Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/09C33A0802FC11EBBFB9B036C4F9AE02.roa
File: 09C33A0802FC11EBBFB9B036C4F9AE02.roa (raw, json)
Hash identifier: bo3sG5SIrlaIYRNbR0JKwX3i+l9C6DcBonSsbPF1N9M=
Subject key identifier: C3:1B:98:A4:59:EB:B0:DE:8D:E4:37:B0:17:96:9B:E7:B4:FA:5E:FB
Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Certificate serial: 061A
Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/09C33A0802FC11EBBFB9B036C4F9AE02.roa
Signing time: Wed 01 Mar 2023 08:50:00 +0000
ROA not before: Wed 01 Mar 2023 08:50:00 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 55705
IP address blocks: 45.124.108.0/24 maxlen: 24
45.124.109.0/24 maxlen: 24
103.36.156.0/22 maxlen: 22
103.225.60.0/24 maxlen: 24
103.225.61.0/24 maxlen: 24
103.225.62.0/24 maxlen: 24
103.225.63.0/24 maxlen: 24
103.238.100.0/24 maxlen: 24
103.238.101.0/24 maxlen: 24
103.238.102.0/24 maxlen: 24
103.238.103.0/24 maxlen: 24
203.55.102.0/24 maxlen: 24
203.55.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Validity
Not Before: Mar 1 08:50:00 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63ff11b7-31ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:4b:fd:dd:e8:12:73:8c:fd:48:2a:1c:c6:
8b:d4:0f:43:5f:b4:97:0b:98:4b:7c:55:08:36:b1:
f7:5a:66:70:ae:9a:66:5c:79:ab:47:97:9e:75:56:
6e:32:3e:02:a9:bb:3a:29:f3:34:04:4b:21:fd:b4:
99:dd:c3:ec:cc:3a:5d:c8:0a:56:58:1a:40:26:5c:
79:0d:17:c5:8f:16:f9:26:df:2e:21:2b:7b:f0:c2:
ab:65:97:33:dc:d6:58:48:bc:93:b2:bc:77:ed:e9:
fc:37:86:6a:99:36:23:ae:45:3d:69:ae:09:00:b4:
1e:c2:1c:ea:69:91:7d:a3:ed:e5:c6:7e:68:00:9e:
a8:1b:c5:1d:6b:59:e9:3f:a9:cc:9a:0e:72:17:ca:
3c:b5:0a:b2:a3:bb:2f:04:ee:b3:97:51:81:a4:bd:
31:39:d6:4f:60:7b:a4:16:9b:d2:9b:08:5e:52:7d:
22:b9:50:01:10:2c:63:fb:70:f2:f4:79:95:11:0b:
9e:26:fd:f3:28:12:7c:a7:2e:a3:ad:44:f2:b0:e1:
d5:e7:10:71:eb:c7:57:35:0c:44:fd:c7:60:fa:33:
06:89:58:bf:e3:1a:0f:a3:2e:a6:d1:cd:eb:82:41:
26:c1:b6:ef:5f:99:5d:e0:53:94:64:1a:ed:76:d4:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1B:98:A4:59:EB:B0:DE:8D:E4:37:B0:17:96:9B:E7:B4:FA:5E:FB
X509v3 Authority Key Identifier:
keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/09C33A0802FC11EBBFB9B036C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.108.0/23
103.36.156.0/22
103.225.60.0/22
103.238.100.0/22
203.55.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:21:6e:33:e1:d6:d9:db:ea:b9:2f:02:b4:96:cc:1b:21:bf:
67:76:18:fc:6e:7d:22:4c:3e:7d:98:fc:8c:06:d1:8f:ef:9a:
2b:e3:0f:7b:4d:55:39:1b:25:bf:3a:79:19:98:37:bf:80:d5:
21:48:28:8b:6a:a4:75:a9:c2:68:f9:d2:2c:15:09:1c:d5:6b:
a6:61:17:62:86:79:64:b8:c6:c5:99:b5:33:91:01:d7:e9:b0:
a2:3e:b3:de:e7:5b:74:f2:0c:02:6f:5b:95:1f:a9:13:05:23:
83:0c:7a:f7:01:c4:74:77:8e:09:fd:c6:30:d1:10:dd:9e:4e:
4e:0f:df:76:3f:02:ed:40:0c:8f:b1:29:53:a4:57:bd:0f:76:
8d:fa:1b:ed:7b:36:7e:b2:b3:1b:a7:d0:87:2a:c7:d9:4f:74:
f1:1d:41:e1:c9:01:0f:89:e5:ee:fb:92:56:d9:ba:15:5d:f2:
c2:53:e6:e2:be:ca:8c:fc:73:ae:40:9c:ff:49:7b:99:5b:7c:
b1:85:7f:37:a4:ef:87:17:ce:8e:21:e4:1d:e8:69:bb:c7:88:
a0:aa:e9:08:b1:d5:dc:cc:af:49:6a:22:ed:91:eb:c5:41:d3:
fc:dd:df:02:88:f5:c8:e6:83:94:98:e9:dc:bb:7d:5b:e9:a8:
3c:f9:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:37 2024 by rpki-client on console-ams.rpki-client.org