Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/8DDC127821CE11EC8B443D3EC4F9AE02.roa
File: 8DDC127821CE11EC8B443D3EC4F9AE02.roa (raw, json)
Hash identifier: kMsd8MIHQPGM4h5mh6ZQSV0zVnNjxu2LfRF60jqdnVI=
Subject key identifier: 09:43:A2:C7:CB:3B:A4:E5:F3:B9:FE:A1:04:B2:1C:72:7C:05:C9:50
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 0211
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/8DDC127821CE11EC8B443D3EC4F9AE02.roa
Signing time: Mon 17 Jan 2022 04:01:17 +0000
ROA not before: Mon 17 Jan 2022 04:01:17 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 137872
IP address blocks: 58.82.197.0/24 maxlen: 24
58.82.198.0/23 maxlen: 24
58.82.200.0/21 maxlen: 24
58.82.208.0/20 maxlen: 24
58.82.224.0/21 maxlen: 24
58.82.236.0/22 maxlen: 24
103.15.84.0/22 maxlen: 24
223.122.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Validity
Not Before: Jan 17 04:01:17 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61e4ea0d-3859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:ab:66:dd:80:94:ed:a6:12:5c:8d:f4:df:
d2:ad:55:ac:d6:19:e1:16:3e:45:21:f5:5a:7e:a1:
78:3e:a4:c7:97:af:2b:83:7f:d8:af:66:80:f6:39:
25:31:4a:f7:6a:87:05:0d:73:04:ff:53:bf:54:c6:
db:70:7f:92:1b:3a:5e:f6:8c:bf:bb:00:b9:ff:c7:
a1:2b:e9:fb:5e:3f:70:ec:11:cd:5a:a4:fd:85:4a:
bd:c7:2e:af:e3:97:a1:24:29:dd:83:1d:b1:32:6a:
78:47:98:8a:9b:7f:20:f4:80:d4:e6:b3:74:bf:e1:
56:3e:43:0e:ff:aa:66:14:95:3f:8d:eb:3b:1a:f4:
95:e7:46:0a:d7:75:3b:7b:86:5d:9d:6d:5c:db:8b:
43:e4:c8:f7:97:dc:23:80:15:8c:e8:6a:ac:e3:64:
0a:68:90:6b:d5:69:76:8a:27:bb:1c:b7:82:4b:6e:
67:27:32:2b:cc:19:ab:84:34:bf:8d:a8:3f:6f:f7:
da:68:9c:f2:9d:aa:22:0d:37:37:37:dd:c8:29:01:
6f:33:a3:0a:f9:61:9f:42:f0:78:0b:06:75:ec:c2:
68:6c:f5:27:ab:16:f4:b1:03:1c:13:df:a6:d7:db:
1d:59:aa:0b:77:e2:4a:3e:07:02:8d:34:ea:5c:f5:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:43:A2:C7:CB:3B:A4:E5:F3:B9:FE:A1:04:B2:1C:72:7C:05:C9:50
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/8DDC127821CE11EC8B443D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.82.197.0-58.82.231.255
58.82.236.0/22
103.15.84.0/22
223.122.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:c4:52:76:a3:41:58:c5:9f:c6:9c:6e:c3:77:bf:2c:33:77:
61:e8:7b:2b:32:c5:16:01:25:39:77:e8:6b:a4:62:8a:20:22:
3a:d9:51:a6:6e:e1:e2:f3:3f:b3:8d:8a:a9:7b:df:f2:64:ef:
4a:ea:98:87:de:1c:a2:2a:fb:ba:50:54:be:14:31:25:cd:7b:
9b:40:37:2b:3d:71:18:76:69:3a:06:9b:f5:12:96:0e:36:c5:
ee:04:fb:ae:07:e3:fc:8e:ec:cb:b3:05:2b:f9:4e:00:df:48:
7c:6c:b1:85:ee:66:8c:fb:bb:bb:4d:bc:f2:31:aa:88:ae:2f:
7b:f5:89:87:8e:d4:54:10:aa:00:4e:f4:1e:5c:c5:56:4c:7b:
fe:ab:e5:82:16:86:cb:09:76:df:f6:83:73:b9:6b:0f:43:da:
a1:b6:29:b0:90:bb:c3:c8:ec:3d:6f:87:2e:e9:c1:ec:f0:a1:
7e:15:d8:19:46:30:38:6c:a6:3d:55:ce:68:c5:85:6a:48:b4:
6c:b3:1d:a8:52:4a:6f:76:f0:49:2b:1a:74:48:0b:70:18:0d:
85:18:51:a8:f7:5b:a4:f3:86:f5:0d:6a:a5:0e:d9:8b:a9:80:
a2:c6:1d:82:d3:2d:4d:89:57:72:3e:03:99:97:09:eb:cf:ec:
ac:0f:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org