Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
File: 4C7305A2CA1011E9B965B370C4F9AE02.roa (raw, json)
Hash identifier: VcNeYDfEhU0OPQE78ZrT03iJaS+XtKi4g2yV9VQanf0=
Subject key identifier: 8F:51:BC:F1:79:DD:12:F5:F9:CD:5E:BD:6B:33:4E:F7:2B:63:9F:05
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 19A6
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
Signing time: Tue 19 Jul 2022 05:43:12 +0000
ROA not before: Tue 19 Jul 2022 05:43:12 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 18019
IP address blocks: 43.228.144.0/22 maxlen: 22
43.228.144.0/24 maxlen: 24
43.228.145.0/24 maxlen: 24
43.228.146.0/24 maxlen: 24
43.228.147.0/24 maxlen: 24
103.84.216.0/22 maxlen: 22
103.84.216.0/24 maxlen: 24
103.84.217.0/24 maxlen: 24
103.84.218.0/24 maxlen: 24
103.84.219.0/24 maxlen: 24
2400:a440::/32 maxlen: 32
2400:a440::/48 maxlen: 48
2400:a440:1::/48 maxlen: 48
2400:a440:2::/48 maxlen: 48
2400:a440:3::/48 maxlen: 48
2400:a440:4::/48 maxlen: 48
2400:a440:144::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6566 (0x19a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Validity
Not Before: Jul 19 05:43:12 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62d64470-2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:36:93:cb:13:44:70:3f:11:dd:2c:3f:1d:
fb:f9:c3:79:62:85:30:9b:80:63:b2:a1:45:f6:c6:
bd:d2:79:57:a3:c4:3e:bd:fb:8b:cc:cd:8c:c0:d7:
d6:bc:f3:c9:a0:e2:61:e6:04:05:ae:6a:af:22:93:
29:75:4f:3f:ee:0c:e3:2f:07:df:b6:38:7b:c3:14:
bc:79:a3:a2:da:e6:dd:a8:ff:b0:4a:20:68:3f:f3:
bd:e2:0a:ed:5a:89:c5:66:08:9c:46:51:04:a1:68:
41:2b:d3:8b:1e:42:b2:84:05:2e:08:83:1f:80:5f:
78:4a:d0:06:1f:54:2a:cc:41:2c:d3:4e:66:c9:ec:
24:37:1f:36:7a:48:2f:5b:f0:75:9c:d1:48:c0:0d:
68:dd:bd:45:44:df:dd:ba:58:e8:06:dd:4b:4d:d0:
81:30:1c:69:14:5e:55:a5:52:45:68:99:4a:df:02:
ad:d6:40:83:ae:37:29:2f:14:fd:f3:d2:ac:33:14:
bd:46:ca:7a:ec:2e:c6:c7:c5:e9:80:3b:c7:94:0b:
fd:74:52:16:48:eb:c0:b7:ba:1a:f5:21:29:f5:93:
c2:16:0c:62:da:8e:6b:6a:d9:61:26:ff:c2:2f:43:
ca:1b:85:3d:55:e4:9f:16:1e:3b:a9:9e:a9:5c:a1:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:BC:F1:79:DD:12:F5:F9:CD:5E:BD:6B:33:4E:F7:2B:63:9F:05
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.144.0/22
103.84.216.0/22
IPv6:
2400:a440::/32
Signature Algorithm: sha256WithRSAEncryption
62:10:a5:96:84:6e:70:83:94:30:b9:55:96:e8:99:47:d1:3a:
ab:58:58:d4:55:92:70:3f:85:7d:bd:11:2b:96:0b:62:12:07:
c9:e5:a0:43:86:4f:00:18:51:e3:e9:d5:1e:35:4f:f4:2e:7f:
7d:88:4c:2f:fe:c8:9d:9b:fc:45:64:73:59:26:7a:59:a7:4a:
22:69:d9:f3:44:d6:17:cb:57:ca:87:c5:52:75:db:06:26:8e:
1d:12:c1:d8:10:d4:44:0a:c0:b5:13:c0:aa:f6:82:36:2c:73:
41:2a:e4:48:be:72:8c:31:ef:c5:a7:b2:6c:b5:fe:d0:65:21:
60:8f:ed:bf:41:21:0c:60:70:41:1e:f6:8b:ad:1c:2f:09:1a:
60:72:f3:02:2a:43:d4:df:04:da:44:f1:61:5b:21:9b:65:08:
2a:d0:df:25:2b:95:5d:eb:9c:0b:7b:a4:d3:54:5d:b4:ed:f1:
62:22:8a:a1:4c:06:74:49:f2:57:d2:0b:0e:cd:03:f8:72:c1:
1c:b0:46:52:41:02:07:bc:47:52:e7:38:28:4e:2f:d1:44:e6:
7f:e2:c8:8e:94:f8:a8:8b:e0:bf:65:52:38:7b:1c:85:df:f4:
a2:41:be:8f:16:1d:88:22:35:10:59:6b:5d:71:1e:46:ca:4f:
ae:e1:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org