Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/988453A4E06C11ECA8E9E51DC4F9AE02.roa
File: 988453A4E06C11ECA8E9E51DC4F9AE02.roa (raw, json)
Hash identifier: qErvprqz1dBhgGhmsb644biCjHubTMLzAsAhWPBHAys=
Subject key identifier: 7C:CE:06:A6:AF:8A:9F:A7:CB:74:8E:C6:B7:DF:C8:93:B4:11:54:D8
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 03
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/988453A4E06C11ECA8E9E51DC4F9AE02.roa
Signing time: Mon 30 May 2022 23:02:36 +0000
ROA not before: Mon 30 May 2022 23:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.113.80.0/24 maxlen: 24
45.113.81.0/24 maxlen: 24
45.113.82.0/24 maxlen: 24
45.113.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2
Validity
Not Before: May 30 23:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62954d0c-329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:32:c8:9e:15:f4:f0:0b:d1:6e:de:ba:04:
ef:2c:83:ba:a7:77:d3:24:59:ad:bb:98:ba:b3:74:
f1:a1:b9:71:f2:00:e5:a2:da:a5:a4:db:36:18:4d:
ca:2e:6d:53:50:9d:cc:de:fb:28:b9:06:b7:4b:3f:
0a:3b:97:8d:82:38:ab:05:77:54:05:86:5f:52:9a:
c7:6a:bb:27:c9:75:b4:79:01:ce:80:70:bf:14:97:
e8:0a:2c:4a:c2:04:49:fc:7c:a9:a1:1e:eb:00:7b:
e1:a8:90:d4:48:c9:a3:32:3c:c9:ab:7c:f1:ce:c2:
34:6c:1f:91:12:af:7a:55:b5:d1:77:4e:21:26:a1:
cf:93:cd:69:bb:89:2f:47:14:e8:ac:db:fe:60:be:
d9:30:95:a4:65:21:6c:7f:91:02:ca:25:ad:86:e6:
a0:e0:0e:18:81:45:e4:b8:2d:27:3c:cf:df:b1:81:
79:b5:5d:12:55:52:03:7a:02:d5:70:5f:57:06:d4:
32:7c:b3:8d:d7:0c:5f:a5:b1:70:e8:7e:80:af:2e:
e4:61:70:86:3c:ca:32:62:e9:cc:6a:12:f2:34:d4:
53:e5:28:88:9f:4e:4b:a5:b7:78:01:ce:5e:3f:ae:
82:8c:73:bc:4c:be:aa:33:8a:e1:1f:60:eb:54:bd:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:06:A6:AF:8A:9F:A7:CB:74:8E:C6:B7:DF:C8:93:B4:11:54:D8
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/988453A4E06C11ECA8E9E51DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:da:4a:40:ba:56:0a:37:07:ec:d7:ab:ac:b2:52:c9:a0:4d:
a0:90:25:3f:13:a3:c9:46:b7:b2:9e:b6:be:91:3a:b0:81:c2:
ce:f0:98:f3:69:68:cf:b8:a3:40:0d:39:01:cf:21:c4:4c:7a:
4b:34:7f:f9:fe:7b:b2:6d:1e:70:fb:cc:ae:7d:b2:00:c5:01:
f4:a9:36:2a:84:a7:6b:b9:9e:44:51:d2:0e:d8:df:1b:35:f1:
bc:9f:e4:70:2e:27:62:68:b9:3a:d1:ec:f5:01:cc:66:c0:6d:
58:24:d2:1a:f6:44:34:7c:4c:02:bd:8a:f6:39:b7:0c:69:7d:
c5:92:2e:0b:0e:40:b6:f3:9d:c6:7c:fc:c5:5a:79:7f:fe:f9:
45:ad:5d:e5:0b:82:77:d1:d5:11:7f:70:c5:aa:4d:18:e1:8b:
a8:b9:eb:b9:b0:d1:f4:f9:70:11:e6:fd:cd:5d:c8:a2:0e:18:
1c:34:25:6c:6b:40:c2:c9:0e:9c:79:b9:d8:97:c8:ab:23:50:
6f:ea:8a:41:25:33:cb:a6:3d:0a:c1:61:9c:1a:d3:0f:79:79:
6e:c4:16:be:88:1a:21:36:4a:ae:f3:d9:22:87:31:42:14:88:
0c:99:4e:45:c2:6e:f0:d6:45:1c:b8:69:76:f1:f9:12:a4:c0:
b3:a7:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:21 2025 by rpki-client