Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/C5B41318AA6C11EC9B8E8521C4F9AE02.roa
File: C5B41318AA6C11EC9B8E8521C4F9AE02.roa (raw, json)
Hash identifier: ZEmx2yS0qubIhzKsLHspWuttAdCOAmwdvQcQ2TRXg9g=
Subject key identifier: 0E:D2:13:22:D6:E0:E3:6F:E2:88:DF:C5:03:60:50:9A:90:99:7C:45
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 06DC
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/C5B41318AA6C11EC9B8E8521C4F9AE02.roa
Signing time: Wed 23 Mar 2022 05:47:49 +0000
ROA not before: Wed 23 Mar 2022 05:47:49 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 141768
IP address blocks: 39.109.66.0/23 maxlen: 23
39.109.66.0/24 maxlen: 24
39.109.67.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/21 maxlen: 21
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.77.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/21 maxlen: 21
39.109.80.0/24 maxlen: 24
39.109.81.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.83.0/24 maxlen: 24
39.109.86.0/24 maxlen: 24
39.109.87.0/24 maxlen: 24
39.109.88.0/22 maxlen: 22
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
39.109.90.0/24 maxlen: 24
39.109.91.0/24 maxlen: 24
2403:e840:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Mar 23 05:47:49 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=623ab485-9141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:10:d5:89:c4:63:0a:92:42:bb:7e:58:c0:
db:a4:f2:45:4d:d4:34:f5:c9:38:23:6b:4e:d7:f2:
e0:2f:5e:0a:c6:65:71:99:80:dc:ce:43:d3:93:ec:
d1:d4:28:3c:f4:c6:d6:3a:21:86:b1:c2:93:00:d7:
51:38:c0:a9:08:72:69:54:71:89:c4:35:81:ee:9b:
51:37:f3:1c:4e:b5:88:eb:7b:df:ef:07:bc:34:a1:
08:b2:60:11:c1:5d:9e:23:e6:09:be:8b:a6:d2:ca:
ea:20:b9:82:46:41:5a:b6:23:1e:22:fb:05:b0:65:
47:15:5c:78:de:60:7e:bf:a0:98:cc:26:75:9f:a3:
37:8e:c3:26:d0:e9:09:5f:6e:ee:8c:ba:ac:54:ca:
14:73:d5:bd:03:93:75:b9:4e:8f:5e:1e:13:d5:61:
8a:c7:a9:a9:20:77:6e:0c:07:1b:3f:e4:72:38:e8:
a7:f4:3e:45:81:2c:60:06:d5:dc:2a:d8:52:47:ba:
74:ae:31:21:e2:6b:cc:2c:f8:c5:7a:c5:5b:12:45:
0d:5a:f4:e7:fd:0c:50:6c:cb:50:66:61:8b:0c:e4:
58:ab:7e:f6:44:aa:62:0f:0a:5c:69:0d:3a:f2:59:
7c:a2:d2:8a:67:2a:df:bd:4f:ce:df:c1:6e:1c:2d:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D2:13:22:D6:E0:E3:6F:E2:88:DF:C5:03:60:50:9A:90:99:7C:45
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/C5B41318AA6C11EC9B8E8521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0/23
39.109.70.0-39.109.91.255
IPv6:
2403:e840:8000::/33
Signature Algorithm: sha256WithRSAEncryption
46:79:6f:70:18:dc:81:a9:78:63:54:29:54:8a:74:e6:6e:ac:
f3:da:57:60:f4:21:a9:e8:4c:80:96:b7:2b:6c:34:4d:50:99:
b5:81:b1:2e:fd:70:12:46:65:a6:6f:cc:6c:61:cd:b0:3e:41:
e9:5f:67:48:d6:6c:11:83:16:6d:47:a2:20:48:9c:f2:bb:fe:
8c:db:61:d9:50:ea:25:8a:01:e7:b9:6d:f8:f0:cf:5f:48:83:
bd:bb:6d:5f:fa:f1:df:ef:8d:0b:0f:06:8e:23:97:7f:a8:ae:
ca:a1:ad:04:35:21:9c:d5:c8:87:8d:1a:3d:f5:16:fb:eb:dd:
0d:bc:db:d0:96:73:bd:ea:4b:a9:16:51:24:9a:36:e9:b4:c6:
d2:13:5e:10:9f:85:82:f6:58:9b:a2:4c:48:f4:90:69:0c:05:
fb:17:b6:92:78:f7:f4:9d:c1:b0:ad:cc:28:71:64:3a:76:9e:
06:99:53:41:cc:3f:15:f5:fa:9c:93:19:c7:08:b2:44:5c:5a:
c3:b8:d9:7b:4c:34:af:d3:58:b1:57:d3:7b:84:ab:40:c8:e5:
d5:4e:ac:86:3d:a4:3a:f7:70:00:2d:ed:03:ae:b4:9e:fb:70:
54:0a:d8:ec:d8:70:e8:d1:03:18:fd:23:38:c9:15:13:ab:6b:
74:f2:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org