Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/4288E32E537211EDB9DE4F1CC4F9AE02.roa
File: 4288E32E537211EDB9DE4F1CC4F9AE02.roa (raw, json)
Hash identifier: MK7cEXNYAz6g5NkSw/nhcjKnjs00jaIpxnfriyfdy+E=
Subject key identifier: 10:E7:8B:41:81:18:CF:50:ED:21:4C:D9:54:15:7F:3D:BA:AE:B4:E3
Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Certificate serial: 200E
Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/4288E32E537211EDB9DE4F1CC4F9AE02.roa
Signing time: Mon 24 Oct 2022 08:02:53 +0000
ROA not before: Mon 24 Oct 2022 08:02:53 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 132352
IP address blocks: 59.153.200.0/22 maxlen: 24
103.57.20.0/22 maxlen: 24
2402:5380::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8206 (0x200e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Validity
Not Before: Oct 24 08:02:53 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=635646ac-fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:52:f6:e1:ac:2f:34:d2:ff:94:06:57:be:
10:0d:59:8d:e9:82:47:b0:8b:29:89:ec:e3:e2:81:
cb:ad:6b:b1:8e:4d:f2:2f:96:ad:88:fa:06:77:27:
7c:d8:a7:2e:56:90:21:1e:42:46:12:22:31:83:c6:
69:41:a7:39:e1:58:6c:15:df:a9:11:73:10:fd:a9:
6e:78:ae:36:60:74:9e:02:62:ec:16:5d:b4:71:c5:
ba:bf:48:03:12:84:48:3a:ec:fe:55:b5:20:92:7c:
f7:28:40:64:ae:49:df:d9:c4:15:31:ff:b9:99:60:
0f:49:61:9a:ce:43:ea:0c:6b:3a:c4:1c:73:d1:14:
1a:2b:14:a2:ac:aa:98:0f:1a:14:53:d2:04:59:cd:
10:6b:e4:14:ba:fa:5d:2c:e4:de:0e:4f:4e:cc:62:
a4:41:c9:ba:2e:f8:8b:d9:ce:3e:a1:b6:ef:7a:8a:
6f:d0:cf:d4:f9:70:38:13:09:11:b6:87:a9:16:34:
4c:9d:34:ce:21:f5:a7:6b:1a:de:3a:dc:3f:6a:2f:
4f:45:b5:90:27:46:90:40:12:42:59:18:2b:1e:b2:
bf:c0:b9:e5:b7:b7:51:cc:a4:7b:5c:5a:71:91:23:
ca:5a:46:62:2b:6c:7c:86:6d:11:0c:44:a5:17:cf:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:8B:41:81:18:CF:50:ED:21:4C:D9:54:15:7F:3D:BA:AE:B4:E3
X509v3 Authority Key Identifier:
keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/4288E32E537211EDB9DE4F1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.200.0/22
103.57.20.0/22
IPv6:
2402:5380::/32
Signature Algorithm: sha256WithRSAEncryption
13:a2:60:7e:cd:47:a4:3d:e9:93:f0:6a:c3:2b:d1:0f:fb:df:
75:05:bb:46:f7:1f:a8:04:ae:e9:6c:db:29:66:71:7f:e8:63:
70:ee:29:8a:d9:d3:57:e5:46:06:6a:a7:46:1a:6b:40:33:fa:
2f:c2:a5:76:c1:91:8e:5b:3c:66:69:cc:29:8a:ea:38:1c:3f:
57:d1:56:41:6a:42:8d:7a:ea:88:5e:e9:c7:ae:26:8b:cc:c2:
f3:79:25:84:6c:f6:7d:a5:db:c3:d3:a4:15:16:3b:ec:67:7e:
f2:c4:00:f6:24:a5:3f:dd:08:aa:62:65:de:44:37:e1:86:6d:
b0:11:ce:fa:dc:38:1f:f5:c3:b5:e9:aa:17:b8:8e:06:57:10:
7d:c8:df:7d:55:7b:c8:a5:b0:bd:01:f0:9f:c8:bf:a8:e6:99:
22:7d:c9:97:41:03:da:3f:89:6c:0b:08:52:b4:16:d4:b4:ff:
8c:c8:32:5b:58:c6:f1:66:2d:cc:39:06:41:76:d4:03:07:35:
ec:8f:19:ed:28:d3:7b:3b:81:58:80:f9:16:a1:2d:6c:1b:f3:
64:59:37:a7:41:f6:2d:20:bf:e0:d9:2e:47:07:98:22:76:b9:
48:2d:7b:3a:6a:22:d2:e2:9d:2a:ed:86:a8:b7:37:57:d9:5c:
ae:1c:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org