Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/C3FE0B50209211ECB108073DC4F9AE02.roa
File: C3FE0B50209211ECB108073DC4F9AE02.roa (raw, json)
Hash identifier: Smxli59E8/hBJRqabBKya0JwbbA5Ez9bSStgLTd+sNI=
Subject key identifier: B6:9A:1C:99:D1:D6:00:34:E8:81:91:0E:B1:8C:33:51:AA:06:F3:A6
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 01CC
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/C3FE0B50209211ECB108073DC4F9AE02.roa
Signing time: Mon 21 Mar 2022 03:16:36 +0000
ROA not before: Mon 21 Mar 2022 03:16:36 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 36351
IP address blocks: 45.65.32.0/22 maxlen: 24
103.210.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Mar 21 03:16:36 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6237ee14-27c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:27:3c:6e:36:6c:08:b7:2e:43:6d:a8:09:
23:a5:50:47:39:21:eb:be:68:df:1f:ec:b8:ae:ca:
0f:c8:80:9b:f3:c7:80:ed:8f:fd:24:eb:ec:02:2f:
4b:5b:e3:1f:e2:16:62:4f:7b:6f:b2:76:b0:7a:d9:
21:95:40:5c:99:3c:d3:01:df:80:de:ff:0f:cf:a0:
06:8c:1b:5e:fe:e2:24:ce:87:e0:ae:b5:a5:62:35:
a1:8e:aa:1c:98:f4:6b:84:cf:2c:ab:0d:72:00:11:
3d:ce:29:50:c0:45:d0:fc:41:ce:03:87:68:72:90:
21:16:0f:60:50:c1:fd:19:d9:fe:19:85:4a:80:7d:
7b:9a:e1:76:ac:16:66:81:b4:fb:fb:94:14:dc:71:
12:65:d2:8a:30:51:9c:26:12:e7:5f:a3:58:ad:cb:
a7:f0:62:30:4b:a3:e4:00:a6:fb:c9:56:51:10:80:
41:41:28:46:67:19:73:72:ba:12:5c:10:72:99:e6:
ba:2b:31:39:7f:78:43:e4:9c:c5:8c:29:69:4b:aa:
3f:ee:44:cf:8c:43:3d:b1:9f:a7:95:5d:27:84:9d:
7c:1c:0c:1b:46:14:23:c5:20:9e:be:0a:10:e9:53:
f9:14:85:4c:83:71:73:48:01:50:e8:4f:62:99:ef:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:1C:99:D1:D6:00:34:E8:81:91:0E:B1:8C:33:51:AA:06:F3:A6
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/C3FE0B50209211ECB108073DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.65.32.0/22
103.210.244.0/23
Signature Algorithm: sha256WithRSAEncryption
57:35:0b:85:31:ca:1c:ea:f6:56:cb:0a:d7:df:7f:b7:3a:37:
93:8e:f4:d5:21:68:2c:a4:c3:09:34:8c:ad:e5:16:5d:47:fb:
95:d3:19:c1:f0:9d:b9:59:e0:e1:1c:c2:6c:63:cb:f6:7e:ac:
f1:5c:70:74:3d:82:43:43:99:95:ac:57:89:a1:b2:dc:58:0d:
33:df:aa:20:a9:d2:14:15:46:28:66:e9:4e:0a:84:61:ae:f5:
05:5c:42:52:55:0f:ea:ec:13:28:05:86:a2:03:a0:cc:ff:16:
2a:ed:f7:0e:88:ff:dc:fe:ec:c1:0e:df:cf:ce:c9:81:fb:9b:
57:5e:bc:ad:a5:50:d8:88:03:ff:61:c7:a9:d6:04:98:cd:02:
01:83:0c:49:0d:ca:05:57:fe:a4:dc:7c:f2:1b:f9:d0:63:e3:
19:94:f3:f4:33:e3:ef:1b:bc:e8:7d:7e:13:a5:71:fc:6a:f1:
56:02:d9:d7:a8:d9:21:51:37:91:16:aa:ae:92:bd:92:84:ec:
24:a1:ac:34:34:a0:c0:29:3a:fa:c2:dd:64:cf:ef:ab:0d:bb:
9b:7b:ce:38:50:0b:a4:52:61:ee:4a:b0:f2:5d:83:c8:37:f6:
3d:31:40:b4:ed:a4:a8:4d:c7:7c:5f:97:8e:81:37:b6:37:20:
7e:e6:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org