Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/E691C6BC26DF11ED94E18118C4F9AE02.roa
File: E691C6BC26DF11ED94E18118C4F9AE02.roa (raw, json)
Hash identifier: 8BzGRU0qCw00yfydn+RWUkvL42tm2NzgH5XSh6WAS38=
Subject key identifier: AD:4D:47:27:B7:24:02:A5:93:63:AF:E0:AA:D1:EE:EB:13:A0:10:12
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: BC
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/E691C6BC26DF11ED94E18118C4F9AE02.roa
Signing time: Sun 28 Aug 2022 14:44:21 +0000
ROA not before: Sun 28 Aug 2022 14:44:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203141
IP address blocks: 43.243.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Aug 28 14:44:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630b7f44-21a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:47:63:83:05:58:2a:dd:c5:93:32:2b:6f:
16:19:17:e4:5a:e5:f8:f7:8c:06:1b:33:5a:df:40:
4c:3a:34:3a:26:37:1d:75:d8:b0:80:5a:03:00:81:
cc:1b:53:d6:36:02:1d:93:d7:f5:46:74:3e:54:ba:
b6:cb:be:ba:df:37:94:97:5f:9a:0d:30:e8:d1:9c:
a1:50:10:e9:37:78:56:1f:d9:ae:ad:ad:29:16:64:
53:b9:c7:66:58:8f:e1:1c:d2:af:0a:64:00:81:6e:
73:87:02:4a:b8:c8:5a:e1:57:3c:a7:c7:a7:18:e5:
84:b0:71:2b:4c:84:f4:1e:19:41:bf:ba:93:73:41:
38:28:fc:4c:fd:b3:e3:15:0a:6a:72:ce:40:2e:ca:
1c:96:bb:a3:f4:a7:bc:19:cb:2b:96:25:b6:a7:0c:
de:cc:7d:28:07:9a:ff:29:9e:61:ff:65:15:2c:b0:
38:24:f8:a3:69:0d:8e:57:5c:98:4a:75:99:3e:22:
7f:ab:bf:f1:4d:2e:55:65:44:b5:41:5b:df:a1:fb:
9d:93:e4:d2:e7:ad:fc:52:3c:bc:05:9a:97:90:b1:
89:e0:dc:e9:05:1b:3e:48:cb:e6:a5:10:a1:d2:2a:
be:21:f3:31:b8:e2:d2:2c:5f:9d:49:0e:b7:52:a3:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:47:27:B7:24:02:A5:93:63:AF:E0:AA:D1:EE:EB:13:A0:10:12
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/E691C6BC26DF11ED94E18118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
db:ed:ce:84:f5:d5:36:8b:44:aa:3d:0d:f3:94:70:ff:bc:af:
01:a2:5b:5a:5e:d3:1f:90:75:13:8a:ba:2c:ad:ed:1a:47:e6:
4e:ba:a8:fd:18:c4:af:12:ae:f6:90:3a:0e:de:10:81:17:91:
09:7a:b2:b5:e0:5a:01:11:58:a8:22:ac:a8:67:77:3f:c6:94:
5d:36:4e:b6:2f:01:05:21:07:db:91:2f:ac:2f:ee:63:62:39:
ab:42:93:d0:ac:63:92:25:17:65:0e:11:c3:54:48:63:9b:53:
73:c9:51:1f:a7:7d:f7:21:1b:8d:dc:f9:3d:fc:10:4b:04:a1:
d4:f9:40:a5:56:a5:c7:27:b2:a7:4c:c3:1e:24:b4:15:89:39:
58:af:6e:97:3a:f2:0c:5c:2d:13:12:a7:e1:31:89:95:20:5a:
16:bf:d7:9d:ba:56:eb:8c:1f:47:1a:6e:ab:fe:da:6b:06:a8:
5b:65:22:73:86:d6:d5:c5:0e:4c:c2:9c:bf:3f:55:e0:41:65:
1d:d3:4a:ec:e7:b6:be:17:e4:5a:07:dc:1e:69:79:64:0c:49:
12:f4:1c:16:b6:a7:bb:30:51:cc:d6:79:93:cc:67:13:38:ba:
68:bc:08:9e:10:43:9e:f3:52:f1:c7:25:ed:a3:1f:4b:9b:cf:
12:ee:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org