Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/F87EBC30187B11ED92148716C4F9AE02.roa
File: F87EBC30187B11ED92148716C4F9AE02.roa (raw, json)
Hash identifier: 3ikAAiTzqqBwlEIVfJBWlnwPMA3L9lITfR5/R5kFbFs=
Subject key identifier: 4A:5F:82:F5:38:F7:B5:64:8F:21:CC:FA:05:6D:15:9E:C8:D8:F4:0E
Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD
Certificate serial: 02
Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/F87EBC30187B11ED92148716C4F9AE02.roa
Signing time: Wed 10 Aug 2022 07:13:45 +0000
ROA not before: Wed 10 Aug 2022 07:13:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132627
IP address blocks: 43.245.224.0/24 maxlen: 24
103.17.152.0/22 maxlen: 22
103.17.152.0/24 maxlen: 24
125.254.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD
Validity
Not Before: Aug 10 07:13:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f35aa9-53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:a3:26:65:45:03:39:4e:52:60:5c:1a:c3:
5a:c2:7e:71:c7:f3:1f:f8:6d:bf:38:5f:f7:b8:2e:
28:ab:7d:96:0b:8e:28:98:da:5f:a9:b3:1c:4b:1f:
b6:72:38:a5:da:b9:ff:0a:3c:1b:5c:b1:3e:24:f4:
f7:b3:94:8f:22:18:e4:0d:bd:99:9c:e5:6d:68:d3:
5b:a5:5c:90:20:ef:c5:a9:97:cd:40:3a:59:3a:30:
9b:a1:c3:49:a2:fa:9e:78:c1:e3:fb:42:f4:23:75:
49:86:ba:cd:4d:d5:fe:b2:5e:bf:05:a4:a4:d2:22:
2d:f5:32:10:fc:42:2f:bb:1b:2c:c7:68:71:ef:dc:
eb:89:21:ee:f7:2f:a6:f3:07:9d:86:95:6f:84:07:
4e:e4:52:a2:b3:6e:ee:d8:7e:7d:cd:92:67:07:ed:
4e:2d:62:48:ff:22:4b:d2:4e:0c:10:58:2b:86:9d:
97:af:cf:65:d7:52:e0:6b:62:06:d3:cb:eb:47:15:
0e:29:32:56:51:ce:eb:0e:cd:9f:ae:ce:3c:fc:86:
9f:26:ed:1f:a6:00:7e:d4:1e:89:3e:13:da:6a:65:
a5:83:0b:e5:14:60:d7:56:9a:ee:a0:56:60:d0:4e:
b1:5c:f1:2c:1c:eb:7a:f3:df:8d:61:b1:ff:81:c5:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:82:F5:38:F7:B5:64:8F:21:CC:FA:05:6D:15:9E:C8:D8:F4:0E
X509v3 Authority Key Identifier:
keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/F87EBC30187B11ED92148716C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.224.0/24
103.17.152.0/22
125.254.51.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d9:d1:f9:4c:8e:27:40:fc:8a:e9:69:ab:b5:c3:33:da:f8:
c9:49:3e:4b:9a:62:ae:40:f2:99:28:76:f6:43:2c:a7:e4:ab:
aa:fe:86:aa:7a:2f:9e:9a:16:66:ff:85:c6:8a:2e:da:7f:54:
8b:4b:dd:3a:c1:17:8d:86:73:47:6f:6e:f1:79:3b:bd:5d:9c:
08:02:e5:17:ac:d4:68:da:fd:b6:00:86:f6:87:5a:a2:c0:95:
9d:28:2f:37:3f:8d:e2:99:e4:9f:1e:53:e3:a7:3f:ef:ea:51:
98:12:4a:cf:7d:92:5b:62:c7:72:3f:35:a1:a7:78:d2:20:09:
b8:8a:fc:4e:df:ff:c2:fe:ed:ce:a5:92:57:0b:b8:7d:4c:cc:
1a:8a:b1:8c:12:ec:bd:46:97:88:03:66:02:f6:eb:6a:a2:b4:
be:8e:9b:f8:48:49:8f:95:d5:3c:4f:34:5d:e7:fd:f1:6d:90:
67:72:84:59:bd:ba:0b:b0:ed:60:9c:fb:53:8a:91:51:bd:1c:
b9:40:78:2f:86:f4:52:9c:d7:0f:94:45:ad:cb:79:a7:cf:e3:
98:52:e5:cf:fc:a2:a6:7b:d0:79:2f:6d:3a:86:f4:02:ea:cb:
a0:c7:df:fa:19:36:04:88:ce:8b:7c:62:e2:cc:1d:aa:6a:f8:
50:c6:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org