Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/AEC2F2886C0511EB9BB28C51C4F9AE02.roa
File: AEC2F2886C0511EB9BB28C51C4F9AE02.roa (raw, json)
Hash identifier: bfAJveAwAM0/5Ar6LHyk64QrozE7Sde3dXR/NhBaXbU=
Subject key identifier: 74:8E:07:7B:F2:5D:55:B7:F4:C8:BB:FC:F2:33:F8:BB:E9:97:1A:04
Certificate issuer: /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial: 033A
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/AEC2F2886C0511EB9BB28C51C4F9AE02.roa
Signing time: Thu 31 Mar 2022 13:50:32 +0000
ROA not before: Thu 31 Mar 2022 13:50:32 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 133736
IP address blocks: 43.245.132.0/22 maxlen: 22
43.245.132.0/24 maxlen: 24
43.245.133.0/24 maxlen: 24
43.245.134.0/24 maxlen: 24
43.245.135.0/24 maxlen: 24
103.31.88.0/22 maxlen: 22
103.47.0.0/24 maxlen: 24
103.55.132.0/24 maxlen: 24
103.55.134.0/23 maxlen: 24
144.48.232.0/22 maxlen: 22
144.48.232.0/24 maxlen: 24
144.48.233.0/24 maxlen: 24
144.48.234.0/24 maxlen: 24
144.48.235.0/24 maxlen: 24
202.179.144.0/22 maxlen: 22
203.166.216.0/24 maxlen: 24
203.189.124.0/22 maxlen: 22
221.120.164.0/22 maxlen: 24
2401:8140::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Validity
Not Before: Mar 31 13:50:32 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6245b1a8-53e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:cb:39:05:a7:85:73:97:19:1c:9e:5b:99:
cd:8e:4d:7c:23:b4:9d:70:44:d2:2d:7d:d8:3f:c6:
f0:c0:b5:94:41:ec:5e:99:4a:7c:9e:37:53:31:94:
6c:83:92:ac:75:56:87:55:82:f9:5a:69:38:8e:74:
21:ab:df:9c:a5:d8:98:5c:1b:6b:44:db:b7:58:7d:
22:64:1e:87:46:13:05:ea:b0:06:a0:42:cf:4b:b7:
d5:56:0f:88:cb:15:5f:ec:9e:3e:0f:b5:7e:68:ca:
8d:bf:dd:85:ff:72:1f:75:eb:65:d9:99:4b:d9:b3:
76:2e:61:ff:7e:2c:80:9a:c1:47:d2:6e:2a:2f:3c:
75:9c:c6:a3:8a:27:9d:c6:b3:7e:20:e4:03:55:4f:
97:a6:c0:77:03:68:a1:b2:47:76:05:22:4a:5e:5c:
4d:2d:31:95:4b:cd:58:16:10:c8:44:c0:55:e4:83:
5e:7f:80:46:5b:09:e9:d8:4b:3a:12:c4:5f:2e:b3:
4c:20:c7:6e:45:f4:e7:9d:6d:3e:28:15:1e:61:38:
2c:eb:71:93:8e:f3:e7:cc:fd:27:f1:d5:59:f7:4a:
91:c4:2c:d7:1f:c6:7b:9d:9f:02:d9:69:fc:d2:bd:
dc:d0:2a:f5:7a:4e:c3:ed:ac:9c:72:ca:c9:64:0d:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:07:7B:F2:5D:55:B7:F4:C8:BB:FC:F2:33:F8:BB:E9:97:1A:04
X509v3 Authority Key Identifier:
keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/AEC2F2886C0511EB9BB28C51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.132.0/22
103.31.88.0/22
103.47.0.0/24
103.55.132.0/24
103.55.134.0/23
144.48.232.0/22
202.179.144.0/22
203.166.216.0/24
203.189.124.0/22
221.120.164.0/22
IPv6:
2401:8140::/32
Signature Algorithm: sha256WithRSAEncryption
48:1a:75:34:58:3b:1e:0a:e7:de:29:9e:08:f5:ac:f2:0e:48:
dc:cb:6b:9b:b9:39:8d:f2:15:0b:b3:ae:43:b9:46:33:ef:3c:
18:50:fc:35:00:cf:9c:c5:17:7c:48:cd:2a:09:02:46:c7:7e:
5b:b2:af:7e:6e:55:53:c4:e8:82:5a:65:3f:cd:70:7f:7f:5b:
25:84:05:dd:8c:6e:ad:3e:cd:ce:d6:93:47:70:4b:4d:a1:b6:
6d:64:a9:57:a3:92:6a:c1:df:c0:3a:7e:7c:e6:d2:20:f2:3f:
3a:31:e0:00:41:64:ac:a1:ca:f1:8c:ef:a0:c3:71:2b:5b:21:
d8:15:f6:87:d7:7b:37:80:4d:2c:8d:5e:ac:30:48:8a:4a:00:
ff:b1:fa:49:45:ef:cf:4f:82:78:e1:4f:c9:d1:06:5d:a7:14:
aa:49:70:98:04:7f:51:84:52:f3:fe:5f:0b:f1:0b:78:4d:42:
45:13:4d:9d:01:35:a3:91:50:cc:d8:29:b1:3a:69:e9:15:04:
e4:c8:be:86:25:3d:7c:31:9c:a8:36:0b:44:63:ad:a3:28:5a:
3a:7e:c6:f6:44:38:17:7e:07:47:95:67:df:40:85:90:3d:8a:
e9:f4:b8:5e:58:43:be:a2:4f:32:08:8c:f6:ec:9b:aa:92:f3:
ca:28:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org