Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/9EEAEBC0887611ECB596F915C4F9AE02.roa
File: 9EEAEBC0887611ECB596F915C4F9AE02.roa (raw, json)
Hash identifier: fywTgfyAbQdBAsMAU7EOgqLD6m5VbRiyLplN25ZpdJ8=
Subject key identifier: 62:27:1A:81:66:5D:9D:BB:26:D5:9E:DC:4E:B0:B7:12:32:47:80:28
Certificate issuer: /CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Certificate serial: 42
Authority key identifier: F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/9EEAEBC0887611ECB596F915C4F9AE02.roa
Signing time: Thu 10 Mar 2022 17:33:41 +0000
ROA not before: Thu 10 Mar 2022 17:33:41 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 58955
IP address blocks: 103.86.48.0/22 maxlen: 22
103.86.48.0/24 maxlen: 24
103.86.49.0/24 maxlen: 24
103.86.50.0/24 maxlen: 24
103.86.51.0/24 maxlen: 24
116.204.180.0/22 maxlen: 22
116.204.180.0/24 maxlen: 24
116.204.181.0/24 maxlen: 24
116.204.182.0/24 maxlen: 24
116.204.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Validity
Not Before: Mar 10 17:33:41 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=622a3675-8f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:64:45:b5:23:d7:43:30:43:38:5b:f2:b6:
c0:fd:b8:e2:f0:68:ba:74:1d:5e:59:c8:34:b1:ed:
6e:9c:aa:cc:3c:fd:71:e2:40:ec:64:cb:ed:92:07:
5a:b8:e7:2b:78:62:e3:d3:61:6d:94:9b:20:e3:8d:
9b:c8:ea:0d:4c:7b:fe:c9:b8:2d:e3:5c:0a:3e:6c:
36:e2:f1:71:9d:a7:f1:df:bd:97:8e:2b:58:6a:a5:
ca:7b:01:18:08:8e:ad:ee:c3:e6:50:d7:99:ea:f6:
70:0c:a3:f8:0f:66:09:2e:5a:d0:37:b0:d3:41:a8:
16:ac:33:62:b5:e9:98:35:bb:de:3f:c4:d0:a6:cb:
8d:ba:36:7b:00:21:ef:02:6e:7d:43:54:1e:da:48:
aa:a7:41:74:63:51:09:a6:bb:f4:1f:5c:73:9e:7f:
87:87:9d:c6:16:d7:7c:e3:8f:12:a2:eb:4e:69:88:
7b:b3:d4:0f:46:20:ee:46:ef:83:d2:e8:db:e6:5c:
72:27:76:b0:63:bd:25:5a:3a:31:8b:39:ea:53:d6:
ef:e4:a8:8e:ec:4a:d7:36:2c:d5:25:56:09:dc:85:
f3:3d:8c:d1:69:00:56:05:54:4c:4d:1f:6f:df:4f:
b7:82:cc:0f:f4:19:02:9d:5e:72:99:d2:06:84:84:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:1A:81:66:5D:9D:BB:26:D5:9E:DC:4E:B0:B7:12:32:47:80:28
X509v3 Authority Key Identifier:
keyid:F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/9EEAEBC0887611ECB596F915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.48.0/22
116.204.180.0/22
Signature Algorithm: sha256WithRSAEncryption
60:d5:24:00:4b:a4:72:86:ed:b2:8c:d7:e9:c6:ed:63:5d:1b:
6f:e7:32:d3:c2:ac:83:58:5a:b1:58:c9:f0:22:dc:d4:6e:4d:
e7:a4:f3:02:8b:0e:43:ed:aa:db:29:3e:3e:85:e0:b8:69:ab:
9b:9e:07:9d:aa:f8:b6:5c:4d:b4:fb:fb:1a:26:d7:11:48:b4:
ff:38:5f:89:df:70:9c:9e:9f:ef:5b:02:51:68:24:b4:5a:6c:
9d:27:5d:39:37:58:de:58:34:07:c3:34:53:ff:4a:97:77:6a:
86:ae:01:91:23:1e:34:83:97:15:85:ad:e4:70:61:9a:83:9a:
5e:79:4a:32:fd:e9:23:dc:4d:84:92:3e:00:27:6b:dd:1e:87:
35:58:02:d0:2b:0a:7d:3a:fe:2d:75:cb:ac:9f:6b:03:ae:11:
cd:b9:33:70:a3:8c:fe:56:06:62:52:97:3b:b9:fe:c4:f1:3e:
f6:9a:89:b7:bd:f3:b5:84:8b:91:ff:64:47:03:c1:f9:e1:80:
3e:0a:3a:7d:cf:96:f3:f8:04:a6:45:6c:7d:45:e3:c6:a8:22:
1d:de:1a:de:8c:1c:d3:b6:bb:2e:7e:ee:2a:c2:ae:db:dd:c2:
f0:b2:26:5c:9d:a5:06:37:55:b9:a6:fb:11:4f:c7:43:fe:cf:
a5:79:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org