Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/FA34AFAE0ADE11EC8F538728C4F9AE02.roa
File: FA34AFAE0ADE11EC8F538728C4F9AE02.roa (raw, json)
Hash identifier: gUAeJ2jQvULkj9qsauPI2mUE12qhd9FoHieMDf51zcs=
Subject key identifier: D8:F3:D4:15:C2:A3:75:40:69:F8:F1:AC:26:00:D0:E7:5B:21:BA:22
Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Certificate serial: 024A
Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/FA34AFAE0ADE11EC8F538728C4F9AE02.roa
Signing time: Fri 15 Oct 2021 04:42:00 +0000
ROA not before: Fri 15 Oct 2021 04:42:00 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133443
IP address blocks: 43.239.72.0/24 maxlen: 24
43.239.73.0/24 maxlen: 24
43.239.74.0/24 maxlen: 24
43.239.75.0/24 maxlen: 24
103.229.84.0/24 maxlen: 24
103.229.85.0/24 maxlen: 24
103.229.86.0/24 maxlen: 24
103.229.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089
Validity
Not Before: Oct 15 04:42:00 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61690697-f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:b7:42:7b:ed:17:cc:f0:14:2d:ac:d4:00:
26:e6:33:f8:d1:56:9f:8e:10:70:b8:8a:60:9d:bb:
bb:4f:47:0b:06:3a:ed:f4:e8:1f:d4:33:68:d0:73:
4d:f3:dd:e8:41:99:90:db:3b:94:21:4c:a9:ab:48:
de:41:7a:63:84:9c:55:e6:84:60:63:4c:39:2f:e5:
2a:28:60:c9:02:c0:98:9c:eb:9b:ee:1e:f0:f8:c9:
77:d2:5b:e9:a4:7d:c3:0d:74:85:31:20:95:92:1e:
a4:dd:49:f9:81:a5:9d:23:53:82:8e:f6:30:7a:01:
db:81:de:b9:3f:10:30:38:71:b7:45:6d:3b:b4:3d:
29:b4:bd:0f:d6:fd:54:7b:1b:64:96:f8:f8:89:7f:
a8:f3:38:4b:aa:17:4e:97:ee:16:25:8e:89:3d:4d:
17:40:2b:70:ce:dd:88:be:14:52:c0:54:3e:ec:d2:
1f:d4:97:6e:e1:b7:87:17:e9:73:4c:9d:62:2e:ad:
73:08:6b:95:79:dc:3d:a0:c2:ae:7f:89:38:8c:b1:
0f:69:4f:26:6f:29:31:0c:db:b3:3f:01:20:99:7f:
ce:aa:77:23:58:b0:ba:4f:dd:a1:d5:44:4c:f7:a4:
85:58:08:f5:9a:56:7d:81:6b:03:c0:d3:46:10:b6:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:D4:15:C2:A3:75:40:69:F8:F1:AC:26:00:D0:E7:5B:21:BA:22
X509v3 Authority Key Identifier:
keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/FA34AFAE0ADE11EC8F538728C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.72.0/22
103.229.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:57:cc:fd:4d:fa:60:23:40:29:04:02:6c:db:de:21:62:a9:
8c:ce:ca:e1:ee:84:d3:c8:4e:4e:c7:34:9b:59:ef:d0:35:35:
db:ec:7b:a2:27:22:4a:d6:86:fb:3c:53:fb:59:72:05:b2:cd:
28:f2:02:3d:91:e5:57:8d:75:c8:00:62:98:f4:3a:d1:e1:63:
5b:ad:58:d3:bb:db:94:91:48:ed:ab:df:fb:8a:3c:bd:b7:c5:
aa:e8:fc:08:39:0f:9b:46:7f:ac:df:85:38:0f:7e:b1:bd:3a:
f5:57:e9:ad:55:7b:1e:06:39:55:0f:99:27:48:7e:b8:6a:9c:
aa:ea:cf:bb:75:91:4a:af:86:f8:3a:eb:54:5b:2b:33:72:be:
4d:c8:68:15:c7:62:ef:ac:35:e4:1a:c9:98:94:8e:fc:7b:a7:
ee:12:3b:2a:ec:97:bd:95:56:78:c7:5d:79:7b:f6:ec:99:8e:
72:79:ba:70:a7:79:cb:8a:09:16:22:15:ff:c2:35:48:44:66:
94:61:d3:c5:50:ce:c9:82:bd:37:a6:ee:d0:f8:52:5b:00:b9:
c1:96:6b:3d:4c:ce:9b:65:48:64:f0:ef:3a:9b:ff:4f:d3:65:
31:ef:c1:3a:da:42:e9:a8:46:ce:d0:8f:2e:a4:58:98:44:12:
7b:07:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-ams.rpki-client.org