Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E651DB36ECF111EE869C1110C4F9AE02.roa
File: E651DB36ECF111EE869C1110C4F9AE02.roa (raw, json)
Hash identifier: ia0KXh2TO8LC1sTViYIC6d6v3MwGvHw+r8zMBiF1rf8=
Subject key identifier: 74:31:59:7E:5A:F2:E3:B0:C8:5E:1D:B5:0A:F3:D1:87:86:81:39:47
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0996
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E651DB36ECF111EE869C1110C4F9AE02.roa
Signing time: Sun 02 Jun 2024 22:14:57 +0000
ROA not before: Sun 02 Jun 2024 22:14:57 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Jun 2 22:14:57 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=665ceee0-4ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:8d:d9:cb:e0:4f:17:1c:ab:41:78:f6:0c:
a3:de:03:79:8d:38:c8:c5:e2:ea:c4:69:fb:05:20:
01:52:6d:a1:2b:c6:e3:bf:41:1c:43:e9:3e:98:aa:
85:43:9d:f0:35:79:bd:2c:a5:99:aa:ab:62:0e:21:
9a:22:c1:95:6e:10:38:12:59:0b:46:0e:79:bd:4c:
5d:72:97:4a:61:8d:b1:51:af:68:45:be:6a:0f:14:
9e:00:09:a4:23:b3:f0:f8:5c:d4:d5:ec:6e:58:c4:
9b:65:8d:3a:f0:43:0b:d0:b9:c9:63:31:88:f5:a1:
bc:28:d1:9e:e2:80:16:fb:c7:a5:69:70:47:8c:0b:
1a:48:44:a0:d4:6a:ad:f6:e3:e9:ce:b5:7c:ba:e5:
43:fb:03:76:c3:88:dc:c0:60:30:39:58:9d:b8:86:
b9:6d:89:f0:4c:49:dd:c2:8d:15:f7:3c:df:b5:03:
02:5c:ef:9c:ca:4f:2f:2e:1c:01:57:73:5c:8d:bf:
d9:67:13:ab:0b:cd:00:f9:8d:a3:47:c6:ec:e9:e5:
ba:84:70:49:89:12:02:88:45:2a:77:9b:c3:5f:95:
c6:27:08:06:1d:76:53:1d:91:e1:b9:bb:db:3a:f2:
8c:f3:8c:34:1b:d1:7f:f7:c6:2a:01:d7:c2:25:8d:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:59:7E:5A:F2:E3:B0:C8:5E:1D:B5:0A:F3:D1:87:86:81:39:47
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/E651DB36ECF111EE869C1110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/19
43.247.123.0/24
103.20.132.0/23
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
0e:fb:5c:d9:e3:55:eb:d5:b2:6e:61:ce:6e:a9:df:2d:c7:ef:
1c:d6:82:3d:85:fd:b1:c9:6c:4d:31:f7:86:06:c4:8d:ab:9f:
b0:80:5a:22:0c:36:d1:2c:87:fb:8b:11:82:44:a1:60:bc:09:
9a:ac:0d:57:8d:ee:f7:bb:ab:a8:2c:a8:fa:13:2f:c8:bf:e1:
e7:32:97:0a:ba:3b:58:23:fc:e0:15:1f:b2:25:35:e9:ae:5b:
fa:8b:bb:58:26:8b:c1:92:5a:70:59:ab:8e:a7:ea:21:39:ee:
8e:f8:5d:f2:08:94:87:d4:1f:80:d9:d8:6b:eb:8b:79:bc:c9:
bf:e1:d0:07:6e:de:dd:90:3d:33:33:27:24:44:a0:92:96:30:
eb:d5:a1:ce:55:c4:36:e7:f1:ca:6a:d6:f1:ea:ef:43:f2:28:
8c:ca:a5:c1:dd:29:7b:32:d3:f2:be:7f:c6:0d:78:ec:71:d2:
e0:c2:87:bf:e9:a9:24:2a:d7:6c:6f:24:70:f6:1c:13:5d:b4:
20:59:ae:d5:8a:87:a7:f8:be:ca:f2:35:3a:e5:3f:26:3b:e1:
28:db:03:ed:8a:aa:96:36:79:9e:26:bf:1b:6e:b9:5b:11:dc:
5b:c3:d8:f6:10:ca:0f:d5:40:87:18:14:e7:22:de:3e:4c:ec:
83:33:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:58 2025 by rpki-client