Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/74358AE43A9F11ED9F5D6C40C4F9AE02.roa
File: 74358AE43A9F11ED9F5D6C40C4F9AE02.roa (raw, json)
Hash identifier: ssAv9yULHAr7PmhogfrKnebIq5JoPxAWiEJkR8J32HI=
Subject key identifier: E7:48:B2:0C:92:72:C5:B6:55:A4:8A:E4:EB:31:56:5A:0E:C4:7E:11
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 0497
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/74358AE43A9F11ED9F5D6C40C4F9AE02.roa
Signing time: Thu 22 Sep 2022 17:53:24 +0000
ROA not before: Thu 22 Sep 2022 17:53:24 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 135353
IP address blocks: 103.76.44.0/24 maxlen: 24
103.76.45.0/24 maxlen: 24
103.76.47.0/24 maxlen: 24
116.206.88.0/24 maxlen: 24
116.206.89.0/24 maxlen: 24
116.206.90.0/24 maxlen: 24
116.206.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Sep 22 17:53:24 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=632ca114-3327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:da:26:9a:b6:a9:c9:3e:22:b4:fe:42:61:
01:b5:c8:0c:bc:0b:bf:bc:70:62:8c:f6:88:a9:a4:
5a:23:e9:40:a7:63:8e:df:1d:ce:b4:09:cc:90:18:
1e:04:7b:24:7a:72:cd:ac:f9:49:69:b6:df:ad:90:
2d:df:59:68:82:6f:52:f9:1c:24:24:68:7a:5c:08:
f6:c8:ba:36:f4:f6:99:f1:85:c4:32:37:50:fd:ec:
11:e1:9e:8d:6d:4d:3b:86:e2:8a:d3:b3:27:05:a2:
b5:a1:d0:dd:1b:92:2f:34:f5:ce:3e:95:d9:2d:d2:
02:53:48:72:ec:25:30:f0:08:a7:44:b5:84:e2:37:
95:fd:1d:9b:20:62:18:08:94:41:2e:44:fd:54:b2:
f6:ce:08:0e:0f:0c:07:22:54:5f:b4:1e:41:45:4e:
2b:12:e8:a6:ea:69:01:ba:21:b8:4d:c0:4a:23:e0:
f5:19:11:90:b7:b4:93:0d:24:a5:ec:e1:72:38:cf:
21:17:68:71:eb:f8:8a:28:43:4a:fc:c9:03:88:11:
2b:43:c5:48:e1:7b:08:90:90:7c:54:35:65:21:8d:
96:be:49:d0:66:8f:5a:99:9d:16:ab:cf:59:e3:1f:
89:94:3b:86:63:e8:4c:63:84:c3:96:d9:21:cb:60:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:B2:0C:92:72:C5:B6:55:A4:8A:E4:EB:31:56:5A:0E:C4:7E:11
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/74358AE43A9F11ED9F5D6C40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.44.0/23
103.76.47.0/24
116.206.88.0/22
Signature Algorithm: sha256WithRSAEncryption
89:dc:4a:5f:0d:a1:0b:a8:48:96:f2:39:db:61:25:be:cb:78:
ff:5a:8b:13:6c:07:bf:5d:9d:56:22:9a:94:18:09:17:40:87:
b5:f5:e0:4c:fd:bb:36:8c:60:dc:e6:88:7a:14:a3:07:b4:37:
90:5b:b6:43:23:c6:3d:c0:03:ef:0c:53:97:c4:e9:0e:fb:6b:
3a:c4:24:63:82:16:28:7c:76:d2:df:9a:e3:d9:2a:4c:26:34:
78:2d:f0:5e:71:2c:7d:f3:5c:a1:a7:14:aa:6a:3b:2a:65:36:
9c:b4:cb:10:ba:a0:b5:a3:ad:54:7b:1d:b5:01:10:14:40:f1:
1f:bd:f5:f5:73:ae:62:1d:4a:9f:8c:41:e4:ee:a7:5f:99:97:
5e:9b:88:db:bf:48:46:a5:90:b4:3b:2c:d0:b2:72:53:4f:50:
7f:2d:e9:aa:5e:b8:75:f8:b8:93:49:20:12:7a:4f:63:3d:10:
2c:21:23:1f:08:32:7b:00:4f:99:af:ae:5f:1f:60:44:68:27:
44:9c:53:7f:3e:38:01:a7:73:37:60:7b:62:56:a7:4e:f3:c0:
99:cc:6e:60:46:eb:ad:86:cc:4f:bf:39:87:93:ec:47:3d:19:
90:81:f7:04:48:3c:4a:63:c2:44:56:c0:0b:ba:88:56:cd:b9:
1f:ba:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org