Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/95C11820BE4711EBA85BB980C4F9AE02.roa
File: 95C11820BE4711EBA85BB980C4F9AE02.roa (raw, json)
Hash identifier: /SVRKQ/GorUUsMCBNK6nIPfNLlGuEWcpifdhJ5X9oNI=
Subject key identifier: 37:E9:EA:B9:90:43:3B:51:A5:37:25:09:BF:34:34:96:A1:FB:79:5F
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 030C
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/95C11820BE4711EBA85BB980C4F9AE02.roa
Signing time: Sun 12 Jun 2022 16:07:40 +0000
ROA not before: Sun 12 Jun 2022 16:07:40 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 139628
IP address blocks: 103.142.208.0/23 maxlen: 23
103.142.208.0/24 maxlen: 24
103.142.209.0/24 maxlen: 24
115.178.24.0/23 maxlen: 23
115.178.24.0/24 maxlen: 24
115.178.25.0/24 maxlen: 24
150.129.20.0/22 maxlen: 22
150.129.20.0/24 maxlen: 24
150.129.21.0/24 maxlen: 24
150.129.22.0/24 maxlen: 24
150.129.23.0/24 maxlen: 24
202.58.16.0/22 maxlen: 22
202.58.16.0/24 maxlen: 24
202.58.17.0/24 maxlen: 24
202.58.18.0/23 maxlen: 23
202.58.18.0/24 maxlen: 24
202.58.19.0/24 maxlen: 24
203.80.170.0/24 maxlen: 24
203.80.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Jun 12 16:07:40 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62a60f4b-d6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:c7:26:4c:f8:a6:04:2a:d0:a9:c6:2b:b3:
5f:b6:39:04:8d:5d:f5:d8:7d:00:fc:62:20:b9:c8:
99:1d:5a:0b:57:14:15:98:6c:9e:b3:05:f9:e4:13:
e7:1b:4c:c5:8a:54:ad:90:a2:bc:a5:74:d7:e5:25:
ff:35:da:24:1d:d3:d8:85:ff:3f:6c:bd:5b:ea:e0:
27:66:7a:3c:d4:99:d0:f9:69:f0:d6:1e:da:08:aa:
62:53:23:6b:74:b9:1b:21:32:c1:9c:f6:34:20:67:
47:9f:5f:40:0d:9c:a1:5f:0d:f5:0c:e0:90:db:69:
13:03:42:3d:c2:dd:1e:a7:30:67:a1:88:8e:f3:af:
46:2d:13:8f:c1:eb:01:cc:04:5e:95:14:10:c6:29:
15:d2:c6:72:c1:da:66:35:e5:c8:23:27:5b:d7:5f:
cd:c4:f1:25:2e:4c:84:26:9b:49:41:ac:97:42:2d:
6f:45:fd:58:8f:eb:6e:03:4d:00:53:24:97:85:ee:
71:39:70:88:1b:58:8c:9c:d0:9f:8d:8f:05:4b:2b:
4b:82:a4:c2:46:1c:98:9e:03:af:08:f1:96:8d:aa:
70:9b:23:db:46:64:58:43:65:40:f2:e6:91:99:02:
77:26:f0:27:64:68:5b:38:b3:c5:87:3a:c9:f6:16:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:EA:B9:90:43:3B:51:A5:37:25:09:BF:34:34:96:A1:FB:79:5F
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/95C11820BE4711EBA85BB980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.208.0/23
115.178.24.0/23
150.129.20.0/22
202.58.16.0/22
203.80.170.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1a:6b:b3:2e:e1:d7:3d:10:a2:06:66:3d:aa:79:24:61:bd:
63:65:06:71:5d:5f:8c:81:4f:c6:41:14:e9:93:23:bb:65:80:
7a:ba:21:ed:ff:7a:0f:07:5d:57:e5:aa:f8:35:69:bb:d1:46:
f0:05:cd:4e:88:0c:06:7c:0c:5e:be:f2:ae:4d:9e:67:dc:f2:
c9:a4:56:47:e2:47:31:54:33:4a:32:1c:38:1b:9c:ab:c5:c0:
53:85:c1:47:18:73:94:da:7e:7e:b0:a2:b2:b8:7d:72:de:03:
28:74:42:74:b4:f3:72:6d:40:fb:68:82:de:f1:2f:bc:83:31:
0e:ee:27:dd:ef:d5:53:c6:91:a7:08:38:44:3e:f1:73:24:f6:
aa:90:73:da:55:fb:95:56:a7:cf:f6:44:ae:0e:0e:07:57:27:
61:42:74:91:5b:df:c6:46:31:07:6b:45:09:fd:47:33:2d:96:
4a:11:1c:69:d9:3a:8e:5b:19:85:b4:ee:fb:73:8a:fe:d6:8f:
53:18:02:ed:52:be:1a:ba:58:50:f1:f4:13:6d:16:28:86:33:
7f:07:14:08:0d:b4:12:3a:b1:9a:f2:fd:37:63:52:25:71:4c:
e8:f5:59:bc:03:94:75:86:19:9a:c7:3b:9f:87:66:0f:89:3c:
ff:9a:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org