Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6A3F75001FD911EBA5D2344AC4F9AE02.roa
File: 6A3F75001FD911EBA5D2344AC4F9AE02.roa (raw, json)
Hash identifier: TrP53PiM2JtIrIqBHfjhV0Jxi8t8ffy1cq2zvrtsIsE=
Subject key identifier: F5:47:BF:5A:97:94:1A:70:77:94:2E:2A:E0:1D:26:28:28:2B:7B:C9
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 32DA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6A3F75001FD911EBA5D2344AC4F9AE02.roa
Signing time: Mon 20 Sep 2021 03:01:29 +0000
ROA not before: Mon 20 Sep 2021 03:01:29 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 45557
IP address blocks: 45.118.136.0/22 maxlen: 22
45.118.136.0/24 maxlen: 24
45.118.137.0/24 maxlen: 24
45.118.138.0/24 maxlen: 24
45.118.139.0/24 maxlen: 24
103.17.88.0/22 maxlen: 22
103.17.88.0/24 maxlen: 24
103.17.89.0/24 maxlen: 24
103.17.90.0/24 maxlen: 24
103.17.91.0/24 maxlen: 24
103.129.80.0/22 maxlen: 22
103.129.80.0/24 maxlen: 24
103.129.81.0/24 maxlen: 24
103.129.82.0/24 maxlen: 24
103.129.83.0/24 maxlen: 24
103.153.218.0/24 maxlen: 24
103.153.219.0/24 maxlen: 24
103.153.220.0/23 maxlen: 24
103.153.222.0/24 maxlen: 24
103.153.223.0/24 maxlen: 24
180.148.0.0/24 maxlen: 24
180.148.1.0/24 maxlen: 24
180.148.2.0/24 maxlen: 24
180.148.3.0/24 maxlen: 24
180.148.4.0/24 maxlen: 24
180.148.5.0/24 maxlen: 24
180.148.6.0/24 maxlen: 24
180.148.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13018 (0x32da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 20 03:01:29 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6147f988-0acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:b6:46:ea:e0:03:93:72:8d:32:34:03:a3:
0a:bf:de:50:19:92:8e:f8:40:cb:fc:a6:73:ab:c8:
6b:17:c9:b0:e6:98:76:e0:68:7f:99:39:ec:af:85:
32:60:37:06:a3:eb:54:23:e0:7e:23:a1:24:db:94:
81:39:c4:50:62:43:c3:50:56:5c:31:b5:ac:b7:e1:
3d:69:bc:f7:a2:55:27:3c:3d:6f:b8:26:9e:e3:f7:
eb:10:02:58:41:d1:dd:1e:73:66:c5:8d:3a:3a:08:
c3:7d:8c:57:f4:e7:da:d1:c0:ad:bc:80:45:6d:e9:
01:9c:bd:28:4f:39:02:bb:05:2e:16:e4:77:d9:94:
2e:35:50:17:6f:0a:53:f1:d1:b8:6e:93:2e:1b:ee:
9c:dc:32:e5:db:6e:a8:fb:ef:8a:32:b1:5b:63:83:
5d:9a:70:bb:8d:d1:56:73:78:1b:c0:20:37:36:5e:
ae:8b:e1:9b:d3:0c:ff:61:06:d0:c7:b6:9d:23:bb:
da:e3:2d:7e:5f:34:f6:01:f3:9e:e8:42:95:dc:df:
2b:a5:c1:5b:12:b3:f6:d2:6c:1a:c4:e8:50:85:96:
2d:11:1d:3f:f3:9f:da:cc:28:a3:29:a9:8e:3c:0b:
66:79:fe:4a:09:77:d0:77:66:d7:cb:aa:64:11:bc:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:BF:5A:97:94:1A:70:77:94:2E:2A:E0:1D:26:28:28:2B:7B:C9
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6A3F75001FD911EBA5D2344AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.136.0/22
103.17.88.0/22
103.129.80.0/22
103.153.218.0-103.153.223.255
180.148.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:3f:ed:7d:fa:49:cf:d1:91:24:34:d5:53:4a:2e:d8:4e:5d:
ef:4d:87:68:0e:b1:31:70:58:48:4c:f0:d5:dc:8c:52:f5:46:
d7:e6:e3:fa:6f:78:9f:8c:05:f3:62:e5:64:c1:27:7e:db:2d:
20:67:b5:92:c4:d4:d5:66:48:ab:b2:b9:e5:70:57:c0:90:05:
c2:c6:d3:a6:fd:56:14:13:25:6e:e9:35:34:cf:9b:37:40:03:
a3:9e:9b:0d:0a:94:c0:7b:a1:76:1e:e9:a3:0c:99:14:c8:c8:
07:d3:13:08:6a:7b:0a:1e:07:9c:d6:60:41:2b:90:c8:c4:71:
ad:fd:0c:4e:55:4f:09:f5:cb:fe:ac:b5:89:1b:4a:7c:5a:b9:
2a:6d:ee:2b:f7:71:61:f2:2a:24:c3:00:8b:dc:3a:f6:3f:7c:
0b:b4:04:b3:3a:c4:4c:b2:09:7a:71:eb:bf:00:79:35:5f:57:
7a:e9:f0:e3:d3:1c:68:ca:7c:19:a6:49:90:b8:c8:c0:4f:a7:
9d:6e:7e:84:68:5f:ea:cc:9e:48:83:91:7a:30:7e:a9:95:66:
60:ab:97:d4:b8:46:57:1b:a1:06:68:27:c0:0e:cd:8a:d8:2a:
86:9b:eb:4f:79:ae:a5:b2:1f:e8:80:77:05:de:49:39:a1:f7:
b3:13:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org