Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2F4C44181EF511EF8AE5EE6EC4F9AE02.roa
File: 2F4C44181EF511EF8AE5EE6EC4F9AE02.roa (raw, json)
Hash identifier: BGZbAvw/drXggItkCXc2pQEdMEoe53p//MskvCSeyHA=
Subject key identifier: 24:18:58:B6:5A:B4:99:8D:77:14:42:46:43:BF:E7:B0:68:45:AC:72
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 099A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2F4C44181EF511EF8AE5EE6EC4F9AE02.roa
Signing time: Thu 06 Jun 2024 20:23:47 +0000
ROA not before: Thu 06 Jun 2024 20:23:47 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 133933
IP address blocks: 43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jun 6 20:23:47 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=66621ad3-6d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:5b:ea:fb:2c:cc:79:ff:53:f0:e3:c4:4b:
50:0f:74:c6:b7:0b:07:20:ba:bf:bf:e1:17:4d:78:
2e:b2:bf:ea:d9:b8:10:36:e9:f6:60:52:8f:89:7a:
7b:d9:32:3a:5e:0d:93:94:8d:8d:d7:bd:cc:f6:16:
bc:e4:13:c6:6a:03:53:87:bf:45:08:4a:a8:aa:9a:
bc:25:3b:53:04:4b:12:f3:f3:b3:55:20:24:25:04:
4b:8f:22:50:27:fc:e8:f1:c1:30:88:66:20:0a:90:
32:f9:ba:fb:65:3e:50:22:cf:d5:33:c5:55:4c:65:
7c:40:5c:c9:c7:1c:6e:ef:22:b6:70:77:54:87:3e:
83:21:b8:3a:fa:91:ca:04:1b:43:0e:91:f1:92:4a:
a2:33:0c:b0:28:d9:ab:1d:11:48:34:e7:5c:10:cd:
0f:74:56:f8:36:62:90:6c:e9:85:a0:b6:ba:9b:f2:
e2:3d:e6:85:2c:20:62:d4:5b:31:e7:20:37:39:95:
32:cd:3f:44:91:b5:0c:23:5b:4c:70:66:04:ba:50:
4d:2e:5d:89:51:8b:ee:b9:4e:b4:ec:41:22:e2:ba:
90:fd:05:8d:2b:64:ec:be:f8:ab:2a:80:87:7e:e4:
59:97:a8:62:27:0a:2f:42:37:3b:55:a5:3e:10:16:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:58:B6:5A:B4:99:8D:77:14:42:46:43:BF:E7:B0:68:45:AC:72
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2F4C44181EF511EF8AE5EE6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.120.0/22
103.20.132.0-103.20.134.255
Signature Algorithm: sha256WithRSAEncryption
5b:e3:d8:0e:e3:f3:7f:13:4f:29:f9:f8:0b:8c:c6:72:1d:44:
ee:b6:30:50:85:36:45:83:97:e3:7d:a9:0a:2d:48:14:af:3f:
11:28:39:a0:ee:03:44:90:b1:da:e9:48:41:84:49:bd:da:60:
b2:80:43:1b:12:61:a7:71:7e:b4:b3:d8:63:af:d5:1e:03:f8:
da:67:51:e4:c7:b4:0a:71:98:15:27:26:9b:ab:b0:56:f6:4f:
3e:2c:d4:b6:cb:91:0b:82:f0:4a:cf:f1:a6:12:54:a2:f2:6a:
33:b7:11:53:e9:9a:54:00:94:34:e7:a3:ed:69:1e:a0:ad:6c:
10:0c:17:b2:c9:c1:88:a6:7a:83:5c:b4:99:21:bb:9d:43:25:
a4:29:3e:be:7b:67:38:4c:df:13:ed:88:8d:7a:24:68:7b:5d:
56:74:0d:0b:7e:f6:fd:0e:79:75:71:3a:68:75:cc:18:35:05:
44:f9:3a:d8:fd:e5:71:0e:71:6b:0b:bf:69:04:a9:ea:cc:eb:
8b:4a:43:26:5f:80:ff:39:f3:ba:ab:48:c9:93:49:e5:86:d4:
d7:a4:68:19:59:d1:b2:5f:16:17:e6:7b:63:79:ef:7a:5c:f7:
e1:ee:c0:c8:60:e9:cf:20:b5:cb:bf:40:da:84:25:9b:05:ec:
29:18:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:36 2025 by rpki-client