Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/59E932183E7B11EEB00F9121C4F9AE02.roa
File: 59E932183E7B11EEB00F9121C4F9AE02.roa (raw, json)
Hash identifier: wFORYdprod5KR/jkAia4Cxu36vQpkY9l4jrYISCbBXY=
Subject key identifier: 66:AB:22:18:49:51:D6:AF:32:A3:92:D6:20:3F:80:CB:CE:49:FA:96
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0B
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/59E932183E7B11EEB00F9121C4F9AE02.roa
Signing time: Sat 19 Aug 2023 18:39:07 +0000
ROA not before: Sat 19 Aug 2023 18:39:07 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132781
IP address blocks: 45.115.119.0/24 maxlen: 24
103.57.17.0/24 maxlen: 24
103.57.18.0/24 maxlen: 24
103.57.19.0/24 maxlen: 24
202.6.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Aug 19 18:39:07 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64e10c4a-d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:69:07:37:f8:4b:10:9e:97:2f:41:80:c5:
65:62:87:9d:f0:be:24:0a:b0:73:19:4b:d9:41:35:
a7:5c:16:7c:1d:f8:a4:32:78:19:c8:29:6a:6a:5c:
94:03:bb:43:37:34:e3:6b:db:53:71:83:c7:b4:a9:
15:1b:f2:01:d7:6b:fc:13:50:39:e4:9b:14:47:d0:
7d:8d:f6:4b:e7:e2:72:6f:f2:b3:75:2e:8a:b4:25:
36:09:3f:df:93:5f:88:45:8f:9d:06:c9:03:76:a9:
2f:d4:79:ea:2a:ec:99:22:f4:b2:e4:38:8b:05:06:
ff:4c:e5:63:99:18:1d:a3:6b:cf:76:dc:14:94:77:
7a:45:95:96:4a:a3:35:8a:3a:eb:1b:f0:14:9b:7b:
1b:05:e8:f9:9c:bf:31:9d:a7:67:73:ab:e1:a5:ca:
3d:47:82:4e:fe:87:66:b8:23:ff:00:9f:36:8d:be:
9d:52:c7:02:67:3e:f0:cd:28:90:5f:0b:bd:d0:83:
d8:81:62:98:2e:19:15:f7:4b:6d:12:13:c2:04:f3:
a0:9e:fd:7b:a6:bc:3d:fd:13:29:d3:0c:3f:d1:e3:
f4:84:be:31:2e:ce:93:3b:e3:b1:a5:cc:a8:07:d6:
4a:53:71:49:c5:59:52:d6:9a:66:56:ba:61:9f:ff:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:22:18:49:51:D6:AF:32:A3:92:D6:20:3F:80:CB:CE:49:FA:96
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/59E932183E7B11EEB00F9121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.119.0/24
103.57.17.0-103.57.19.255
202.6.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4d:7f:77:96:5c:63:a3:19:b2:8c:bf:c7:0f:5e:e6:d5:60:
b1:49:aa:cc:48:c3:b2:16:b5:bf:80:ce:da:5f:e1:c3:de:8f:
d6:21:09:e1:75:7e:a3:50:2c:07:56:d7:84:10:fb:c0:a0:05:
cb:af:20:22:56:45:1f:50:8e:70:06:d2:c6:46:78:84:85:c0:
4d:58:ee:0b:12:66:9b:aa:11:c0:de:eb:b5:ed:8f:4c:4e:f5:
4d:89:6f:1b:95:6d:2b:dd:e9:f7:32:11:02:25:9c:65:75:5d:
ad:e3:88:d6:03:28:05:2d:59:10:bc:8d:25:db:6f:89:38:1a:
1e:18:96:0f:0a:b6:5f:f3:dd:ad:9e:c9:71:55:70:e9:6f:c7:
65:d8:78:3a:46:b3:90:f8:e4:6f:1d:dc:dd:27:53:22:0d:d8:
e7:20:48:34:56:4b:e6:43:f1:eb:d3:cf:e9:69:42:28:70:4e:
05:7f:5d:45:3d:1c:14:85:49:6a:c9:ac:97:cc:3c:f2:20:c8:
a0:c4:83:8d:5e:f0:03:c1:1f:8b:ea:4b:5d:e4:97:d4:8e:6c:
89:32:48:5c:53:cf:15:53:de:7c:c3:b5:19:50:b5:c1:42:b8:
d2:41:a0:a9:7e:85:7a:a7:6d:ba:dc:f4:83:80:74:3f:22:2f:
31:32:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org