Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/60F6FE7CE61711ECB08A7941C4F9AE02.roa
File: 60F6FE7CE61711ECB08A7941C4F9AE02.roa (raw, json)
Hash identifier: TXgVo7bU+DBvZzj1YrAnI1g0W6HcjYu0VehUSqSp6N0=
Subject key identifier: 09:DF:B4:6F:24:A6:06:60:E2:16:FD:7C:1E:97:02:64:30:DE:BA:96
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 033F
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/60F6FE7CE61711ECB08A7941C4F9AE02.roa
Signing time: Tue 07 Jun 2022 04:07:43 +0000
ROA not before: Tue 07 Jun 2022 04:07:43 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 3836
IP address blocks: 203.185.96.0/19 maxlen: 19
203.185.96.0/24 maxlen: 24
203.185.97.0/24 maxlen: 24
203.185.98.0/24 maxlen: 24
203.185.99.0/24 maxlen: 24
203.185.100.0/24 maxlen: 24
203.185.101.0/24 maxlen: 24
203.185.102.0/24 maxlen: 24
203.185.103.0/24 maxlen: 24
203.185.104.0/24 maxlen: 24
203.185.105.0/24 maxlen: 24
203.185.106.0/24 maxlen: 24
203.185.107.0/24 maxlen: 24
203.185.108.0/24 maxlen: 24
203.185.109.0/24 maxlen: 24
203.185.110.0/24 maxlen: 24
203.185.111.0/24 maxlen: 24
203.185.112.0/24 maxlen: 24
203.185.113.0/24 maxlen: 24
203.185.114.0/24 maxlen: 24
203.185.115.0/24 maxlen: 24
203.185.116.0/22 maxlen: 22
203.185.116.0/24 maxlen: 24
203.185.117.0/24 maxlen: 24
203.185.118.0/24 maxlen: 24
203.185.119.0/24 maxlen: 24
203.185.120.0/24 maxlen: 24
203.185.121.0/24 maxlen: 24
203.185.122.0/24 maxlen: 24
203.185.123.0/24 maxlen: 24
203.185.124.0/24 maxlen: 24
203.185.125.0/24 maxlen: 24
203.185.126.0/24 maxlen: 24
203.185.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Jun 7 04:07:43 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=629ecf0f-64e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:95:9c:1a:d4:ff:63:9c:79:25:e6:25:85:
60:72:39:fd:d7:6f:23:27:97:ee:41:b8:c6:f0:56:
2a:18:f6:16:fd:fb:5a:36:c8:32:17:f3:04:7e:4b:
6a:99:98:e9:9a:ef:d1:f8:7b:48:59:52:7b:49:de:
62:63:42:15:b9:06:ec:ad:d9:dd:8c:05:97:0f:6b:
49:61:d3:a6:2c:2a:3e:30:31:c0:75:8f:e2:a1:eb:
63:5b:18:c0:c4:56:d1:83:df:39:76:3d:95:af:b0:
56:f7:2f:91:1a:81:84:70:33:0a:65:79:67:0e:01:
d7:02:fe:e9:92:bd:c0:62:5f:81:13:72:eb:73:7e:
2d:0a:e4:ea:3d:25:1b:2a:52:f5:ae:5d:ef:c5:3c:
5c:0e:6c:d2:51:93:ac:ac:e1:37:4e:d4:7c:99:87:
b9:9d:5f:46:dc:c1:4d:f1:2f:17:a1:eb:a3:cd:a1:
b1:35:60:46:6f:b6:70:fa:a5:6e:99:3f:30:f7:1c:
45:c3:ec:b6:47:0e:55:51:36:5b:6a:9e:3a:49:b0:
8d:ea:9b:4b:01:dc:cf:43:c5:23:82:b9:bb:94:0f:
ee:ac:59:03:a2:b1:7e:e5:f0:2f:d2:fd:32:a3:ec:
6e:84:2c:6b:fc:eb:a9:9a:06:74:c2:46:1b:d2:37:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:B4:6F:24:A6:06:60:E2:16:FD:7C:1E:97:02:64:30:DE:BA:96
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/60F6FE7CE61711ECB08A7941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.185.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:eb:23:b5:2e:37:37:7c:1b:f0:9e:76:ba:8a:1e:08:d8:44:
ad:d6:7d:a4:79:ac:e6:63:06:01:45:3b:e4:dd:5f:73:32:5e:
91:de:7c:a6:ff:40:98:57:0b:ea:e7:ca:14:60:59:c9:96:58:
9f:08:6d:0a:df:e1:75:2c:07:06:eb:2e:a1:e4:e0:3a:45:5a:
ff:83:73:f4:a9:35:d0:5f:ad:2b:cf:43:42:8a:75:39:b1:9f:
79:e6:1f:b9:64:1a:9c:58:c9:55:d2:d6:3d:48:c1:b0:f8:50:
5f:5b:c5:67:02:61:80:48:ba:0a:6a:fc:4f:3d:54:ed:9f:33:
e5:51:97:09:95:5d:91:b6:96:09:4f:1b:a4:28:eb:9d:24:b5:
35:89:f9:5a:d2:4e:6f:28:8d:e5:23:b2:15:69:7d:2b:17:2d:
13:8b:3f:79:97:28:72:ba:d2:44:61:bd:d1:99:52:25:ad:f2:
60:b2:85:e2:41:6d:aa:69:fb:59:18:8a:4d:88:eb:74:09:5c:
d4:70:c0:21:3b:6c:7e:c4:15:80:3d:c5:ec:32:61:91:92:32:
f9:d6:fc:11:e5:79:13:dc:11:1f:c6:ac:93:ef:f2:c3:d1:63:
d6:40:86:59:d0:41:61:a3:d3:17:5a:f7:90:d7:75:02:4f:1c:
6c:75:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org