Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/21E5901C905A11EC9452EC79C4F9AE02.roa
File: 21E5901C905A11EC9452EC79C4F9AE02.roa (raw, json)
Hash identifier: EpCnoy3TtpmJOnUU+u0bwU92IayI/Y8gMKN70CX2EfQ=
Subject key identifier: AB:C7:DD:FB:B7:D4:E3:4C:3D:BC:28:1A:B0:A8:75:47:AE:84:7F:B7
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 05B6
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/21E5901C905A11EC9452EC79C4F9AE02.roa
Signing time: Fri 18 Feb 2022 01:28:53 +0000
ROA not before: Fri 18 Feb 2022 01:28:53 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24129
IP address blocks: 116.255.34.0/24 maxlen: 24
116.255.35.0/24 maxlen: 24
116.255.40.0/24 maxlen: 24
116.255.41.0/24 maxlen: 24
116.255.43.0/24 maxlen: 24
116.255.44.0/24 maxlen: 24
116.255.45.0/24 maxlen: 24
116.255.47.0/24 maxlen: 24
116.255.48.0/24 maxlen: 24
116.255.49.0/24 maxlen: 24
116.255.50.0/24 maxlen: 24
116.255.52.0/24 maxlen: 24
116.255.53.0/24 maxlen: 24
125.63.23.0/24 maxlen: 24
125.253.12.0/23 maxlen: 23
125.253.12.0/24 maxlen: 24
125.253.13.0/24 maxlen: 24
203.10.77.0/24 maxlen: 24
203.14.230.0/24 maxlen: 24
203.27.116.0/24 maxlen: 24
223.27.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Feb 18 01:28:53 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=620ef655-2cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:cc:ea:a3:a7:ab:4f:04:ea:39:9a:f6:66:
17:5b:04:91:ed:9f:2d:62:22:43:9a:fe:a7:03:e0:
54:11:60:22:c0:55:c2:8d:4b:e4:ee:a4:da:a7:71:
7e:31:01:60:d2:fa:e9:79:ff:b1:b7:eb:e9:49:f9:
c1:31:ab:da:a4:49:f0:95:2b:d5:30:99:ab:8d:11:
ec:4d:71:26:16:2a:6d:dd:2f:d6:3b:c2:4d:61:62:
11:db:c5:37:7d:fc:3f:cb:5e:d1:eb:d0:67:bd:fa:
4f:30:b9:eb:39:47:94:45:07:03:fe:a4:79:90:c5:
1b:ff:69:47:1c:af:29:c5:4a:f8:f8:c5:f0:f4:a2:
7e:4a:2f:8b:b3:92:e8:e4:81:01:07:2f:52:ce:ba:
04:ac:5d:52:27:3b:1d:39:ac:3f:42:96:07:a1:73:
ce:36:38:cc:e3:b2:82:22:9c:d9:9f:51:6e:cc:7c:
c9:94:6d:28:f8:37:23:15:6b:3e:20:f9:f5:a8:ca:
2d:85:b8:77:15:14:00:fd:69:95:ee:93:24:0b:89:
33:6a:3d:b0:7d:5c:0f:8b:f9:9f:33:36:c3:c2:cd:
33:7e:a7:6d:c4:2a:a6:74:c7:01:ba:e0:2f:93:d8:
2d:50:91:80:0e:02:52:f1:15:d9:12:a9:5e:4a:59:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:DD:FB:B7:D4:E3:4C:3D:BC:28:1A:B0:A8:75:47:AE:84:7F:B7
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/21E5901C905A11EC9452EC79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.255.34.0/23
116.255.40.0/23
116.255.43.0-116.255.45.255
116.255.47.0-116.255.50.255
116.255.52.0/23
125.63.23.0/24
125.253.12.0/23
203.10.77.0/24
203.14.230.0/24
203.27.116.0/24
223.27.64.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:be:c4:15:70:ce:39:b6:8b:67:15:2a:79:17:e4:8e:3a:dd:
40:57:6f:a1:8c:6a:c5:74:c7:be:8a:53:73:d8:45:d6:4a:dd:
83:ad:ec:9b:24:bf:1b:40:a8:5c:f7:d3:38:71:0f:1a:bd:29:
bc:ed:bc:34:d1:9b:1f:3b:15:a1:cc:60:ca:84:3b:7e:d3:77:
62:15:86:1a:5d:ae:ba:6e:c8:2e:f5:64:5c:4e:8f:a8:1b:3b:
9d:37:4d:18:3c:23:46:64:37:f4:0b:d9:d0:d9:72:36:c9:04:
11:6e:1c:1d:b8:5f:64:fe:e4:7a:5f:97:99:de:ef:ca:53:ca:
73:41:d8:30:2b:e2:b3:c6:24:b1:9e:88:13:14:67:c3:c6:22:
3e:cb:a5:f5:88:13:13:27:b1:d1:b3:f0:db:a4:60:1d:d1:62:
82:68:b0:2d:b7:01:88:72:e2:84:7c:16:69:29:e4:e2:88:31:
42:f2:de:7a:df:90:fe:45:cf:6c:0d:b4:70:6f:2d:69:26:95:
9e:17:16:5d:cc:77:da:e0:b6:74:59:0c:69:04:14:25:81:14:
53:4a:92:2a:a7:cc:ab:53:a2:df:e0:36:b6:6b:d7:de:dd:80:
79:30:c6:13:76:cc:58:66:25:be:d3:a4:db:96:b0:0d:26:3c:
0b:ca:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org