Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DDCF268C52EA11ED8BAAA80AC4F9AE02.roa
File: DDCF268C52EA11ED8BAAA80AC4F9AE02.roa (raw, json)
Hash identifier: ncmVZ62MCDae3l1Gz8HcCBPCzZ0s6EJs/wQkPS9Oag8=
Subject key identifier: B3:C0:28:C7:1D:60:C9:E7:16:27:A4:F2:FE:52:EA:50:56:05:F7:5C
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 011D
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DDCF268C52EA11ED8BAAA80AC4F9AE02.roa
Signing time: Tue 25 Oct 2022 21:13:24 +0000
ROA not before: Tue 25 Oct 2022 21:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 43.243.194.0/23 maxlen: 24
45.113.81.0/24 maxlen: 24
103.24.0.0/22 maxlen: 24
103.229.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Oct 25 21:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63585173-039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:4e:28:87:23:13:7a:7c:e7:4a:99:3f:8b:
e9:86:10:b5:08:9a:a8:eb:a4:3d:f0:86:d8:54:01:
d6:4e:c1:26:7f:35:a3:02:7d:0d:22:af:2b:31:75:
a3:28:cb:34:c9:7c:34:ff:96:05:2c:1c:d3:ba:12:
61:1e:40:47:9f:7a:81:54:47:d5:66:54:98:6c:9b:
c6:d4:22:b1:72:6c:60:8c:74:67:70:f0:47:53:e8:
a8:23:34:aa:30:e9:38:ed:34:10:e6:fd:27:cd:9c:
b2:14:b6:91:c3:41:f1:3f:fd:df:6f:af:b6:7d:bc:
ee:11:f2:a8:32:31:74:78:60:b3:1a:7f:d7:72:ea:
e4:b9:e2:a8:7a:47:7d:dc:18:60:d2:13:5e:67:a3:
f1:b5:d0:f1:f5:74:21:c3:81:fe:d5:bd:52:45:48:
66:ff:c0:64:9f:b2:5e:4e:f8:54:e1:fa:ee:4b:1d:
63:50:66:c4:30:ad:cc:48:e1:4a:00:40:c7:32:fd:
ed:6b:e6:5d:d9:d6:a9:ec:54:98:50:fd:37:95:a7:
37:05:4a:05:b6:e7:ff:7c:ad:1c:53:63:c3:ee:36:
d5:b5:b5:36:95:b1:38:49:2e:aa:a3:98:52:f2:8f:
08:24:85:7b:22:88:3b:a6:ac:8a:e5:2a:fb:69:84:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:28:C7:1D:60:C9:E7:16:27:A4:F2:FE:52:EA:50:56:05:F7:5C
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DDCF268C52EA11ED8BAAA80AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.194.0/23
45.113.81.0/24
103.24.0.0/22
103.229.116.0/22
Signature Algorithm: sha256WithRSAEncryption
93:d1:89:a2:24:e8:0d:3d:db:20:d1:ff:0a:2c:43:cd:d9:ea:
e6:60:0a:61:ed:4a:64:b3:ff:15:9c:6b:b5:70:9d:92:ab:15:
a4:9e:f3:ed:32:22:ab:62:fb:bc:18:eb:82:2a:26:b3:df:a9:
72:f1:29:38:3f:54:31:ea:8d:75:15:36:b1:f5:a2:99:0d:f7:
c3:47:b1:8d:7d:d3:74:a8:9c:62:77:57:c7:5d:b1:19:17:b3:
1a:db:75:0a:fb:52:9c:5b:f3:9f:0c:b5:4c:9f:1d:dc:82:01:
0d:4d:6a:75:24:47:0c:5d:4a:33:f6:e8:ba:c2:6c:aa:ac:bc:
d9:d0:30:46:f0:1c:d3:52:aa:00:48:bf:9d:2f:9d:fc:6d:d8:
3c:74:f7:37:3d:b5:eb:b4:c7:78:6e:0a:f5:f2:b2:8a:b1:f6:
ec:ba:04:59:57:6d:60:0d:df:8e:19:8a:2d:9b:96:2c:a5:32:
10:2a:7b:39:15:4a:75:a5:b3:ae:75:d3:03:43:14:7b:d7:e4:
c7:b4:f6:36:91:b3:b7:2a:c2:61:9f:c9:5f:e1:ed:7b:7d:82:
18:b8:e5:56:a7:6f:20:51:94:e6:5d:d1:a4:9f:27:27:45:be:
c2:f7:60:61:5f:68:89:b3:dd:e2:f6:cb:fa:65:de:1c:6d:91:
83:d8:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org