Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/BF0B893E669711EB8BD55A56C4F9AE02.roa
File: BF0B893E669711EB8BD55A56C4F9AE02.roa (raw, json)
Hash identifier: ZZCwWf5MYazTZDgPMKzL90bIjmY/76kvmcr+TkjN6fA=
Subject key identifier: 40:B7:3F:89:9E:8A:AA:A5:15:C5:7E:C6:B0:98:65:85:43:E2:A6:FF
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 04B9
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/BF0B893E669711EB8BD55A56C4F9AE02.roa
Signing time: Fri 05 Nov 2021 02:48:19 +0000
ROA not before: Fri 05 Nov 2021 02:48:19 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 17907
IP address blocks: 36.255.112.0/22 maxlen: 22
45.113.92.0/22 maxlen: 22
45.118.64.0/22 maxlen: 22
103.25.180.0/22 maxlen: 22
103.28.160.0/24 maxlen: 24
103.192.192.0/22 maxlen: 22
103.224.49.0/24 maxlen: 24
103.224.52.0/23 maxlen: 23
119.40.104.0/21 maxlen: 24
163.47.68.0/22 maxlen: 22
2401:380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Nov 5 02:48:19 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61849b73-adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:98:f6:d1:e7:44:26:6b:54:8b:a4:cc:ad:
a1:93:b7:18:ab:53:48:e4:16:55:33:03:c3:4d:b3:
9c:47:8a:c0:a6:e2:c8:13:13:89:fe:87:5b:c3:b9:
ea:6b:f2:ae:12:c8:f5:84:ab:10:ff:54:5c:18:90:
d2:d3:a3:eb:ed:5d:81:1f:fb:97:2d:03:19:06:93:
79:37:f2:31:bf:f8:08:a4:58:74:8a:3a:79:25:6c:
56:ae:24:de:9c:ba:11:27:5e:30:f6:c4:8e:86:2a:
8a:99:26:0f:45:b3:09:92:8c:58:4f:d0:5d:e7:91:
65:47:8e:7c:da:19:29:15:3d:bd:38:f3:f4:46:92:
79:1f:48:72:c1:94:64:67:7a:99:7a:c0:bb:2d:15:
c8:bf:b8:ff:9b:bc:f0:23:3d:a1:7b:51:ed:a1:ed:
08:ab:55:3f:13:60:77:63:dd:ad:db:69:64:da:d6:
4e:95:d1:1a:ed:44:db:86:b1:8f:39:de:2c:16:b8:
9a:c5:b3:50:1c:9e:12:6b:86:11:43:0e:38:03:b5:
da:0f:07:b5:b3:2a:14:b0:b6:51:7f:9b:92:d3:be:
bf:0c:c2:2f:c8:75:41:ea:bb:82:73:ac:11:00:e9:
3b:30:32:96:0f:d0:bf:8a:85:62:d5:32:83:6d:07:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:3F:89:9E:8A:AA:A5:15:C5:7E:C6:B0:98:65:85:43:E2:A6:FF
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/BF0B893E669711EB8BD55A56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.112.0/22
45.113.92.0/22
45.118.64.0/22
103.25.180.0/22
103.28.160.0/24
103.192.192.0/22
103.224.49.0/24
103.224.52.0/23
119.40.104.0/21
163.47.68.0/22
IPv6:
2401:380::/32
Signature Algorithm: sha256WithRSAEncryption
91:f7:9c:05:53:7e:33:5c:05:5d:a8:58:17:46:96:29:ba:1d:
32:f6:fa:35:3e:e8:07:76:e4:92:56:19:9f:95:ae:ad:5c:0a:
aa:d2:78:39:ff:7c:19:f9:eb:a7:89:d3:ac:1c:2a:de:1f:e9:
f6:e8:7e:07:6b:39:b5:25:27:1b:4b:af:e3:1b:f7:e2:c0:36:
cc:33:78:8f:8f:b6:df:cb:c0:b4:28:41:ca:1d:5f:20:d8:68:
10:78:11:20:1d:6d:a8:95:d0:c8:35:70:c7:da:85:59:0c:65:
72:43:e8:cd:21:05:97:45:9c:08:ba:58:cb:50:61:fd:1a:4d:
ce:19:74:f3:cf:e9:a3:41:97:cf:32:50:d9:0b:b4:ea:66:cc:
bb:21:c9:c0:ec:c7:aa:5f:d7:d4:c3:79:29:90:76:cf:0a:5f:
07:97:34:90:97:4d:ae:64:62:06:42:8a:4b:c8:4a:c4:8c:36:
c1:34:bf:a4:2e:2f:c5:b5:16:3e:e7:a8:c6:55:40:ad:e3:67:
3f:1d:4f:15:59:2b:ac:58:78:cb:86:c2:d2:55:bc:50:0e:5e:
6c:1f:c9:43:b4:48:82:26:8f:5c:4b:76:a7:e3:3e:29:5d:29:
ab:7c:33:32:c4:65:3f:3e:7c:14:cf:2f:bf:e9:87:9b:83:a4:
14:b0:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org