Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/00558DBEB29411ED90630964C4F9AE02.roa
File: 00558DBEB29411ED90630964C4F9AE02.roa (raw, json)
Hash identifier: eG+YAWvppcF61SANfiB/5sn/omG1MJVN6LLJQruLrjo=
Subject key identifier: 70:9D:A9:BE:46:D2:31:F9:40:A9:70:28:88:A5:D7:D6:47:BA:C1:89
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 023E
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/00558DBEB29411ED90630964C4F9AE02.roa
Signing time: Wed 22 Feb 2023 09:33:45 +0000
ROA not before: Wed 22 Feb 2023 09:33:45 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 133480
IP address blocks: 43.228.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95
Validity
Not Before: Feb 22 09:33:45 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f5e179-27e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:b7:e7:a6:24:4d:c5:9e:b1:72:72:02:a1:
57:56:3c:be:23:51:cb:7c:82:b2:64:c0:fe:38:e4:
bd:ff:d9:97:f7:c4:65:25:d5:8f:a9:c6:b4:0b:ec:
70:f9:57:cd:5f:9b:1d:c7:5e:f1:0e:40:30:ef:9e:
38:77:51:3d:14:37:a7:de:85:bb:e4:d4:47:e2:4a:
62:5a:80:a1:5d:f4:62:d5:5a:1f:1e:73:b8:bc:59:
2f:ae:79:ba:a1:0f:b6:a2:ab:55:8c:c1:b1:43:39:
d3:e3:5b:0a:7b:37:d6:74:a5:57:66:22:64:cd:df:
e2:bc:58:79:67:f7:24:a7:5f:3e:1e:ed:3b:2f:13:
b1:91:91:a1:ae:58:ea:53:00:1e:a5:d8:39:93:3c:
af:6f:77:20:4e:c3:ad:b1:20:1b:ca:6d:e4:c4:c2:
bc:1e:56:22:9f:40:9c:95:92:a8:89:93:e3:41:79:
c5:72:34:10:27:04:93:ce:32:81:92:c8:0a:54:08:
8b:67:98:07:06:5d:20:5b:71:e5:63:6d:3b:71:ea:
b4:d0:72:42:e2:5a:3c:6a:9a:65:98:93:27:e2:4c:
50:9a:41:c3:15:6e:8b:5a:8e:7b:fd:14:3f:0b:67:
d2:30:fa:ca:a1:98:f4:d5:2f:8e:0f:ab:3b:de:b1:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:A9:BE:46:D2:31:F9:40:A9:70:28:88:A5:D7:D6:47:BA:C1:89
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/00558DBEB29411ED90630964C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:99:02:ac:ad:cf:c3:11:43:97:7e:8d:4d:4a:84:7f:39:69:
93:95:b4:bc:0e:4b:18:99:81:40:cc:49:93:94:a4:26:0f:00:
52:a7:ae:6a:89:2e:94:13:56:74:45:6f:e6:31:20:5a:71:ea:
dd:86:14:4a:34:a4:3f:09:3a:a2:5d:89:86:35:5b:d1:c7:62:
b8:c8:4a:3d:02:50:5b:f4:ec:ff:31:17:99:33:25:93:df:d5:
59:35:38:37:51:a8:5d:46:ec:9c:17:f2:02:b0:c2:60:64:a1:
01:be:35:ce:f7:e5:7e:26:3b:42:53:51:50:ba:f3:21:d2:da:
9d:8e:d5:63:93:74:a6:59:bd:6e:24:90:ac:e4:98:6c:df:59:
37:0d:5c:13:30:ad:9b:21:59:d8:b4:12:5b:68:d5:15:8e:f1:
46:13:43:04:36:9e:fb:c3:30:6e:0f:9a:7d:41:0d:06:0c:6c:
7d:13:82:a1:05:85:52:2e:8e:8b:5a:02:e7:b9:7f:cb:9f:1d:
f2:21:6d:04:38:81:47:b7:69:7f:0f:9b:d1:f0:01:2a:3d:bd:
80:bc:54:04:2b:7e:37:f4:94:94:85:19:54:e2:05:20:90:3b:
42:e5:6d:ae:10:89:10:f3:99:db:e8:39:d6:2a:a7:93:56:8a:
54:88:12:ee
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjMwMjIyMDkzMzQ1WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Y1ZTE3OS0yN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDC356YkTcWesXJyAqFXVjy+I1HLfIKyZMD+OOS9/9mX98RlJdWPqca0C+xw
+VfNX5sdx17xDkAw7544d1E9FDen3oW75NRH4kpiWoChXfRi1VofHnO4vFkvrnm6
oQ+2oqtVjMGxQznT41sKezfWdKVXZiJkzd/ivFh5Z/ckp18+Hu07LxOxkZGhrljq
UwAepdg5kzyvb3cgTsOtsSAbym3kxMK8HlYin0CclZKoiZPjQXnFcjQQJwSTzjKB
ksgKVAiLZ5gHBl0gW3HlY207ceq00HJC4lo8applmJMn4kxQmkHDFW6LWo57/RQ/
C2fSMPrKoZj01S+OD6s73rHfbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHCdqb5G
0jH5QKlwKIil19ZHusGJMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvMDA1NThEQkVC
Mjk0MTFFRDkwNjMwOTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr5J8wDQYJKoZIhvcNAQELBQADggEBAHqZAqytz8MRQ5d+
jU1KhH85aZOVtLwOSxiZgUDMSZOUpCYPAFKnrmqJLpQTVnRFb+YxIFpx6t2GFEo0
pD8JOqJdiYY1W9HHYrjISj0CUFv07P8xF5kzJZPf1Vk1ODdRqF1G7JwX8gKwwmBk
oQG+Nc735X4mO0JTUVC68yHS2p2O1WOTdKZZvW4kkKzkmGzfWTcNXBMwrZshWdi0
Elto1RWO8UYTQwQ2nvvDMG4Pmn1BDQYMbH0TgqEFhVIujotaAue5f8ufHfIhbQQ4
gUe3aX8Pm9HwASo9vYC8VAQrfjf0lJSFGVTiBSCQO0Llba4QiRDzmdvoOdYqp5NW
ilSIEu4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:54 2025 by rpki-client