Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/9333F1B499F211EB8C7F3D2DC4F9AE02.roa
File: 9333F1B499F211EB8C7F3D2DC4F9AE02.roa (raw, json)
Hash identifier: EP4wc2FXcHun4XlM/4XbY5+/PAHM6ZwVQmjYKMupWNg=
Subject key identifier: 89:16:9E:07:FB:6D:F4:3C:24:F5:FD:93:F2:58:4F:6D:AC:20:C4:C3
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 05EF
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/9333F1B499F211EB8C7F3D2DC4F9AE02.roa
Signing time: Thu 01 Feb 2024 12:18:03 +0000
ROA not before: Thu 01 Feb 2024 12:18:03 +0000
ROA not after: Tue 28 May 2024 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Feb 1 12:18:03 2024 GMT
Not After : May 28 00:00:00 2024 GMT
Subject: CN=65bb8bfb-57bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:78:51:03:10:1d:28:27:34:2d:a2:76:cd:
79:a0:35:c3:71:38:c5:2d:5c:f1:4c:32:fa:a5:7c:
0a:ba:58:86:c6:e2:d5:eb:12:86:82:34:66:1b:72:
a3:db:d0:cb:f3:9f:c4:35:b8:dd:34:51:13:59:4b:
df:26:4a:1d:e7:a0:24:c6:ef:38:cb:de:c2:f1:5a:
bd:b6:03:7d:ba:00:3f:19:d6:a4:a1:53:bd:77:37:
cc:36:6a:10:88:bc:25:20:d3:1d:6c:de:45:d2:ae:
c6:a0:e6:7e:9a:1c:93:98:ec:7c:ba:ed:6f:58:66:
65:75:51:8d:f8:a8:21:a4:16:fd:c1:d7:15:7f:94:
a3:b2:3c:86:ba:8b:cb:80:fb:a5:06:af:c6:d0:98:
8a:b5:c4:c4:3f:8f:ff:ba:7e:f5:a9:84:8d:4e:36:
67:df:37:b7:fa:a9:a9:d0:8c:52:eb:5d:6c:cb:ce:
36:16:8b:40:78:f6:4a:95:de:59:fc:99:48:5b:3c:
98:d1:8c:8e:13:99:b9:8a:33:e2:49:8d:f7:8d:ea:
aa:05:5f:71:08:89:66:e9:f5:6d:c4:8d:06:3f:6e:
3b:3c:bc:28:00:56:d9:14:76:21:46:44:da:46:d3:
7c:9b:20:4f:1f:f8:92:1d:fe:94:cb:94:43:6a:89:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:9E:07:FB:6D:F4:3C:24:F5:FD:93:F2:58:4F:6D:AC:20:C4:C3
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/9333F1B499F211EB8C7F3D2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
71:54:59:61:18:f1:08:7d:2f:f0:d8:61:ee:fa:ac:41:fa:55:
e6:16:56:f3:36:b5:98:c1:2a:52:b9:eb:fc:a0:65:04:6a:c9:
da:c1:ac:3b:f9:c5:24:d9:85:1d:47:e9:5c:ac:a1:05:c6:93:
45:ef:32:e4:bd:44:94:04:10:ee:f8:d0:62:e7:41:a2:d6:e0:
63:20:b3:57:87:d3:03:d1:7e:01:d5:87:93:ac:3e:09:82:f5:
92:1c:e2:00:0e:15:37:42:18:82:48:8a:54:06:48:91:ad:6b:
fa:05:5c:0d:ac:88:7f:a1:79:f8:92:3d:ad:9f:33:4a:d2:60:
0b:8c:db:37:10:c8:2f:13:99:f6:12:30:53:ed:00:b7:10:35:
d2:57:8d:51:eb:ee:3d:ce:1e:a6:41:00:09:06:49:38:39:cb:
19:69:83:f1:0c:e4:1f:d8:aa:72:02:da:47:0b:d3:5e:5b:f1:
68:89:ab:36:ba:68:d9:9c:f5:56:6b:6f:45:e8:be:71:96:c6:
e8:7a:0c:71:37:a6:b0:19:a1:2d:82:d8:0b:5c:61:9a:f8:f5:
94:df:1e:39:df:73:47:04:6d:e4:cd:52:81:fa:39:74:84:83:
c7:2c:71:9e:7a:36:6a:97:83:d7:7f:38:59:dc:bb:b6:a6:31:
fa:b0:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org