Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3B550442CA0B11ED8B414F75C4F9AE02.roa
File: 3B550442CA0B11ED8B414F75C4F9AE02.roa (raw, json)
Hash identifier: 04ZSdJNQwTu47OV3ydR139/DRxYpmr5Mqak+jK1k9Q8=
Subject key identifier: 15:72:C5:D4:9C:0D:07:EA:23:D1:BB:0C:73:4C:22:96:4A:44:52:61
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 01A8
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3B550442CA0B11ED8B414F75C4F9AE02.roa
Signing time: Sun 21 May 2023 05:54:27 +0000
ROA not before: Sun 21 May 2023 05:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 43.243.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: May 21 05:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6469b213-81e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:2a:8a:ef:bd:e3:3a:a2:9c:5a:65:0f:c0:
55:a8:f3:bb:9b:71:d0:48:a9:f0:cf:1b:64:91:80:
bf:82:fe:95:cc:20:57:42:ee:ee:44:78:75:0f:97:
bb:79:9c:a0:71:48:e6:98:af:25:9f:8e:55:f0:e0:
be:66:39:2c:c4:a7:8e:65:44:a7:48:61:16:be:2b:
53:e8:37:8e:ab:a5:cb:07:b6:48:84:87:c8:75:2c:
92:c4:9b:c8:29:3f:53:52:3c:9c:42:5b:ac:d8:82:
f9:09:10:f0:85:da:eb:d5:c8:5e:22:67:c8:61:79:
c4:75:9d:67:45:52:fd:43:49:9b:ab:81:39:9a:b4:
15:02:c6:fb:ee:8d:79:ed:0c:be:dd:70:c7:f0:0c:
fa:a8:12:4b:97:bc:5f:18:08:37:7d:1d:aa:d0:16:
90:a9:ea:d5:6f:ec:bc:8a:d7:f7:9f:ef:ec:22:47:
71:af:75:e1:3a:83:90:88:7b:a4:4e:93:16:61:b0:
e6:3f:b9:5f:94:11:27:55:3e:30:60:8d:8f:c2:de:
25:aa:08:84:25:7f:fd:0e:c5:ed:8c:6b:7a:47:25:
6a:81:fc:4b:f6:5b:2b:3d:57:c9:85:f6:d0:a9:9d:
1a:46:41:2f:cb:15:67:30:4b:39:d0:50:5e:83:a5:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:C5:D4:9C:0D:07:EA:23:D1:BB:0C:73:4C:22:96:4A:44:52:61
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3B550442CA0B11ED8B414F75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7d:ef:4b:ce:9a:8a:04:a8:2b:66:2f:ba:ae:64:36:13:b1:
2b:2e:b1:b2:38:f7:90:b9:53:9e:17:c9:a7:1e:4c:d8:bc:11:
70:39:40:ab:11:b6:0b:be:da:21:e8:d0:7b:4a:46:f7:68:9c:
4e:ef:5f:4f:23:40:40:3d:3a:f0:2a:d8:3d:f1:82:93:0f:12:
de:b7:9d:4d:7b:98:b0:ff:9d:b6:7e:cd:4e:bd:2a:55:37:72:
c0:3d:16:da:6e:a4:90:d3:2e:15:16:dd:4e:73:e5:98:b3:27:
47:44:55:39:cd:a7:ac:79:9d:34:82:4c:d0:80:e9:69:06:ad:
7f:57:31:40:9c:0f:92:21:3f:9f:c5:2d:2f:eb:ee:66:26:4d:
4f:bc:d7:09:ea:81:61:4a:ef:ff:37:e6:e9:80:90:ab:8d:11:
95:5e:f8:de:80:72:92:21:38:39:07:21:03:4b:43:ba:59:d6:
18:70:a8:09:94:87:9e:4c:e7:14:1c:00:6f:bd:8a:23:16:c3:
31:d6:22:11:f8:e4:c2:a4:f5:ba:ea:c6:94:11:58:8e:e3:dc:
03:a6:85:7f:dd:a2:74:b2:d9:cd:ce:38:d0:54:87:c4:ac:e9:
c6:3b:1b:a5:03:43:26:be:b1:b8:67:f9:e5:a2:79:9b:25:75:
03:11:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:44 2025 by rpki-client