:97:08:39:4b:
0a:5a:25:3d:fa:2d:60:ad:bf:d8:73:ed:8e:bd:00:b3:6b:b0:
58:64:ee:8e:b0:57:a9:69:68:74:86:cd:90:e2:c6:c5:22:e0:
ed:95:f4:35:07:eb:0e:c1:e9:4e:b0:51:a7:4c:e1:62:d1:21:
66:b8:ee:75:ea:6e:36:88:3a:86:f6:df:98:f3:df:2f:33:c7:
2c:72:71:c9:a7:98:b7:2e:d7:4c:30:15:70:72:aa:3b:6d:1d:
b3:b1:30:a4:2f:17:36:85:1d:e4:4f:c0:c3:3f:0e:74:c6:ea:
04:cb:fd:4a:6d:3a:a1:34:7c:ff:c7:fd:f0:0c:2d:fb:b3:97:
93:cc:07:65:ef:5b:3a:fc:c2:a3:57:32:75:19:63:06:59:7a:
3e:3b:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org