Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BFF325D2F8D311EAA0DA8166C4F9AE02.roa
File: BFF325D2F8D311EAA0DA8166C4F9AE02.roa (raw, json)
Hash identifier: O3k2FaF3sDItEPKsw99M4+2kMS4y4KQQCY+cegWYOEg=
Subject key identifier: 1A:07:3C:61:94:A6:AC:D5:BD:B6:00:64:E3:A5:FD:1D:9F:FD:9C:18
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 2FED
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BFF325D2F8D311EAA0DA8166C4F9AE02.roa
Signing time: Wed 19 Apr 2023 09:12:09 +0000
ROA not before: Wed 19 Apr 2023 09:12:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9238
IP address blocks: 59.160.33.0/24 maxlen: 24
59.162.7.0/24 maxlen: 24
59.163.47.0/24 maxlen: 24
59.163.63.0/24 maxlen: 24
115.112.212.0/22 maxlen: 22
121.241.230.0/24 maxlen: 24
203.124.192.0/18 maxlen: 18
203.124.192.0/24 maxlen: 24
203.124.217.0/24 maxlen: 24
203.124.218.0/24 maxlen: 24
203.124.225.0/24 maxlen: 24
203.124.230.0/24 maxlen: 24
203.124.232.0/24 maxlen: 24
203.124.248.0/22 maxlen: 22
203.124.248.0/24 maxlen: 24
203.196.194.0/24 maxlen: 24
203.196.200.0/24 maxlen: 24
203.196.201.0/24 maxlen: 24
203.196.202.0/24 maxlen: 24
203.196.203.0/24 maxlen: 24
203.196.204.0/24 maxlen: 24
203.196.233.0/24 maxlen: 24
203.196.240.0/24 maxlen: 24
203.196.241.0/24 maxlen: 24
203.196.250.0/24 maxlen: 24
203.201.208.0/24 maxlen: 24
203.201.209.0/24 maxlen: 24
203.201.212.0/24 maxlen: 24
203.201.213.0/24 maxlen: 24
203.201.220.0/24 maxlen: 24
203.201.222.0/24 maxlen: 24
203.201.224.0/24 maxlen: 24
203.201.225.0/24 maxlen: 24
203.201.226.0/24 maxlen: 24
203.201.227.0/24 maxlen: 24
203.201.231.0/24 maxlen: 24
203.201.248.0/24 maxlen: 24
203.201.250.0/24 maxlen: 24
203.201.251.0/24 maxlen: 24
203.201.254.0/24 maxlen: 24
219.64.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12269 (0x2fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 19 09:12:06 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643fb065-b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:fa:89:29:ea:04:81:70:c4:46:25:40:ff:
32:5f:98:59:84:6d:3e:74:ba:c4:37:c9:50:11:20:
d9:af:27:ec:1c:35:1f:83:ca:40:32:d3:ed:38:e3:
ef:17:d6:0a:06:99:ee:3a:ea:54:f5:b6:84:31:70:
07:a5:ab:2d:e8:63:51:6c:5c:4e:ca:11:71:46:da:
af:8d:d5:1a:72:30:a0:8b:12:a8:c2:99:60:8f:ba:
04:35:23:43:c8:fc:10:da:24:7d:43:ab:d8:0e:ec:
f9:1d:1d:c1:b2:c7:4c:6f:17:6d:0e:a4:38:74:ab:
75:b1:3e:18:39:b9:85:24:24:c3:6f:c8:14:8c:eb:
cb:a3:55:81:21:df:bf:90:8a:80:c1:aa:6c:97:67:
9f:20:16:69:98:12:12:a1:5d:58:bf:4f:c5:7e:de:
37:9b:51:4e:b6:81:78:c4:44:7f:ad:1e:78:ab:13:
23:0b:9a:83:8a:17:9c:f0:61:53:63:eb:34:3a:bf:
b5:a0:b4:5a:3f:6d:c2:6a:5f:a6:98:bd:ac:07:bd:
5e:49:e6:5f:3a:2f:83:ee:de:7f:8c:de:3c:6b:11:
70:d1:a7:4b:d0:75:8b:5f:b2:d1:47:48:53:05:53:
b8:44:59:e5:62:1f:32:25:f3:df:90:8c:d8:96:ce:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:3C:61:94:A6:AC:D5:BD:B6:00:64:E3:A5:FD:1D:9F:FD:9C:18
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BFF325D2F8D311EAA0DA8166C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.160.33.0/24
59.162.7.0/24
59.163.47.0/24
59.163.63.0/24
115.112.212.0/22
121.241.230.0/24
203.124.192.0/18
203.196.194.0/24
203.196.200.0-203.196.204.255
203.196.233.0/24
203.196.240.0/23
203.196.250.0/24
203.201.208.0/23
203.201.212.0/23
203.201.220.0/24
203.201.222.0/24
203.201.224.0/22
203.201.231.0/24
203.201.248.0/24
203.201.250.0/23
203.201.254.0/24
219.64.5.0/24
Signature Algorithm: sha256WithRSAEncryption
11:74:e5:39:93:cf:b6:df:74:93:34:d5:89:59:62:ac:27:da:
3f:7b:06:e6:b9:06:05:e8:01:c6:97:d0:65:05:36:dc:06:aa:
eb:cd:ac:c6:1a:ef:eb:ae:9f:7c:9f:cb:7c:ed:c8:1e:58:f3:
b1:43:10:36:f6:ed:1b:50:ac:c7:1e:0b:79:2c:75:37:77:c9:
25:3a:90:7d:0a:a4:df:20:35:c5:cc:41:4a:d4:81:9e:05:0e:
ad:57:ea:a4:af:cf:c9:cc:93:de:a1:5f:fb:79:cc:d4:71:df:
1a:9c:6a:a5:af:10:6e:7b:13:1e:af:62:b7:86:96:5f:8d:92:
b2:16:72:7c:98:50:a7:25:11:68:24:cd:af:1c:c0:03:82:d1:
9d:b6:be:d3:ef:28:f7:7a:5d:aa:3d:18:77:ae:72:de:a8:24:
c4:c1:0f:a3:ad:50:31:84:05:86:d1:9d:b6:6a:70:08:e3:00:
9a:4a:eb:2a:19:30:b1:63:c2:8b:55:b0:95:19:4c:88:4d:94:
eb:4e:9b:f5:cc:bb:ae:73:a8:33:b4:3c:50:b7:53:47:bf:3d:
0b:d8:0e:fe:da:fa:5e:8e:f2:32:88:8f:12:9a:ff:b3:35:f6:
ef:2b:5a:36:3e:d5:ab:d6:dd:29:e2:8c:b0:e3:a1:a8:ea:9b:
98:42:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org