Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/99A48B02E3EE11ECA15AE91BC4F9AE02.roa
File: 99A48B02E3EE11ECA15AE91BC4F9AE02.roa (raw, json)
Hash identifier: vGlBVxKNnNjQ6fmgpmTLMLM5TPSKCSMJsF9IGDcAZjc=
Subject key identifier: 81:DC:10:BA:DA:52:3F:E7:33:4B:E8:A1:F1:6C:A6:1F:19:C1:4B:A5
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 31C5
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/99A48B02E3EE11ECA15AE91BC4F9AE02.roa
Signing time: Tue 07 Jun 2022 09:20:48 +0000
ROA not before: Tue 07 Jun 2022 09:20:47 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 13335
IP address blocks: 43.245.200.0/24 maxlen: 24
43.245.201.0/24 maxlen: 24
43.245.202.0/24 maxlen: 24
43.245.203.0/24 maxlen: 24
103.14.248.0/24 maxlen: 24
103.14.249.0/24 maxlen: 24
103.14.250.0/24 maxlen: 24
103.14.251.0/24 maxlen: 24
180.178.124.0/24 maxlen: 24
180.178.125.0/24 maxlen: 24
180.178.126.0/24 maxlen: 24
180.178.127.0/24 maxlen: 24
203.217.168.0/24 maxlen: 24
203.217.169.0/24 maxlen: 24
203.217.170.0/24 maxlen: 24
203.217.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12741 (0x31c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Validity
Not Before: Jun 7 09:20:47 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=629f186f-10ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:a6:71:d7:62:e8:8e:53:0f:ae:69:f8:3a:
ed:c1:d8:00:e8:95:40:f5:d1:b7:7e:47:22:97:af:
72:d0:a4:04:b3:5a:6d:58:59:b7:e6:37:96:cb:f3:
d2:3c:1f:9f:6b:68:c7:02:be:a2:41:9a:33:7e:3b:
0c:3d:4d:d9:5c:bf:05:c9:70:e1:2a:5c:9f:5b:8e:
fa:e5:87:72:50:07:4c:86:7c:ec:08:a5:72:c0:e3:
6b:fc:bf:14:a0:35:ec:51:e7:e0:a6:df:0a:3f:f5:
6f:58:ab:6a:0f:14:a0:cf:99:72:2a:50:91:f6:c0:
f3:99:06:c7:63:24:5d:77:2a:52:a1:ed:1a:b3:91:
db:9e:74:d1:4f:9b:a3:fb:f6:af:7b:e3:f4:30:c5:
92:9e:b9:8f:11:04:7e:d0:53:60:5c:cf:75:bd:04:
e2:7a:d2:b3:29:eb:47:20:2d:cc:24:2b:1f:16:ce:
f3:31:2e:7b:dd:4d:2f:de:0c:52:eb:ea:76:7f:3c:
c2:8f:44:f9:67:a7:b4:44:c4:4a:87:d8:66:75:56:
bd:e3:d1:d4:71:99:d9:e5:3b:14:17:75:f6:da:a5:
e2:f5:93:16:c5:5d:7e:cc:6d:a1:f7:8f:25:45:7e:
fa:a7:ce:c5:4a:c3:0d:23:d3:7d:1e:44:8a:45:42:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:10:BA:DA:52:3F:E7:33:4B:E8:A1:F1:6C:A6:1F:19:C1:4B:A5
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/99A48B02E3EE11ECA15AE91BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.200.0/22
103.14.248.0/22
180.178.124.0/22
203.217.168.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d1:56:ab:02:b0:99:4f:ed:a0:66:22:54:b0:e9:1a:ca:81:
de:80:aa:47:43:fd:e5:5d:eb:4b:3c:4c:d3:fd:27:76:33:56:
6e:0a:57:54:7e:c6:53:cd:f1:b7:de:f2:c6:12:66:77:26:bb:
f9:02:60:63:d5:a1:f0:aa:fd:77:07:0d:50:f3:0d:3e:81:c3:
11:a4:c1:55:4b:5f:2b:ae:52:1b:03:08:0e:51:23:34:28:7d:
cc:38:1b:ce:76:34:4e:11:04:a6:ca:6e:f9:97:60:58:dd:f9:
3d:2e:39:6f:22:b3:00:e6:23:57:d2:ea:a3:f3:09:b5:b7:dd:
d4:79:3d:d3:85:03:ac:a1:0b:37:30:22:34:0c:a4:1f:8b:a6:
ee:f3:82:1b:b5:d7:82:56:d5:a7:ad:02:2c:da:e7:be:a6:37:
d8:6b:db:51:8e:37:1f:f3:d3:71:55:7e:b5:7d:25:94:1f:0d:
b4:43:99:17:fe:7f:e4:02:f8:c9:4f:43:4f:d8:1b:11:06:4f:
60:08:b7:6c:38:f0:b6:ee:3c:4e:2c:dd:2b:61:93:0b:03:a7:
72:9a:26:f5:ec:48:6c:31:8b:fa:a4:e9:bd:79:7a:dd:39:9c:
7c:85:24:b1:26:a8:99:69:6a:ee:43:83:ed:d9:d6:11:4b:6e:
98:8f:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org