Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D1BA1E8092F911E7A97ED45DC4F9AE02.roa
File: D1BA1E8092F911E7A97ED45DC4F9AE02.roa (raw, json)
Hash identifier: JuokbNKirl0GCf2sVXBGMLCb2sM/50LyQvEaLdUQa+4=
Subject key identifier: B4:2B:1A:D3:B1:C6:21:85:B1:CF:B4:59:72:9E:A0:53:B6:DC:3C:96
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 1693
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D1BA1E8092F911E7A97ED45DC4F9AE02.roa
Signing time: Tue 06 Sep 2022 05:33:55 +0000
ROA not before: Tue 06 Sep 2022 05:33:55 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 9934
IP address blocks: 103.242.44.0/22 maxlen: 22
202.179.0.0/19 maxlen: 19
202.179.0.0/24 maxlen: 24
202.179.1.0/24 maxlen: 24
202.179.2.0/24 maxlen: 24
202.179.3.0/24 maxlen: 24
202.179.4.0/24 maxlen: 24
202.179.5.0/24 maxlen: 24
202.179.6.0/24 maxlen: 24
202.179.7.0/24 maxlen: 24
202.179.8.0/24 maxlen: 24
202.179.9.0/24 maxlen: 24
202.179.10.0/24 maxlen: 24
202.179.11.0/24 maxlen: 24
202.179.12.0/24 maxlen: 24
202.179.13.0/24 maxlen: 24
202.179.14.0/23 maxlen: 23
202.179.16.0/22 maxlen: 22
202.179.20.0/23 maxlen: 23
202.179.22.0/24 maxlen: 24
202.179.23.0/24 maxlen: 24
202.179.24.0/24 maxlen: 24
202.179.25.0/24 maxlen: 24
202.179.26.0/24 maxlen: 24
202.179.27.0/24 maxlen: 24
202.179.28.0/24 maxlen: 24
202.179.29.0/24 maxlen: 24
202.179.30.0/24 maxlen: 24
202.179.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5779 (0x1693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Sep 6 05:33:55 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6316dbc3-4def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:e7:95:15:b0:38:71:00:ee:24:21:30:1f:
4c:35:71:6d:ff:15:40:fb:51:36:19:49:4a:32:10:
62:93:90:bc:19:b7:91:6a:92:39:b0:0e:e1:cb:8f:
96:78:30:2a:a4:45:1c:8a:95:b3:48:90:7f:43:41:
b6:99:22:ac:fe:ca:bc:52:5d:ba:6e:ae:37:c9:ab:
ad:bc:47:5b:69:d0:5d:db:f9:8d:c8:ba:ad:7a:61:
cb:72:4c:9e:da:c6:bc:14:14:2f:f5:36:d5:cf:1d:
3a:f0:ef:4b:40:9c:2d:3c:59:20:50:e2:bf:00:67:
6f:1a:8f:d8:98:44:05:96:38:8f:96:0e:06:6c:9c:
a1:e3:4f:f5:bc:b5:f2:c6:98:05:ef:7b:e8:2d:69:
d8:9e:2c:fd:e1:c1:dc:f1:07:4e:51:a3:8c:a6:38:
e9:1f:c5:b0:54:6c:b9:6c:f0:66:f7:d4:eb:55:a3:
e6:b3:66:b3:cc:80:ee:a8:65:48:6c:1d:57:84:06:
5d:a3:f1:fd:2e:d7:ec:42:cb:8a:23:ba:77:f2:5a:
a3:40:04:0d:f3:26:6a:21:04:ca:92:c1:22:5d:76:
7f:90:dc:00:cc:3d:59:dc:a5:56:93:44:f6:c6:68:
58:9f:4d:36:88:24:57:f5:f3:5c:ff:68:12:db:84:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:1A:D3:B1:C6:21:85:B1:CF:B4:59:72:9E:A0:53:B6:DC:3C:96
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D1BA1E8092F911E7A97ED45DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.44.0/22
202.179.0.0/19
Signature Algorithm: sha256WithRSAEncryption
11:dd:a4:ee:9f:48:8b:d8:ec:15:9a:87:fb:93:cf:38:08:eb:
c4:a7:66:ff:36:4e:49:e6:4f:a3:ad:6b:3f:e2:45:3f:7a:4d:
c5:b5:24:73:ae:67:74:57:ad:0a:0a:df:bb:85:29:d1:7f:bb:
de:83:8b:68:49:3a:21:e3:93:0c:84:f4:ee:56:c0:8b:31:97:
57:1f:9c:f4:f9:79:fe:18:30:3d:d8:5c:cd:3d:4f:03:7d:c0:
dc:50:07:3a:af:ff:90:66:e1:72:d8:ec:7f:86:ab:cc:4d:a2:
3f:3f:85:ec:b3:cd:e1:c5:60:8f:93:0b:3d:b0:0d:44:5e:e0:
be:fe:5b:b4:19:52:50:4a:f4:ca:e0:d2:33:80:24:60:a5:4b:
e6:c0:4b:ba:86:07:88:d1:41:e8:31:6f:d7:54:a9:e5:d3:8d:
a6:b3:a1:f5:59:16:46:81:61:1a:3b:0f:4c:29:4b:f5:2c:35:
55:c5:d7:fc:d8:14:a2:d7:d5:55:89:73:e1:a6:06:e1:9e:55:
95:77:b2:4e:1b:93:d6:d0:94:7f:29:0f:20:86:6c:04:42:8b:
47:9b:1c:33:d0:e7:f9:26:b1:94:74:ca:d9:4a:15:84:f5:f5:
60:d1:51:10:d3:e1:57:8b:75:fa:b0:b4:80:70:82:c3:ec:75:
e5:73:ea:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org