Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/E55D41DCDE1911EBBF4B7A1EC4F9AE02.roa
File: E55D41DCDE1911EBBF4B7A1EC4F9AE02.roa (raw, json)
Hash identifier: uZyW9W252NQGLxRQq/Jkm55Q3lUGZ2WAGG8D8aI/uJM=
Subject key identifier: E0:83:59:E9:EE:CF:FB:FB:46:7F:A5:26:12:52:5C:B9:F9:0E:F7:17
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 3031
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/E55D41DCDE1911EBBF4B7A1EC4F9AE02.roa
Signing time: Tue 19 Oct 2021 15:20:41 +0000
ROA not before: Tue 19 Oct 2021 15:20:41 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 38742
IP address blocks: 43.250.136.0/22 maxlen: 22
43.250.137.0/24 maxlen: 24
43.250.138.0/24 maxlen: 24
43.250.139.0/24 maxlen: 24
61.5.192.0/20 maxlen: 20
61.5.193.0/24 maxlen: 24
61.5.194.0/24 maxlen: 24
61.5.195.0/24 maxlen: 24
61.5.198.0/24 maxlen: 24
61.5.199.0/24 maxlen: 24
61.5.201.0/24 maxlen: 24
61.5.202.0/24 maxlen: 24
61.5.203.0/24 maxlen: 24
61.5.204.0/24 maxlen: 24
61.5.205.0/24 maxlen: 24
61.5.206.0/24 maxlen: 24
61.5.207.0/24 maxlen: 24
103.42.0.0/22 maxlen: 22
103.42.1.0/24 maxlen: 24
103.42.2.0/24 maxlen: 24
103.42.3.0/24 maxlen: 24
119.59.80.0/21 maxlen: 21
119.59.80.0/24 maxlen: 24
119.59.82.0/24 maxlen: 24
119.59.83.0/24 maxlen: 24
119.59.84.0/24 maxlen: 24
119.59.85.0/24 maxlen: 24
119.59.86.0/24 maxlen: 24
119.59.87.0/24 maxlen: 24
121.100.48.0/21 maxlen: 21
121.100.48.0/24 maxlen: 24
121.100.49.0/24 maxlen: 24
121.100.50.0/24 maxlen: 24
121.100.51.0/24 maxlen: 24
121.100.52.0/24 maxlen: 24
121.100.53.0/24 maxlen: 24
121.100.54.0/24 maxlen: 24
121.100.55.0/24 maxlen: 24
2400:e500::/32 maxlen: 32
2400:e500:1::/48 maxlen: 48
2400:e500:5::/48 maxlen: 48
2400:e500:d::/48 maxlen: 48
2400:e500:13::/48 maxlen: 48
2400:e500:23::/48 maxlen: 48
2400:e500:24::/48 maxlen: 48
2400:e500:2a::/48 maxlen: 48
2400:e500:2b::/48 maxlen: 48
2400:e500:30::/48 maxlen: 48
2400:e500:31::/48 maxlen: 48
2400:e500:32::/48 maxlen: 48
2400:e500:33::/48 maxlen: 48
2400:e500:34::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12337 (0x3031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Oct 19 15:20:41 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=616ee248-2d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:89:c6:9b:0f:97:ff:18:89:93:04:9c:42:
08:4e:a0:8f:39:0e:f9:a0:0e:52:69:9a:02:6a:bd:
2e:6a:28:f9:33:f4:93:fd:43:8c:4b:86:ac:53:4e:
8d:db:0e:84:e2:94:0d:c3:ed:5b:30:9e:1f:f0:ea:
0c:c8:2b:eb:1a:18:6d:85:f8:38:91:30:02:6f:1a:
3a:31:5f:ed:73:15:95:27:fe:27:06:01:cf:8e:ce:
ae:a7:20:7e:bb:7d:ea:2e:9b:25:e9:6a:41:9b:7f:
2b:52:b5:fb:f1:48:e7:84:27:56:9c:d3:2d:75:36:
37:3b:75:61:8c:44:4f:bb:bf:33:a5:6c:5f:7e:d7:
fb:4e:18:e7:d6:b8:5d:d6:77:18:f2:30:da:8d:20:
7e:2c:aa:88:36:7d:98:23:3e:2f:4d:0a:a1:30:41:
7a:eb:ed:23:68:0f:0c:8c:fb:bc:72:17:f6:77:0c:
36:48:7c:4f:e1:73:19:9f:b7:83:f5:db:d6:34:8b:
60:65:7d:2b:ef:3b:f0:dd:a3:7c:21:e7:9a:49:f6:
14:a1:f3:00:bd:6c:b3:98:5b:e7:7f:25:cc:bf:24:
e3:7a:38:3d:e4:84:d4:10:97:fb:04:75:6b:e5:58:
f7:61:6e:1d:7f:29:e7:b9:37:19:71:25:cd:ab:4e:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:83:59:E9:EE:CF:FB:FB:46:7F:A5:26:12:52:5C:B9:F9:0E:F7:17
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/E55D41DCDE1911EBBF4B7A1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.136.0/22
61.5.192.0/20
103.42.0.0/22
119.59.80.0/21
121.100.48.0/21
IPv6:
2400:e500::/32
Signature Algorithm: sha256WithRSAEncryption
79:1c:b0:bf:b4:85:5b:f5:7c:13:da:13:d4:47:8c:c4:73:05:
5e:5f:f5:50:f1:e3:6b:df:76:28:46:53:ba:11:14:b6:2e:5a:
a4:f9:5b:9e:5b:37:75:46:f9:aa:c8:e3:cd:ea:1d:98:d8:34:
2a:56:f2:19:20:98:0e:02:ee:2b:2f:6b:5b:a7:d3:93:f2:58:
54:4f:63:ed:f0:d9:c0:ea:7b:64:18:f0:47:72:71:c1:e5:c8:
10:7f:53:67:c2:ad:b4:cb:cf:3a:44:24:4a:cb:ef:06:ff:3e:
3d:85:a7:52:d8:06:c5:4f:bb:bb:0b:5a:a6:5f:f3:2e:6c:5a:
14:b8:95:a9:c8:31:10:8c:b2:a1:cf:47:e9:33:65:0f:ab:39:
52:a4:df:18:c5:d5:3e:2c:7d:87:79:67:c3:e6:17:e8:2c:36:
f0:41:b7:25:32:54:0b:cc:85:a3:af:33:c5:a7:eb:e8:32:34:
71:35:a4:43:67:b5:ec:1a:83:38:a5:90:16:30:03:2d:f8:b3:
25:65:d9:b1:05:c9:1a:e2:ba:1f:34:08:05:a1:87:c9:e1:26:
00:6f:f9:25:0e:b9:c7:2b:82:ed:ee:e8:a3:76:35:3e:b5:8a:
39:8a:c0:db:50:93:67:ab:28:1a:ba:44:40:9f:11:75:f2:59:
75:a7:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org