Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E73E3036E39E11EAAAE0622CC4F9AE02.roa
File: E73E3036E39E11EAAAE0622CC4F9AE02.roa (raw, json)
Hash identifier: 8uCtTRgBa7UeJNg7INor0zd5W4DcWlyf+0BfUHTItVE=
Subject key identifier: 84:64:46:13:E7:38:45:82:11:73:6A:28:F3:E6:82:5A:9A:2B:CC:17
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 327D
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E73E3036E39E11EAAAE0622CC4F9AE02.roa
Signing time: Thu 11 Aug 2022 02:40:26 +0000
ROA not before: Thu 11 Aug 2022 02:40:26 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 4007
IP address blocks: 103.235.196.0/22 maxlen: 24
163.53.24.0/23 maxlen: 24
202.51.69.0/24 maxlen: 24
202.51.80.0/24 maxlen: 24
202.51.82.0/23 maxlen: 24
202.51.88.0/23 maxlen: 23
202.51.88.0/24 maxlen: 24
202.51.89.0/24 maxlen: 24
202.51.92.0/24 maxlen: 24
202.51.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12925 (0x327d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Aug 11 02:40:26 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f46c19-c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:4e:7e:44:4c:af:95:07:34:c3:cf:26:aa:
66:76:7a:d5:70:07:76:0e:25:06:8d:5f:a0:68:ac:
12:06:a4:0e:91:60:3b:4d:6c:40:30:d4:e1:5e:4c:
98:46:90:7a:ee:d4:56:14:f9:20:e2:23:65:f3:4b:
f1:66:b5:a3:8f:7d:dc:64:a1:00:58:d5:2e:8f:dc:
be:d7:8a:77:65:ca:5b:8b:8d:a1:4d:87:9b:f3:10:
bb:bb:91:28:a8:93:7a:c9:93:1d:26:ad:f5:52:34:
f7:28:4e:8a:d3:22:f5:cf:2d:3d:ff:3b:28:42:68:
3f:51:fd:e9:00:2b:ca:74:9f:3f:46:e7:7c:8b:b9:
8f:cd:f8:60:ae:e8:69:16:08:49:6e:56:bd:fc:e7:
ce:9d:26:0e:9f:fb:a3:60:5d:35:1e:2b:03:e9:24:
16:11:a4:79:4f:e8:b6:47:db:7d:82:c8:c0:82:14:
44:32:53:9d:ea:87:1f:78:ef:fc:d6:c3:d1:c8:0e:
88:7c:58:e6:ca:bc:ed:eb:bc:33:e0:a7:98:19:85:
93:17:ad:89:a8:98:7d:50:42:32:4f:5f:2b:26:ca:
48:88:26:24:38:22:25:d7:fc:69:82:39:c3:dd:93:
ce:f6:e4:1c:2b:4b:78:72:0e:e5:4a:d8:b3:b5:54:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:46:13:E7:38:45:82:11:73:6A:28:F3:E6:82:5A:9A:2B:CC:17
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E73E3036E39E11EAAAE0622CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.196.0/22
163.53.24.0/23
202.51.69.0/24
202.51.80.0/24
202.51.82.0/23
202.51.88.0/23
202.51.92.0/23
Signature Algorithm: sha256WithRSAEncryption
08:56:11:72:00:50:d3:f3:9e:fe:f5:d7:ca:2b:0c:5e:e5:96:
33:0f:3a:32:93:2f:35:49:34:16:75:bf:11:4f:7e:dd:52:7c:
e4:4c:17:97:b9:4d:0b:d7:49:9e:3a:5e:54:9f:bf:e6:cd:76:
73:08:85:65:90:a0:31:3e:58:3c:27:01:43:9e:6a:24:72:16:
15:16:59:ad:c8:0c:23:cc:8c:bf:2f:43:91:3a:45:8c:c6:e5:
e5:ce:c8:25:28:a6:2a:28:11:c3:38:49:e2:a0:df:42:a0:b6:
35:fd:b2:61:af:15:17:af:bc:08:c5:a9:d3:b9:57:9a:71:ba:
01:1d:6a:eb:35:5a:af:83:ec:c1:48:ff:16:f4:4b:78:63:d8:
37:68:cc:b7:48:1c:73:e4:44:40:6f:76:a8:9e:6d:5e:91:cb:
27:8d:5f:40:4d:69:20:13:81:84:d4:9d:fd:c3:d3:40:ee:8c:
92:f1:3b:bb:01:4d:2e:41:10:13:01:e4:72:92:e2:5d:9b:40:
e8:20:be:fc:e4:89:15:6d:c0:a7:83:dc:f9:ef:20:97:e6:a1:
d3:cc:91:ea:d7:7c:eb:7a:93:d0:7c:b2:81:f6:bc:a4:5d:9e:
16:80:88:fe:b0:c4:4a:dc:aa:b6:0a:87:b0:e0:05:06:34:ee:
89:d0:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org