Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/7171FCC6C78E11E8BC20B719C4F9AE02.roa
File: 7171FCC6C78E11E8BC20B719C4F9AE02.roa (raw, json)
Hash identifier: dUDF26QKt0rENdnJPPc3vsVUC8n0PFOLE4EwW1MlrVk=
Subject key identifier: F6:B5:BB:2F:EF:81:C9:8B:90:9E:2C:2D:49:23:AA:79:C1:68:6F:74
Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial: 0F19
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/7171FCC6C78E11E8BC20B719C4F9AE02.roa
Signing time: Mon 21 Mar 2022 18:24:31 +0000
ROA not before: Mon 21 Mar 2022 18:24:31 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 9902
IP address blocks: 167.179.4.0/22 maxlen: 22
167.179.4.0/24 maxlen: 24
167.179.5.0/24 maxlen: 24
167.179.6.0/24 maxlen: 24
167.179.7.0/24 maxlen: 24
167.179.8.0/21 maxlen: 21
167.179.8.0/24 maxlen: 24
167.179.9.0/24 maxlen: 24
167.179.10.0/24 maxlen: 24
167.179.11.0/24 maxlen: 24
167.179.12.0/24 maxlen: 24
167.179.13.0/24 maxlen: 24
167.179.14.0/24 maxlen: 24
167.179.15.0/24 maxlen: 24
167.179.16.0/22 maxlen: 22
167.179.16.0/24 maxlen: 24
167.179.17.0/24 maxlen: 24
167.179.18.0/24 maxlen: 24
167.179.19.0/24 maxlen: 24
167.179.28.0/22 maxlen: 22
167.179.28.0/24 maxlen: 24
167.179.29.0/24 maxlen: 24
167.179.30.0/24 maxlen: 24
167.179.31.0/24 maxlen: 24
167.179.36.0/22 maxlen: 22
167.179.36.0/24 maxlen: 24
167.179.37.0/24 maxlen: 24
167.179.38.0/24 maxlen: 24
167.179.39.0/24 maxlen: 24
167.179.40.0/21 maxlen: 21
167.179.40.0/24 maxlen: 24
167.179.41.0/24 maxlen: 24
167.179.42.0/24 maxlen: 24
167.179.43.0/24 maxlen: 24
167.179.44.0/24 maxlen: 24
167.179.45.0/24 maxlen: 24
167.179.46.0/24 maxlen: 24
167.179.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Validity
Not Before: Mar 21 18:24:31 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6238c2df-a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:db:b8:9c:05:60:cf:b5:3b:3e:05:94:3d:
2f:75:5f:ca:16:22:29:54:b5:10:fc:72:ac:6b:9a:
d1:11:8c:a8:07:53:e9:2d:99:c8:fe:48:38:5e:4d:
74:f4:a4:ab:3a:f5:84:37:7a:5a:6f:26:ff:12:1d:
a8:79:35:5a:7f:a9:83:c2:3d:aa:0f:97:df:9e:d5:
2b:18:37:d1:aa:6e:12:11:80:fb:9f:23:ae:a2:2e:
2b:a7:55:c0:42:5d:31:3d:e5:3e:cc:b5:78:40:ac:
aa:51:ae:07:6a:0c:2d:1c:cb:97:a9:c7:b0:05:63:
ef:5c:bb:ad:b1:91:b1:09:15:e5:2d:1d:ad:80:01:
50:ad:84:64:a3:c6:b7:2c:93:b4:ea:1e:0a:98:25:
bc:f0:f6:83:87:23:5a:2a:aa:a1:a8:7f:e8:2a:7e:
2b:f4:ef:60:fb:01:c5:4f:1d:94:c6:bf:2c:be:9b:
d9:42:0a:e9:ba:aa:24:49:b3:eb:1d:78:5c:f9:16:
b5:5c:6e:29:74:e3:d9:8b:86:b9:43:6e:b2:8f:db:
eb:b0:61:66:ef:65:97:b2:6c:ea:21:95:ca:7f:60:
3c:09:be:17:c9:0c:e8:27:0f:7e:49:ca:3c:de:01:
49:e9:2d:ab:54:d0:76:8b:af:56:98:a7:d3:64:fa:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:BB:2F:EF:81:C9:8B:90:9E:2C:2D:49:23:AA:79:C1:68:6F:74
X509v3 Authority Key Identifier:
keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/7171FCC6C78E11E8BC20B719C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.4.0-167.179.19.255
167.179.28.0/22
167.179.36.0-167.179.47.255
Signature Algorithm: sha256WithRSAEncryption
78:13:46:cb:50:0c:27:61:fc:25:56:34:6b:10:9c:f6:19:29:
31:9e:8b:b3:c1:f2:d6:17:15:a4:a3:76:a9:e7:f3:32:0d:1f:
78:0b:46:92:4d:03:61:db:31:2e:9b:0c:9a:a7:60:7a:71:6c:
9d:0a:37:e0:64:bb:23:81:7b:59:58:56:4f:e7:49:27:99:6b:
ea:9b:f5:9d:51:80:3f:57:24:d9:4f:3f:4b:9e:81:5d:cd:28:
c7:ce:0a:1c:8e:e1:00:f6:cb:c6:50:7d:af:8d:3a:7c:7b:c2:
fd:0f:08:fb:48:7a:6f:86:42:98:aa:0c:06:ac:31:a3:5a:75:
75:da:6c:51:21:50:b5:ca:3d:86:2e:86:42:0e:3c:9d:ce:09:
56:0d:dd:4d:53:f1:97:ed:3a:5a:15:df:86:a1:37:11:1f:7f:
ec:47:55:de:f2:68:92:38:80:63:28:d9:4e:8b:c4:ba:7d:17:
3b:dd:3b:e9:c1:9e:ca:f7:80:1c:25:05:ae:bc:44:5c:23:61:
37:61:80:27:a5:a4:7e:f8:8c:b8:5a:59:5e:64:b5:29:63:de:
49:3d:d6:de:0a:1f:fe:4e:e5:fd:a4:c9:01:a1:b6:48:0a:80:
d5:f5:bf:fa:fd:33:e0:09:e0:2d:c9:a2:14:6e:c5:b7:17:d7:
1e:76:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org