Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/C5344142D29B11EA8ADCF24DC4F9AE02.roa
File: C5344142D29B11EA8ADCF24DC4F9AE02.roa (raw, json)
Hash identifier: 9QHbYzciATiNikireCnXVTOGrDgHGGSTXf6wayIJ51g=
Subject key identifier: 99:56:B5:3E:19:BA:9B:C8:05:E4:F3:B6:9F:0B:DE:E4:E1:E0:E6:80
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 03A9
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/C5344142D29B11EA8ADCF24DC4F9AE02.roa
Signing time: Tue 12 Oct 2021 11:37:48 +0000
ROA not before: Tue 12 Oct 2021 11:37:48 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 17439
IP address blocks: 43.252.88.0/22 maxlen: 24
101.53.128.0/19 maxlen: 24
103.20.212.0/22 maxlen: 24
2001:df0:411::/48 maxlen: 48
2001:df4:3500::/48 maxlen: 48
2406:69c0::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Validity
Not Before: Oct 12 11:37:48 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6165738c-a8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:50:71:7c:e7:b1:0e:9d:ce:9d:4d:5f:8a:
27:26:84:0b:0b:aa:66:2b:17:bc:12:ca:a8:af:12:
4b:5f:50:e1:6a:4c:d7:c4:69:f2:da:01:86:5b:76:
40:5a:15:e5:0e:3b:2b:c4:20:32:4b:6f:ec:d4:ef:
f5:04:6a:4a:1d:12:dc:d5:45:3a:19:59:52:3a:b5:
6e:57:3f:f5:de:91:7c:96:f7:a0:f3:58:bd:b9:83:
2a:bd:39:0a:bd:c1:a1:37:1e:b2:0e:ab:6d:62:62:
39:4a:b7:c0:1c:3f:be:da:5a:a7:6d:06:25:cb:93:
61:e5:b5:16:c4:11:aa:46:a7:45:ac:40:3f:83:4f:
84:8b:e7:38:df:c5:aa:85:63:47:1c:5b:f3:ba:d4:
16:1a:ad:a3:cb:03:b4:9e:b4:f5:f6:05:88:08:d8:
3f:94:60:84:e2:ac:ff:9d:16:0a:c7:c6:16:d6:ec:
6c:49:aa:47:d1:e1:f6:c4:8d:ac:6e:75:c1:82:d6:
b6:ad:42:d9:9c:a6:78:c3:a3:55:78:8f:d7:fa:d4:
ab:bc:4e:3c:2d:9c:4d:52:14:b3:d8:f3:1d:c1:a6:
a3:7c:21:4e:fe:4a:b4:9a:ea:93:c2:57:2b:15:93:
9f:4d:4f:55:84:26:ca:ed:b1:a1:66:50:61:b9:bf:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:B5:3E:19:BA:9B:C8:05:E4:F3:B6:9F:0B:DE:E4:E1:E0:E6:80
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/C5344142D29B11EA8ADCF24DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.88.0/22
101.53.128.0/19
103.20.212.0/22
IPv6:
2001:df0:411::/48
2001:df4:3500::/48
2406:69c0::/32
Signature Algorithm: sha256WithRSAEncryption
13:d5:28:bf:b3:f8:28:43:14:55:5b:c6:79:6f:88:64:31:99:
64:65:29:4e:78:66:b6:06:16:c1:0a:f8:97:db:86:0e:97:a7:
6b:93:36:cc:53:8d:33:b7:07:5f:15:5e:ac:58:d3:0b:29:a6:
be:4e:0d:82:1a:04:59:f9:b6:23:03:0b:53:ce:9f:ed:44:90:
6d:0e:09:7e:85:05:c8:a3:d4:f0:07:e3:24:44:87:00:5c:08:
6b:4d:c6:31:2b:ea:3a:ba:d8:52:de:41:09:a1:8e:18:29:86:
0e:0d:51:1c:e2:4e:34:63:72:db:39:55:cd:6c:e7:4c:35:9e:
17:c7:ab:d9:e3:4f:39:d6:b8:63:8a:7b:b1:05:4a:15:b9:b3:
34:e8:b1:c0:2f:17:88:02:de:92:41:a3:14:9a:e8:ed:aa:f6:
d9:fe:d5:6d:b8:4d:ab:ec:e8:2a:95:61:2a:1c:50:d8:c5:5b:
95:1f:05:04:72:ad:6f:ae:7c:f1:58:31:cf:5b:66:6b:ca:6c:
67:93:b6:d6:f8:2f:bd:b7:db:83:79:12:5a:90:72:82:4e:1d:
e4:a7:9b:e9:ed:41:aa:52:2b:28:d7:05:12:4e:3f:5f:8b:ba:
75:3a:9f:6a:c0:98:8c:7c:fa:1a:d3:1c:c3:c2:1c:d1:24:c7:
96:a0:e9:62
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz
QjI4OTY4REMwHhcNMjExMDEyMTEzNzQ4WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTY1NzM4Yy1hOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kNQcXznsQ6dzp1NX4onJoQLC6pmKxe8EsqorxJLX1DhakzXxGny2gGGW3ZA
WhXlDjsrxCAyS2/s1O/1BGpKHRLc1UU6GVlSOrVuVz/13pF8lveg81i9uYMqvTkK
vcGhNx6yDqttYmI5SrfAHD++2lqnbQYly5Nh5bUWxBGqRqdFrEA/g0+Ei+c438Wq
hWNHHFvzutQWGq2jywO0nrT19gWICNg/lGCE4qz/nRYKx8YW1uxsSapH0eH2xI2s
bnXBgta2rULZnKZ4w6NVeI/X+tSrvE48LZxNUhSz2PMdwaajfCFO/kq0muqTwlcr
FZOfTU9VhCbK7bGhZlBhub+PuwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFJlWtT4Z
upvIBeTztp8L3uTh4OaAMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND
M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvQzUzNDQxNDJE
MjlCMTFFQThBRENGMjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MBgEAgABMBIDBAIr/FgDBAVlNYADBAJnFNQwHwQCAAIwGQMHACABDfAEEQMH
ACABDfQ1AAMFACQGacAwDQYJKoZIhvcNAQELBQADggEBABPVKL+z+ChDFFVbxnlv
iGQxmWRlKU54ZrYGFsEK+Jfbhg6Xp2uTNsxTjTO3B18VXqxY0wsppr5ODYIaBFn5
tiMDC1POn+1EkG0OCX6FBcij1PAH4yREhwBcCGtNxjEr6jq62FLeQQmhjhgphg4N
URziTjRjcts5Vc1s50w1nhfHq9njTznWuGOKe7EFShW5szToscAvF4gC3pJBoxSa
6O2q9tn+1W24Tavs6CqVYSocUNjFW5UfBQRyrW+ufPFYMc9bZmvKbGeTttb4L723
24N5ElqQcoJOHeSnm+ntQapSKyjXBRJOP1+LunU6n2rAmIx8+hrTHMPCHNEkx5ag
6WI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org