Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/1ED952CC676D11EA80966C72C4F9AE02.roa
File: 1ED952CC676D11EA80966C72C4F9AE02.roa (raw, json)
Hash identifier: G16DkJ+XCV0PON42DTOF7/US+c0hXUc8d6jdvJMd7BM=
Subject key identifier: 22:37:CD:6D:C7:D0:F2:E8:9B:9A:1D:86:9D:2A:CA:1C:E7:B5:54:D6
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 2036
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/1ED952CC676D11EA80966C72C4F9AE02.roa
Signing time: Wed 10 May 2023 09:53:03 +0000
ROA not before: Wed 10 May 2023 09:53:03 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 55915
IP address blocks: 43.231.208.0/22 maxlen: 24
45.64.160.0/22 maxlen: 24
49.236.212.0/22 maxlen: 24
103.1.92.0/22 maxlen: 24
103.51.16.0/22 maxlen: 24
202.94.66.0/24 maxlen: 24
2407:5200::/32 maxlen: 32
2407:5200:1::/48 maxlen: 48
2407:5200:32::/48 maxlen: 48
2407:5200:48::/48 maxlen: 48
2407:5200:49::/48 maxlen: 48
2407:5200:4c::/46 maxlen: 48
2407:5200:50::/46 maxlen: 48
2407:5200:200::/46 maxlen: 48
2407:5200:204::/46 maxlen: 48
2407:5200:300::/46 maxlen: 48
2407:5200:400::/46 maxlen: 48
2407:5200:600::/46 maxlen: 48
2407:5200:1000::/40 maxlen: 48
2407:5200:1200::/40 maxlen: 48
2407:5200:1300::/40 maxlen: 48
2407:5200:1500::/40 maxlen: 40
2407:5200:159c::/47 maxlen: 48
2407:5200:15a0::/43 maxlen: 48
2407:5200:4920::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8246 (0x2036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Validity
Not Before: May 10 09:53:03 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=645b697f-c312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:60:90:d3:5c:7a:4c:76:cd:3f:fd:45:b3:
db:58:d1:91:c7:03:9f:7e:b4:67:cd:ad:40:16:fb:
f8:ad:48:af:28:7d:27:25:76:9b:bb:e2:6e:26:c2:
c3:03:f0:2e:92:11:f0:36:ef:0b:38:1f:5d:19:29:
c8:83:ad:98:fd:e0:9e:24:70:ec:7b:fe:da:35:8a:
36:a9:7a:2c:5d:66:d8:df:ec:8a:bb:33:8c:e3:76:
88:5c:ef:f0:01:9f:8d:05:7f:be:6b:73:44:b3:52:
c7:23:83:49:8c:60:c1:13:7e:36:9d:8f:1f:3f:3e:
43:c5:66:a3:03:a7:c7:65:3d:37:12:86:b2:3e:69:
48:89:41:43:66:d4:e2:dd:8d:b8:9e:77:1b:5d:d7:
12:0a:c7:60:ef:a0:13:30:d3:c6:14:98:33:24:18:
b1:87:46:43:2e:f6:ae:97:db:c6:46:79:7f:46:d6:
14:7a:a1:6b:07:2d:bb:72:18:4a:50:d0:91:0e:73:
37:18:79:e7:d7:28:18:17:c9:d9:c9:b0:b8:ab:62:
6d:96:a8:36:da:8a:3f:66:67:da:d8:5d:df:29:14:
bd:f1:f2:ed:e3:e9:89:7f:8a:30:6c:37:e6:92:fd:
f5:28:1b:29:8b:8f:2b:2e:78:42:7c:4e:d4:cd:82:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:CD:6D:C7:D0:F2:E8:9B:9A:1D:86:9D:2A:CA:1C:E7:B5:54:D6
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/1ED952CC676D11EA80966C72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.208.0/22
45.64.160.0/22
49.236.212.0/22
103.1.92.0/22
103.51.16.0/22
202.94.66.0/24
IPv6:
2407:5200::/32
Signature Algorithm: sha256WithRSAEncryption
a1:c5:60:36:7d:75:cf:ba:ed:51:0c:ce:21:77:c1:96:7e:c0:
02:d4:b7:d5:6b:f9:11:09:11:83:7a:f3:df:37:04:f5:80:6e:
62:b6:88:06:50:ae:36:3c:30:72:f6:6c:d8:e9:a8:7e:88:61:
b0:68:7b:f6:0e:9e:da:91:55:89:c7:22:4a:84:22:c2:6c:30:
f1:69:aa:57:6f:23:95:06:66:a5:4f:da:0d:c9:33:50:f9:29:
a1:25:d7:a2:d8:56:7a:0a:70:5b:b6:42:88:ef:e3:71:1f:c9:
b8:32:1d:dc:5c:e9:d9:0e:01:ff:04:11:3f:cd:47:f9:3b:b8:
9d:9e:dd:61:30:86:bb:94:a1:16:c7:13:49:49:d5:3e:6a:10:
a3:fb:7f:69:14:ea:2f:98:20:41:4e:62:5e:75:83:2d:95:be:
b2:21:17:c7:e1:e2:30:b8:00:58:3f:79:af:6f:b2:95:69:52:
3a:85:b8:93:d2:df:4f:c2:7e:98:00:5c:70:3a:d4:d0:cf:3d:
b8:32:2a:52:6c:4a:9e:1c:6d:44:ee:df:dc:34:e8:30:65:cd:
b1:08:82:b1:6e:d7:39:6d:a4:a9:c8:6b:c3:a0:e2:6f:6e:ad:
9e:ff:d1:a0:b1:dd:33:b7:bf:f7:1c:30:fc:ea:77:2c:d3:91:
3d:a7:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org