Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/16A5E0449F2D11EC897FD30CC4F9AE02.roa
File: 16A5E0449F2D11EC897FD30CC4F9AE02.roa (raw, json)
Hash identifier: ECKw2AAbcehq1c769ogMb4YCMUCC+C6+Qq75AAed0Uc=
Subject key identifier: A8:7A:35:F2:87:F6:C6:8D:C8:D6:F8:AF:ED:35:16:26:DE:C3:55:A8
Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial: 02
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/16A5E0449F2D11EC897FD30CC4F9AE02.roa
Signing time: Tue 08 Mar 2022 22:14:15 +0000
ROA not before: Tue 08 Mar 2022 22:14:15 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 131995
IP address blocks: 43.245.212.0/22 maxlen: 22
103.29.152.0/22 maxlen: 22
2401:af00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Validity
Not Before: Mar 8 22:14:15 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6227d536-01d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:25:eb:64:da:99:74:eb:1c:d4:95:a6:95:
5c:be:a2:5c:d6:ad:9d:18:e6:aa:1e:34:64:2b:6c:
43:86:5a:f1:8b:14:78:29:98:73:1f:8d:98:88:41:
5d:5f:40:a3:d4:ea:81:cb:db:67:ad:4b:d1:95:ef:
22:0e:3a:40:28:f7:dd:7f:f8:6c:9b:4b:48:19:18:
f9:96:d9:2c:37:ea:52:50:ae:0f:a4:34:f2:74:e8:
a7:94:d6:81:71:e5:83:fd:16:57:05:a4:d8:e1:de:
1a:38:34:80:2a:c6:d1:8f:fa:7f:34:b8:c5:38:89:
16:8e:bc:31:57:f7:59:80:83:9c:aa:70:4a:fe:4a:
d4:c5:00:42:1b:0b:1c:90:d1:b4:38:de:fa:aa:e2:
34:1f:fd:b0:92:c3:1f:94:9c:e4:2e:16:91:d2:29:
75:2a:23:52:0b:bb:1c:34:10:2f:9c:d8:1c:f4:56:
d2:37:5a:8a:5a:b0:60:0c:d1:32:ec:bb:82:50:d3:
cd:b2:d1:b6:6a:ef:a7:10:cd:be:42:43:26:36:cc:
6c:af:62:d4:22:46:67:d2:11:be:28:13:f6:48:39:
5e:9d:bd:b6:dd:cc:94:c6:9d:09:bf:a0:07:4c:d1:
72:25:ec:0c:18:97:7b:07:35:dd:ca:46:d7:6f:0f:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:35:F2:87:F6:C6:8D:C8:D6:F8:AF:ED:35:16:26:DE:C3:55:A8
X509v3 Authority Key Identifier:
keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/16A5E0449F2D11EC897FD30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.212.0/22
103.29.152.0/22
IPv6:
2401:af00::/32
Signature Algorithm: sha256WithRSAEncryption
98:d8:26:71:8b:65:49:6e:2f:bf:d9:f8:62:df:31:09:a5:e6:
ab:56:72:a0:cc:4e:92:c8:62:c6:5d:1e:5a:ab:df:06:e9:19:
b3:06:ac:05:a4:c0:5a:b5:24:89:70:15:95:9c:50:5b:78:6a:
01:d9:b8:79:7f:3e:6e:10:62:fb:8a:eb:0e:f7:76:21:11:6d:
c0:93:30:07:d5:4d:bd:99:39:89:fc:9d:98:8c:c4:0b:a6:26:
20:ce:7a:7a:ec:00:fe:48:5e:52:6a:cd:1c:58:9e:f6:0f:9a:
bb:52:c8:67:df:f6:9d:b2:a8:86:77:6a:72:fa:e0:cd:37:e7:
6f:2c:b4:93:03:0f:4b:81:ad:78:62:c7:05:a7:dc:65:33:f9:
8d:02:f9:61:a0:2c:b4:64:26:13:cc:ba:f9:eb:6d:72:73:46:
0c:9c:7c:e7:2e:93:9c:85:0b:41:ff:98:58:fb:eb:83:7d:38:
6b:6f:94:af:83:61:99:fa:31:25:3f:05:ab:c8:23:02:e9:d8:
14:f7:1b:8e:c5:6c:e8:9a:db:f7:bd:18:4c:f7:19:f1:f5:b7:
5d:96:8b:dc:f9:b5:dc:a9:f4:d0:80:e0:48:5e:2f:b0:9d:13:
c6:56:cf:ee:91:50:e7:48:6b:86:29:b7:3e:0c:12:d4:d5:bb:
03:70:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org