Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/74591D54F11811EC86D3AD4BC4F9AE02.roa
File: 74591D54F11811EC86D3AD4BC4F9AE02.roa (raw, json)
Hash identifier: Wl5v2X7sqn7ksgFLLoej1I+8FCxP+pbBXxAdgJePgK8=
Subject key identifier: BB:C0:9F:49:F3:AF:5F:72:7F:21:79:9F:35:B8:1A:75:D0:B3:B6:C9
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 33
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/74591D54F11811EC86D3AD4BC4F9AE02.roa
Signing time: Tue 21 Jun 2022 04:13:08 +0000
ROA not before: Tue 21 Jun 2022 04:13:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49901
IP address blocks: 43.243.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: Jun 21 04:13:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b14553-e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:2c:16:52:fb:e7:65:be:39:a6:7b:5a:8a:
24:04:24:ed:86:e7:27:28:00:f4:72:81:89:cb:83:
bb:e0:23:f2:09:df:4e:89:53:4d:f9:4b:d7:2e:7f:
4d:56:27:44:6d:0b:65:7f:db:68:e7:33:80:e0:97:
00:8d:82:0e:a1:e4:30:98:3a:96:aa:3f:62:d1:7a:
ae:34:cb:41:83:a1:29:f1:27:10:2b:36:25:7e:ea:
5a:7d:4f:b5:f2:47:f7:b2:54:b4:cc:c2:33:c0:3e:
02:bd:c5:80:fe:8d:04:ce:6f:a1:7e:0e:57:9d:25:
86:18:fd:51:57:50:8c:c9:f1:5a:6e:1d:fe:98:8e:
18:4d:02:c2:2e:07:52:33:f0:4c:ea:a5:be:55:58:
2e:ae:ad:5b:75:21:55:9b:ec:83:c0:4d:a9:aa:8a:
ae:78:d3:dc:94:41:df:68:8b:d3:f8:b8:f2:b2:68:
07:4b:ac:54:87:87:50:e7:55:73:40:62:4f:9f:97:
6e:8f:45:22:74:a0:68:c1:ab:08:2a:0f:bb:f4:30:
b0:56:21:ca:28:4d:d1:61:1f:4f:f1:ab:07:c4:bd:
7e:fb:3f:db:34:0e:69:f0:14:b1:9b:42:af:14:be:
cf:9a:5d:27:c8:c5:59:af:11:f4:df:56:4a:74:5e:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:9F:49:F3:AF:5F:72:7F:21:79:9F:35:B8:1A:75:D0:B3:B6:C9
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/74591D54F11811EC86D3AD4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7f:08:8e:ca:10:6a:b9:94:83:2c:45:e4:dd:36:11:c1:4c:
0b:e0:3a:8c:01:9a:c1:ab:e3:89:33:91:1c:f8:a7:3e:71:30:
32:22:d9:88:96:1a:57:8b:e5:3e:b1:f3:25:c2:e4:54:4e:06:
29:e1:cd:49:1d:c1:5b:8d:62:a9:e5:be:a9:36:5b:2e:d3:ce:
ed:cc:92:58:38:00:eb:80:9f:e5:6e:37:7d:8b:be:b0:1b:5d:
e5:fd:8c:73:b1:d0:d0:26:4a:cd:df:76:e4:0f:3b:80:7a:1e:
06:db:83:1d:49:f1:2f:81:75:0c:df:c6:c6:f1:75:a4:3e:b5:
3c:35:a2:02:8c:53:25:d3:72:09:59:21:e4:44:a2:13:97:de:
64:5b:f9:e8:67:c1:31:5a:6c:54:95:b9:4d:07:76:e0:0d:b0:
b0:74:bf:f2:70:02:8d:33:9d:20:20:10:f1:99:c0:d5:7f:d0:
5c:98:ba:af:45:0f:3a:07:6f:26:45:36:77:3f:28:99:d6:4f:
cb:fc:1e:c6:42:e5:23:88:d2:c0:8e:d5:1f:6a:cc:e9:f2:19:
c8:1b:87:b4:ea:f7:cc:9f:42:85:e2:60:3e:3a:35:33:fc:6d:
70:b7:32:69:fe:f1:c2:50:cc:b7:53:b9:4d:7f:63:f5:fd:8b:
6e:46:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:53 2025 by rpki-client