Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/95E8CB00CC8E11EAAA3B9538C4F9AE02.roa
File: 95E8CB00CC8E11EAAA3B9538C4F9AE02.roa (raw, json)
Hash identifier: AQlFbXHP2lK4F9jShmM7vpXKSN7Lwqei4afaAsUlNhg=
Subject key identifier: 05:BB:00:75:6A:E4:32:BD:1E:F9:2C:69:48:FB:7B:10:D7:32:D1:A4
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 0330
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/95E8CB00CC8E11EAAA3B9538C4F9AE02.roa
Signing time: Tue 24 Aug 2021 11:45:55 +0000
ROA not before: Tue 24 Aug 2021 11:45:55 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 136933
IP address blocks: 45.125.48.0/24 maxlen: 24
45.125.49.0/24 maxlen: 24
45.125.50.0/24 maxlen: 24
103.193.172.0/24 maxlen: 24
103.193.173.0/24 maxlen: 24
103.193.174.0/24 maxlen: 24
103.193.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Aug 24 11:45:55 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6124dbf2-1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:8e:6f:23:16:97:55:e3:2d:39:ce:ec:ab:
e8:37:32:2e:fc:82:0c:02:a9:76:04:53:0a:69:f3:
a1:df:fe:3f:27:3a:39:40:6e:2e:93:4c:c0:88:65:
00:9f:9a:a8:a9:09:8f:a9:6f:63:55:41:7f:7a:a9:
8c:79:98:df:c8:b3:31:74:1b:5c:06:61:a5:38:39:
fe:43:ef:3d:b9:8b:cd:89:b2:5d:70:50:94:77:be:
a4:bd:12:5f:8e:85:16:d1:0c:68:49:ab:d9:5b:af:
47:56:c2:6a:e3:80:ae:6f:63:e5:6f:69:bf:bc:bf:
e6:b3:b8:e1:4c:54:75:ed:e4:e2:ef:bf:0c:31:49:
ad:2c:9c:5e:43:02:76:f5:d4:73:93:13:0a:52:80:
ed:e3:95:7d:51:c8:bc:81:1d:35:4c:5a:a9:23:12:
29:59:4c:c9:c9:bb:ab:2c:14:3d:92:01:e7:c2:b0:
49:c8:58:22:2f:53:b0:2d:79:d1:a6:76:d5:ab:89:
ec:05:97:3e:f9:1d:a6:5a:f0:92:7c:2c:f6:5f:a4:
14:d0:4f:a5:f2:16:fa:f1:a9:08:75:ac:06:46:93:
77:39:fb:f2:cc:21:57:e4:e5:74:7d:f1:3c:c8:4f:
01:68:48:46:d2:e2:09:88:98:74:8d:9a:1a:bf:a5:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:00:75:6A:E4:32:BD:1E:F9:2C:69:48:FB:7B:10:D7:32:D1:A4
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/95E8CB00CC8E11EAAA3B9538C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.48.0-45.125.50.255
103.193.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:9a:28:1b:f0:d0:d0:59:80:52:95:7a:ce:2a:d8:a4:ce:35:
87:72:85:e1:93:be:05:a5:ba:b1:4b:27:1c:1a:de:72:4a:aa:
c1:61:60:06:3a:66:1d:fe:fd:fd:b0:8e:90:87:73:21:f8:80:
20:ab:7f:d8:f0:d6:3a:6c:a0:6d:de:56:f0:3b:8f:64:c6:75:
3e:89:a1:f1:5f:b1:10:28:aa:b4:59:9e:b1:bb:4e:9c:36:f8:
52:fb:51:14:df:d1:52:b3:78:bd:9a:36:83:35:37:89:fe:fb:
10:e8:31:f0:fa:2a:1b:70:65:15:3d:a9:88:17:e1:f6:1e:20:
76:3e:cd:c2:ce:df:dc:c2:8f:21:de:6a:6f:81:b9:1d:48:6e:
eb:03:95:47:5f:36:65:7f:89:be:30:c7:dd:e4:99:08:37:ed:
a0:f8:78:65:84:2c:e1:da:56:11:9e:f9:d3:4a:7e:4c:64:b0:
79:92:92:98:75:c2:4e:ac:f7:06:9e:fa:5b:60:8b:f7:7f:fe:
03:af:11:01:49:04:f6:1d:04:1d:9e:2b:a9:77:85:f4:13:f2:
b8:2d:83:aa:b2:2b:2f:f6:f3:d2:78:77:c5:1c:58:18:d3:74:
30:84:b3:b8:3a:2a:37:4a:12:3e:b6:80:c9:02:9a:0c:6e:2b:
21:b9:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org