Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3918ABDA05D311EEA4EFFD5BC4F9AE02.roa
File: 3918ABDA05D311EEA4EFFD5BC4F9AE02.roa (raw, json)
Hash identifier: Wp1sOyvzRntuX+Qeo/mbB/CjsE2gyKmYatPOS+1vr6Q=
Subject key identifier: C1:0E:7E:1D:4F:29:69:D2:3C:A9:AA:58:C5:93:32:99:0E:D4:31:80
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 01BC
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3918ABDA05D311EEA4EFFD5BC4F9AE02.roa
Signing time: Thu 08 Jun 2023 08:05:25 +0000
ROA not before: Thu 08 Jun 2023 08:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.243.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Jun 8 08:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64818bc5-0056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:0e:57:a6:f4:bb:7c:3b:f1:49:25:93:d8:
bf:25:fd:d5:df:fa:1a:7d:ab:04:d4:3e:cc:56:ce:
ed:14:f7:2f:b1:f2:7b:c0:ac:c2:74:b6:5b:70:1a:
da:69:9f:0a:75:f4:88:a6:1e:10:30:8f:22:bb:22:
59:7e:55:4c:06:26:6b:9e:fe:80:12:f4:bf:dd:91:
b6:a4:f2:2d:df:32:0d:34:aa:66:3d:68:de:be:07:
76:84:e3:99:b1:ba:ce:c4:3f:61:f4:7c:3b:4f:4f:
19:f2:0b:7a:1a:45:d9:8c:74:0e:fe:18:39:b1:89:
ee:91:86:00:cd:02:82:00:bd:47:2a:8b:d0:01:b5:
f9:41:50:f0:11:42:2c:d2:87:ef:db:94:6f:dd:2b:
7b:2d:f9:f4:32:4a:b5:32:3d:e4:27:42:26:ec:aa:
b6:3e:49:be:b5:a3:2b:43:2d:8f:69:99:a7:c3:df:
6f:d7:6b:c7:b2:f3:ae:38:e9:8e:93:84:f2:4b:46:
04:2a:f9:be:fe:e5:94:ac:e7:0d:12:e8:87:9a:d5:
f6:b6:ed:6e:8e:ae:b6:e8:aa:8a:77:9c:6d:d2:df:
c1:bd:22:66:9b:54:dd:c3:92:d1:a7:e8:ea:1f:23:
61:59:d8:30:1b:b4:03:ee:32:47:ea:b5:82:71:56:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:7E:1D:4F:29:69:D2:3C:A9:AA:58:C5:93:32:99:0E:D4:31:80
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3918ABDA05D311EEA4EFFD5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3b:94:46:df:47:6b:5b:b6:55:f9:4f:36:28:6a:0e:ad:ce:
99:d1:6e:dc:4c:e2:3e:44:45:1f:b5:4d:14:82:a8:b2:7f:97:
2a:0d:b8:c8:3f:00:e1:a8:f7:5c:3c:96:1b:de:8a:af:08:3c:
de:d2:9c:05:e1:fe:41:96:ef:be:71:ec:f1:59:07:7e:ee:f2:
43:0d:7c:da:40:bc:9c:4f:79:12:71:71:cb:cb:f8:84:44:bc:
59:0a:0b:0f:07:25:35:30:16:0f:33:8c:fa:33:69:60:ed:07:
08:5b:84:11:49:7a:08:fc:7c:da:dd:84:f3:0d:5c:bf:be:18:
ef:08:72:03:d9:b9:d9:c0:d4:f0:90:8b:f5:5d:43:29:2f:73:
bc:f4:f3:7d:44:71:10:32:8d:17:41:31:aa:4a:57:7d:c1:f7:
03:67:d3:bf:42:30:a0:cc:e3:73:6c:73:42:78:f8:0a:4c:75:
ca:80:52:78:5f:41:7c:58:7a:01:0b:63:a7:d0:23:30:21:e6:
8e:5a:33:b0:2a:aa:9b:2c:59:89:41:30:e6:33:25:0a:88:17:
d4:68:eb:8e:84:c8:df:ef:a0:7d:0f:46:bf:2c:05:15:94:69:
99:cc:b9:54:02:a4:bc:06:4f:73:0b:33:46:ce:ee:97:df:71:
bb:38:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:06 2025 by rpki-client