Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/448BE3D6113911EDA2ECDE16C4F9AE02.roa
File: 448BE3D6113911EDA2ECDE16C4F9AE02.roa (raw, json)
Hash identifier: RSQV5Yo5AjPYyH79DLz5rRGG1NBUaBIZVxJUc7oURhE=
Subject key identifier: E4:B7:DD:E5:49:26:18:42:D6:3C:EB:56:91:D4:53:1C:21:DB:25:E0
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0716
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/448BE3D6113911EDA2ECDE16C4F9AE02.roa
Signing time: Mon 01 Aug 2022 01:28:38 +0000
ROA not before: Mon 01 Aug 2022 01:28:38 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24129
IP address blocks: 116.255.41.0/24 maxlen: 24
116.255.43.0/24 maxlen: 24
116.255.44.0/24 maxlen: 24
116.255.47.0/24 maxlen: 24
116.255.48.0/24 maxlen: 24
116.255.50.0/24 maxlen: 24
116.255.53.0/24 maxlen: 24
125.63.23.0/24 maxlen: 24
203.10.77.0/24 maxlen: 24
203.14.230.0/24 maxlen: 24
203.27.116.0/24 maxlen: 24
223.27.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Aug 1 01:28:38 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62e72c46-acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:93:ff:d6:69:34:ed:73:31:58:9a:58:7e:
bb:75:31:9f:83:61:97:ed:84:25:2e:f0:ff:b6:75:
00:c2:85:b7:94:ed:08:9a:cd:f2:75:88:f1:8e:03:
5d:ce:87:f5:21:84:a2:aa:db:60:f2:43:f0:84:e1:
db:da:14:d5:e6:0c:11:98:e3:09:de:62:c4:33:6c:
66:77:50:02:2b:6e:cd:74:2f:59:91:28:83:b2:ef:
17:6f:81:ff:46:a4:dd:db:f7:71:a8:af:a4:e6:16:
d1:ee:b0:f9:cc:55:4f:70:d3:2c:c3:3c:bf:9f:26:
0b:73:a9:17:d1:2b:ec:81:8e:1e:85:91:32:14:f1:
e6:2d:fa:2d:c5:80:be:48:02:36:be:ca:fd:58:f5:
a4:e6:bc:f2:f6:b6:3f:cb:39:58:0e:2c:b2:d7:e5:
6f:20:3d:63:93:e6:b1:62:c6:7e:b1:d0:14:dc:23:
d5:07:ae:8a:63:32:ca:90:e3:82:15:d9:07:4c:28:
cf:3f:dd:34:23:90:45:2c:35:78:36:57:e1:5a:da:
63:05:1c:66:89:a3:51:af:a6:63:86:1b:7d:b4:8a:
fa:22:32:28:46:40:c1:ec:02:26:e3:f6:6a:60:7e:
5e:7d:ad:16:24:60:df:5a:2e:58:4e:04:58:c0:87:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B7:DD:E5:49:26:18:42:D6:3C:EB:56:91:D4:53:1C:21:DB:25:E0
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/448BE3D6113911EDA2ECDE16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.255.41.0/24
116.255.43.0-116.255.44.255
116.255.47.0-116.255.48.255
116.255.50.0/24
116.255.53.0/24
125.63.23.0/24
203.10.77.0/24
203.14.230.0/24
203.27.116.0/24
223.27.64.0/23
Signature Algorithm: sha256WithRSAEncryption
46:cb:68:52:ab:ca:ed:05:b4:f8:ad:a2:90:88:1a:c9:b5:27:
c2:38:d9:90:d3:10:ca:cd:0e:a6:f0:3e:05:da:e8:97:71:16:
34:64:2f:cf:e9:9c:d4:0b:f3:ea:85:23:11:34:92:40:12:7b:
c2:f9:97:d3:dc:76:ba:d2:f4:d0:49:e0:79:2a:d6:30:18:78:
f3:8d:60:ef:b4:1d:4b:95:f3:17:7a:91:a2:df:b0:47:eb:d1:
2c:b5:92:a2:68:2b:e7:fd:2a:b2:6e:bc:db:3f:33:89:4b:1d:
1f:49:a8:f0:68:22:b3:2a:c1:65:49:23:db:f9:36:f8:e4:6b:
67:56:d0:71:fa:a6:37:f0:ab:5e:ff:1e:ec:f2:ac:73:24:3f:
ae:0a:74:73:06:19:cb:de:b6:c0:92:19:1c:ed:a4:c5:4f:2d:
f1:b7:ec:09:62:72:bd:76:4c:86:f2:1c:f2:fc:8c:5a:0a:8e:
33:ce:8d:a7:a7:f5:6f:0e:9f:3c:db:46:df:f1:f3:c9:89:01:
09:87:ec:aa:3f:a8:97:42:28:38:e8:02:23:ba:1f:6b:ab:ca:
3c:7c:7e:44:91:65:cb:d1:c8:f8:73:e9:f0:d4:37:d7:be:91:
f8:af:5f:1e:db:cc:11:b8:d3:11:56:d1:d1:e6:9a:74:3f:3f:
ba:71:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org