Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60009106F87011ED9F0E3266C4F9AE02.roa
File: 60009106F87011ED9F0E3266C4F9AE02.roa (raw, json)
Hash identifier: /omtOAbc3OrtVTgOYado+u1nL9r6qZb3OKLuelQbCXI=
Subject key identifier: 9D:7E:9B:35:E5:77:55:DD:8E:4E:CB:F0:3F:E4:EF:46:2E:A9:E7:F3
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 038E
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60009106F87011ED9F0E3266C4F9AE02.roa
Signing time: Mon 22 May 2023 07:15:05 +0000
ROA not before: Mon 22 May 2023 07:15:05 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 212238
IP address blocks: 43.226.230.0/24 maxlen: 24
43.226.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: May 22 07:15:05 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=646b1679-f36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:ce:54:50:79:30:f9:d1:c4:55:d9:3d:b6:
b7:de:6c:a2:98:96:9b:90:62:6d:b5:f6:3c:33:f3:
1c:aa:7f:a7:11:85:16:f0:49:c0:f2:11:dd:7a:46:
ed:69:da:dd:16:4c:c1:b1:ab:d5:a3:26:d5:09:91:
96:a9:42:4a:32:5e:8f:99:f7:2b:7a:ab:06:a3:75:
bd:f8:06:03:41:c4:fa:cc:d7:20:6b:aa:10:05:80:
74:05:ab:dc:81:6e:b0:cf:d2:ef:33:90:06:e6:7d:
41:a8:80:45:67:b0:6e:8c:18:f7:51:ce:75:a6:85:
eb:e6:64:cd:56:4c:ce:a4:95:4b:10:e9:23:66:3e:
d2:1f:69:79:3f:2b:b0:0e:0f:26:a5:c3:e8:63:d3:
1a:13:c1:bc:1c:b8:b5:44:9d:02:5a:57:e9:dc:00:
aa:4a:0c:70:18:d6:89:63:e4:6f:bd:c6:2d:a7:60:
66:0a:35:1b:e4:b2:92:71:83:2a:f6:ef:38:15:c6:
f2:f4:62:c0:70:35:56:0e:43:be:27:dd:44:d4:66:
38:9c:39:9a:63:d0:1f:99:d4:27:aa:f5:d8:93:5a:
bf:08:5f:7a:15:d9:a0:75:df:c2:e7:bf:1d:04:6a:
24:06:ea:35:17:7b:1b:dd:c9:78:e6:0b:2a:2a:31:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7E:9B:35:E5:77:55:DD:8E:4E:CB:F0:3F:E4:EF:46:2E:A9:E7:F3
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60009106F87011ED9F0E3266C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.230.0/23
Signature Algorithm: sha256WithRSAEncryption
42:f9:2d:b3:35:c4:b7:4a:8f:c6:f1:d3:01:12:41:2d:c6:15:
68:f3:85:04:8d:4b:8f:54:07:b2:ed:01:26:d9:f8:c8:ab:49:
3e:c0:ce:7c:89:4c:60:6b:4b:20:1b:fc:28:6e:e9:7c:cc:96:
87:e2:0f:15:26:2b:ba:8d:99:43:c4:48:68:46:b0:73:45:90:
de:27:e2:81:02:d3:1b:bb:ce:32:d0:66:72:9d:91:c2:76:2b:
62:ef:a1:3a:b7:6b:d8:b8:19:a1:06:7c:bc:90:ef:09:d7:b4:
be:7c:76:6f:9d:fa:06:40:cd:b7:30:0c:2d:14:7c:57:ab:50:
b4:c7:2f:9d:9a:7d:81:d4:27:64:a1:94:a5:45:6a:62:d5:ad:
de:0c:9a:fe:cb:7e:71:df:3a:3e:9a:f9:67:c5:fc:66:f6:7f:
2c:e8:6c:fa:22:67:03:58:e6:0a:a2:86:77:55:d3:d0:16:41:
86:b1:c0:28:2d:75:25:52:54:35:26:fb:95:7f:d3:c8:b2:7a:
87:bf:80:80:7b:4c:8c:5d:24:cb:8e:8a:40:c9:f6:eb:ce:24:
ee:d5:dc:7a:d2:be:fe:98:c7:5e:5a:1d:45:f8:9c:c0:aa:f3:
34:f6:a0:cf:85:62:25:ec:58:f3:03:c3:39:52:c6:0e:cb:0c:
b7:b4:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org