Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/2DD936325C2F11EA8791B449C4F9AE02.roa
File: 2DD936325C2F11EA8791B449C4F9AE02.roa (raw, json)
Hash identifier: SNqNN1JH4aBmJ5bJU2nIUCOnD7N0a0G1uP5lFxs9+Xc=
Subject key identifier: 60:55:9C:46:9F:1D:7E:DD:FB:0E:51:D8:A8:F6:2A:35:C7:4A:A2:35
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 32B8
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/2DD936325C2F11EA8791B449C4F9AE02.roa
Signing time: Fri 14 Oct 2022 04:20:44 +0000
ROA not before: Fri 14 Oct 2022 04:20:44 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9304
IP address blocks: 103.247.230.0/24 maxlen: 24
103.247.231.0/24 maxlen: 24
114.134.80.0/21 maxlen: 21
114.134.80.0/24 maxlen: 24
114.134.81.0/24 maxlen: 24
114.134.82.0/23 maxlen: 23
114.134.82.0/24 maxlen: 24
114.134.84.0/24 maxlen: 24
114.134.86.0/24 maxlen: 24
175.100.192.0/20 maxlen: 20
175.100.192.0/24 maxlen: 24
175.100.193.0/24 maxlen: 24
175.100.194.0/24 maxlen: 24
175.100.195.0/24 maxlen: 24
175.100.196.0/24 maxlen: 24
175.100.197.0/24 maxlen: 24
175.100.198.0/24 maxlen: 24
175.100.199.0/24 maxlen: 24
175.100.206.0/24 maxlen: 24
2403:5000::/32 maxlen: 32
2403:5000:165::/48 maxlen: 48
2403:5000:171::/48 maxlen: 48
2403:5000:188::/48 maxlen: 48
2403:5000:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12984 (0x32b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Oct 14 04:20:44 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6348e39b-8d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:09:89:09:c8:05:29:65:ce:51:2d:ac:6c:
eb:ac:df:80:3d:09:49:15:7d:30:d4:c7:17:1e:d8:
05:f9:97:68:1d:33:3f:d2:43:2d:3e:59:a7:4e:bf:
60:dc:a8:7e:34:d9:84:58:21:cf:13:18:ef:06:96:
66:63:0a:d2:1d:e7:7e:16:ba:cb:b2:50:a0:52:2a:
33:6d:f5:ca:7c:fa:2b:2a:9f:37:59:8f:d0:7e:ad:
57:9f:2b:fb:ff:3c:49:e5:f1:1e:da:77:75:87:7b:
93:69:a7:ba:e3:72:35:8a:5f:39:27:f7:98:76:dc:
d7:71:b9:82:66:5a:63:ed:84:28:0d:ac:39:bc:94:
e0:61:14:9d:99:c2:e7:85:23:da:ad:c3:3d:19:ab:
56:ca:96:9e:3b:5a:7e:b1:06:06:10:cb:ce:40:36:
72:58:30:aa:5a:a5:7e:65:37:a2:7c:24:82:e2:2a:
c6:47:f7:fa:db:11:85:a6:c2:1b:47:39:42:1f:31:
ea:f6:a7:60:05:0c:7f:0d:37:ad:92:9d:d3:53:9f:
53:8c:a7:35:bd:8c:f1:24:8a:70:cf:e5:22:88:42:
c6:80:d0:b4:e5:19:a5:8a:e8:d9:a7:95:a4:2d:8f:
05:99:c6:95:38:b2:42:54:4e:52:7a:8a:d4:09:6f:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:9C:46:9F:1D:7E:DD:FB:0E:51:D8:A8:F6:2A:35:C7:4A:A2:35
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/2DD936325C2F11EA8791B449C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.230.0/23
114.134.80.0/21
175.100.192.0/20
IPv6:
2403:5000::/32
Signature Algorithm: sha256WithRSAEncryption
86:e3:26:de:af:18:8c:2a:f3:f6:02:50:b6:34:4a:85:80:e9:
9a:65:10:27:f4:91:fb:70:5c:b7:33:86:eb:f6:1c:dd:07:79:
77:94:2d:17:98:f6:6d:da:af:67:4c:70:b7:f4:16:b2:01:9d:
46:2d:df:4a:3f:c4:0f:ff:99:78:b2:7e:51:cd:8a:7d:40:cb:
05:cc:81:c1:f7:88:7b:aa:25:1f:d4:1b:e5:51:4d:cd:6d:e9:
80:42:8d:65:eb:bc:77:21:0e:7b:4d:0c:59:59:92:6e:39:5c:
e8:e5:94:ec:99:a3:71:cc:89:e8:be:74:d1:d5:0c:85:f6:cf:
88:d9:2b:55:f8:4f:36:c0:89:61:59:16:b6:f7:2e:48:ba:f8:
d5:7d:25:97:1f:1c:28:00:1d:e7:77:f2:2b:fc:46:e8:b1:47:
b0:53:8e:41:f1:1a:90:4a:0c:31:2e:aa:82:6c:b8:74:d1:bc:
b8:fb:3c:3f:66:77:ef:ae:48:94:64:41:8b:a1:87:34:76:1f:
4b:d9:34:ba:fa:76:30:6a:4a:f9:fd:ba:e4:df:5c:1f:a4:3f:
be:84:23:66:6e:83:2d:b2:a6:7a:21:eb:af:9e:fb:e9:f0:b3:
68:57:05:0b:9f:a3:ec:9b:24:68:73:aa:d2:9a:43:c9:9b:2a:
ca:37:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-fra.rpki-client.org