Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/3CA4FC0A631011EEA54FAF17C4F9AE02.roa
File: 3CA4FC0A631011EEA54FAF17C4F9AE02.roa (raw, json)
Hash identifier: a2lmzdTEejq1J3NVAT5R9bw+1oj50pyjvUa3Y0tCZhw=
Subject key identifier: 3E:C5:A5:CE:4A:4E:1C:C4:52:E7:D4:85:80:77:30:2C:6A:36:CF:7B
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0892
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/3CA4FC0A631011EEA54FAF17C4F9AE02.roa
Signing time: Wed 04 Oct 2023 23:46:28 +0000
ROA not before: Wed 04 Oct 2023 23:46:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 7631
IP address blocks: 123.176.112.0/22 maxlen: 22
123.176.113.0/24 maxlen: 24
123.176.114.0/23 maxlen: 23
123.176.115.0/24 maxlen: 24
123.176.116.0/22 maxlen: 22
123.176.116.0/23 maxlen: 23
123.176.116.0/24 maxlen: 24
125.253.36.0/23 maxlen: 23
203.189.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2194 (0x892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Oct 4 23:46:28 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=651df954-dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:ef:28:67:75:54:03:fd:60:e8:84:2f:00:
4f:01:19:4e:30:56:9d:c6:54:30:81:a7:6a:83:05:
16:8c:a6:40:14:1c:99:9c:b4:a2:f4:67:fe:d1:94:
70:df:b4:ca:20:4f:fc:77:eb:02:31:12:84:f6:6a:
a0:46:00:96:61:6f:55:ee:21:67:af:e4:ef:4d:b3:
d3:64:82:eb:c8:76:c0:09:1d:8b:c1:08:54:f2:85:
1b:cd:cb:93:93:4e:84:a6:bf:1b:b3:02:d3:8f:64:
fa:df:7e:79:1e:cf:8d:77:7d:93:52:0e:0a:67:aa:
e6:b8:a9:97:6e:ce:be:83:20:18:9c:41:ec:18:4a:
c8:69:ce:fe:49:ec:09:98:2f:1e:59:17:ec:90:18:
96:3d:02:99:70:24:24:00:75:4b:26:36:82:40:da:
76:f3:1c:ee:3c:19:49:bd:57:20:75:53:bb:89:a8:
e3:c5:6f:aa:18:63:a3:64:28:4f:8e:96:d7:fa:45:
54:dd:58:63:0d:20:c6:9b:38:a0:e0:f2:ab:a6:f8:
ec:1c:30:58:d7:cb:3a:86:2b:b2:18:f0:64:f1:45:
46:62:1a:51:4c:75:66:ba:ed:51:ca:6d:73:dd:15:
54:d0:d6:5e:35:7a:3b:c7:0c:1e:fa:7c:26:c4:9b:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:A5:CE:4A:4E:1C:C4:52:E7:D4:85:80:77:30:2C:6A:36:CF:7B
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/3CA4FC0A631011EEA54FAF17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.112.0/21
125.253.36.0/23
203.189.4.0/24
Signature Algorithm: sha256WithRSAEncryption
db:71:f2:a1:63:cd:df:23:f3:e0:61:7f:b8:bd:6b:86:2d:9d:
19:86:82:1e:b0:6c:32:af:b0:2d:68:0e:86:ec:76:b0:64:7d:
fd:e0:e2:8d:a3:b5:94:e6:e7:85:9e:0d:1a:2d:8f:de:96:11:
db:96:03:7a:a9:c1:68:e8:3f:2f:ad:e6:7f:91:60:6e:bd:04:
f1:bf:f0:56:5f:eb:5f:6d:dc:4f:6c:42:56:e0:97:ab:b7:24:
62:3d:1d:f0:0d:26:e6:7f:c5:6f:44:3b:f8:db:40:f9:94:1d:
6f:95:a7:c5:63:e6:88:ae:91:9e:4c:c9:5e:35:f5:b9:27:b1:
2e:ff:d2:70:33:7e:27:ff:84:b1:21:e5:38:b3:96:7d:42:e2:
11:74:1a:0f:d9:44:3a:f7:73:ef:bc:2a:4d:20:f3:c1:d7:34:
4f:4b:f4:35:0c:4f:66:71:13:73:c9:93:c4:5f:5e:94:b7:86:
ef:1b:95:62:1c:f2:bd:05:3f:f2:14:b7:de:0f:a1:c8:28:9f:
8b:3a:66:95:10:37:11:42:3b:79:a9:a3:1f:57:30:3f:98:f7:
90:da:91:1b:5d:ea:3c:b1:37:a0:c7:97:7f:76:33:0a:1f:8c:
16:dc:7e:8b:a4:0b:51:58:e8:5b:33:c7:eb:37:04:c8:76:96:
f6:29:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org