Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/76A34332CF4D11EDABC2FC2DC4F9AE02.roa
File: 76A34332CF4D11EDABC2FC2DC4F9AE02.roa (raw, json)
Hash identifier: cXrpjWu7+DNLpDN/RJsKDBRpBBBr2x6ep0dAKxDQ/1U=
Subject key identifier: 9A:84:47:76:13:E1:55:13:1D:FB:12:A1:14:5F:7A:DE:2F:2A:35:1D
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 04E9
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/76A34332CF4D11EDABC2FC2DC4F9AE02.roa
Signing time: Thu 30 Mar 2023 22:51:53 +0000
ROA not before: Thu 30 Mar 2023 22:51:53 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 17766
IP address blocks: 43.251.108.0/22 maxlen: 24
103.1.228.0/24 maxlen: 24
103.1.229.0/24 maxlen: 24
103.1.230.0/23 maxlen: 24
103.16.148.0/22 maxlen: 22
103.16.148.0/24 maxlen: 24
103.16.149.0/24 maxlen: 24
150.129.84.0/22 maxlen: 22
150.129.84.0/24 maxlen: 24
203.149.64.0/20 maxlen: 20
203.149.64.0/22 maxlen: 22
203.149.64.0/24 maxlen: 24
203.149.65.0/24 maxlen: 24
203.149.66.0/24 maxlen: 24
203.149.67.0/24 maxlen: 24
203.149.68.0/22 maxlen: 22
203.149.68.0/24 maxlen: 24
203.149.69.0/24 maxlen: 24
203.149.70.0/24 maxlen: 24
203.149.71.0/24 maxlen: 24
203.149.72.0/22 maxlen: 22
203.149.72.0/24 maxlen: 24
203.149.73.0/24 maxlen: 24
203.149.74.0/24 maxlen: 24
203.149.75.0/24 maxlen: 24
203.149.76.0/22 maxlen: 22
203.149.76.0/24 maxlen: 24
203.149.77.0/24 maxlen: 24
203.149.78.0/24 maxlen: 24
203.149.79.0/24 maxlen: 24
203.149.80.0/21 maxlen: 22
203.149.80.0/24 maxlen: 24
203.149.81.0/24 maxlen: 24
203.149.82.0/24 maxlen: 24
203.149.83.0/24 maxlen: 24
203.149.84.0/24 maxlen: 24
203.149.85.0/24 maxlen: 24
203.149.86.0/24 maxlen: 24
203.149.87.0/24 maxlen: 24
210.215.0.0/16 maxlen: 16
210.215.5.0/24 maxlen: 24
210.215.6.0/24 maxlen: 24
210.215.48.0/24 maxlen: 24
210.215.72.0/24 maxlen: 24
210.215.75.0/24 maxlen: 24
210.215.77.0/24 maxlen: 24
210.215.83.0/24 maxlen: 24
210.215.84.0/24 maxlen: 24
210.215.87.0/24 maxlen: 24
210.215.90.0/24 maxlen: 24
210.215.101.0/24 maxlen: 24
210.215.102.0/24 maxlen: 24
210.215.130.0/24 maxlen: 24
210.215.131.0/24 maxlen: 24
210.215.136.0/24 maxlen: 24
210.215.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Mar 30 22:51:53 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64261289-f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:9d:2a:90:18:69:92:2e:aa:6f:25:c5:bd:
d4:e1:be:13:dd:00:6b:1d:50:bd:a5:38:4e:4e:4e:
17:6f:93:9b:02:ad:b9:44:cc:74:73:84:91:9c:b8:
ad:7b:88:f4:d7:80:4f:3f:d9:48:e9:4b:41:84:47:
82:29:69:19:5a:91:bb:07:98:29:55:03:e6:86:32:
ce:83:ad:24:62:c0:3a:fa:24:9f:4f:2f:0b:12:d9:
69:35:57:98:71:de:ce:dc:f3:55:85:d8:3b:63:65:
1a:69:91:82:42:f7:97:d2:31:95:5b:26:8f:dc:44:
a8:df:06:fe:7d:d9:90:5b:4f:8e:3c:19:a1:01:13:
df:fb:1c:93:13:9e:ab:e4:c9:83:f0:ae:3b:63:43:
19:18:57:09:f7:7c:93:97:d7:0e:09:1c:e3:37:51:
c7:17:c6:97:52:9d:5e:2c:9a:86:34:69:9a:26:c3:
aa:b9:31:a8:09:d1:54:9b:4f:bb:fe:7f:6b:6b:86:
cf:a7:fb:e9:0d:2e:0b:33:e3:0b:f7:3b:96:3b:cb:
1c:25:b9:0b:d0:ad:84:f3:ad:93:4f:b7:ec:7e:3d:
5d:eb:f0:13:90:19:d5:7e:76:4b:9e:24:ca:73:a0:
71:cf:d7:d3:3e:21:53:a0:72:e1:2e:d0:fe:fd:2d:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:47:76:13:E1:55:13:1D:FB:12:A1:14:5F:7A:DE:2F:2A:35:1D
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/76A34332CF4D11EDABC2FC2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.108.0/22
103.1.228.0/22
103.16.148.0/22
150.129.84.0/22
203.149.64.0-203.149.87.255
210.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:ad:67:40:ba:4c:59:9e:54:f4:13:e1:8e:c7:e9:9b:58:82:
b9:e6:86:6e:40:60:58:0a:d1:fa:7b:f0:13:88:12:d0:7b:d5:
5a:be:9b:0d:ee:e9:65:c1:2a:43:d2:17:0a:22:2f:56:e5:8a:
d8:bb:02:18:a3:07:87:24:62:95:18:7b:98:75:81:b9:5b:2f:
d4:8e:94:29:3b:25:fb:b1:1e:54:d8:af:9e:cc:ce:a4:ab:fe:
98:2a:40:98:e3:91:fd:61:4f:d9:8e:56:e1:97:73:18:9d:85:
a6:54:e3:d8:c0:91:9e:fd:d0:69:29:d0:ad:89:a6:14:1e:eb:
a9:4b:5b:d2:7e:d1:fa:b6:44:66:12:f7:3e:9e:e7:81:31:5a:
e2:04:3e:df:3a:15:96:cc:f6:ac:03:0b:df:25:ed:a7:0a:57:
3a:85:03:6a:c1:52:06:f4:7e:5a:44:ef:92:8c:12:ce:07:03:
b6:e7:dc:92:ae:14:e8:d5:53:1c:52:82:4d:59:48:d7:a3:41:
e0:f8:dc:56:a8:a0:27:76:10:01:37:80:8a:ac:39:29:94:77:
a6:2f:15:cd:8a:83:7f:84:70:7c:39:ef:12:f9:a0:6e:49:fd:
15:3d:ef:d8:96:0a:cb:6a:07:b3:71:72:aa:a9:fc:56:79:4c:
48:ec:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org