Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/FD61C2FC353C11EB9C83F21BC4F9AE02.roa
File: FD61C2FC353C11EB9C83F21BC4F9AE02.roa (raw, json)
Hash identifier: 3Pnc1oZsa5G+fjgtkaUR58vDp7KnUkwEDhUpjQk/Fxk=
Subject key identifier: 4A:AD:27:32:1A:30:1D:04:BE:85:0F:66:38:82:9A:3A:36:2A:10:94
Certificate issuer: /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial: 0396
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/FD61C2FC353C11EB9C83F21BC4F9AE02.roa
Signing time: Fri 04 Mar 2022 12:49:53 +0000
ROA not before: Fri 04 Mar 2022 12:49:53 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 9535
IP address blocks: 43.230.189.0/24 maxlen: 24
43.230.190.0/24 maxlen: 24
103.50.8.0/24 maxlen: 24
103.50.9.0/24 maxlen: 24
103.50.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Validity
Not Before: Mar 4 12:49:53 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62220af1-e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:3e:b6:96:8e:d8:c0:ee:11:bd:b2:95:af:
c2:62:c2:ae:ff:d9:81:58:f8:0d:48:8d:fa:7c:3b:
00:a0:f1:7f:45:e7:2e:d4:b1:f8:95:f0:75:3a:60:
44:36:2c:5b:95:71:d1:20:c2:1b:a0:b7:d3:3f:47:
d0:f2:6b:c4:c7:f8:f9:46:77:26:2e:bc:32:b2:ff:
76:6b:74:84:e5:c0:cf:7a:e3:e5:bb:aa:b7:c3:56:
3c:28:ff:09:fa:ee:7d:94:91:56:2d:f8:15:e6:e9:
bb:15:e9:32:a9:9e:4e:ac:a9:93:a5:38:f4:40:c8:
a2:b4:22:5e:1c:1d:dd:05:60:ce:51:64:9c:43:ab:
73:8f:52:ff:1e:49:32:d9:cd:05:c5:5e:07:c0:3a:
29:8e:85:4a:82:ad:60:43:aa:41:89:a4:28:d7:d5:
54:b0:7f:98:26:b0:75:fa:ed:da:fe:01:2c:b3:dd:
18:b7:3e:d8:05:0b:c7:69:7b:34:b2:98:ab:49:4e:
56:6d:97:84:4f:9f:f3:ed:45:4d:8a:f6:a7:c4:36:
81:16:6d:e3:0b:fe:5b:0b:3e:e0:67:88:cb:86:c0:
eb:8a:c5:f3:84:0e:cf:68:d7:bf:c1:2f:de:58:87:
56:eb:eb:ac:33:ae:dc:57:0e:c6:ab:c1:20:0a:1b:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:27:32:1A:30:1D:04:BE:85:0F:66:38:82:9A:3A:36:2A:10:94
X509v3 Authority Key Identifier:
keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/FD61C2FC353C11EB9C83F21BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.189.0-43.230.190.255
103.50.8.0-103.50.10.255
Signature Algorithm: sha256WithRSAEncryption
6c:2e:3b:fa:d7:31:0f:78:ee:bd:f4:a5:7d:e9:e9:cf:2d:fb:
74:53:7f:af:ff:1f:14:49:9e:a2:a2:52:4f:9b:24:cf:ef:a4:
1d:ac:67:23:2e:ba:ac:18:76:ad:2d:34:4b:f3:b0:13:29:95:
cb:db:16:6a:99:59:18:10:3b:5f:76:4e:5c:10:ee:d5:c3:12:
2d:aa:21:bb:0b:65:db:c5:5f:b5:aa:05:df:2e:14:6e:2f:6a:
95:7d:ed:8f:69:16:8a:8d:2d:b0:7c:39:be:91:3f:57:6d:00:
2b:0c:51:d7:b8:2c:60:cc:52:05:41:88:40:19:83:56:1e:7d:
f4:07:46:ee:68:a9:39:75:97:5b:b7:26:fb:c5:96:12:39:6d:
0b:22:74:f4:fb:2e:91:2e:75:09:22:a6:4e:c8:95:cc:8f:10:
48:3c:57:7d:a2:29:18:d8:c2:ae:9f:65:68:0c:61:42:e3:7a:
ee:ae:6e:c2:a8:35:cf:6e:a6:90:f2:05:e2:35:59:1a:3c:11:
14:37:6f:99:b2:36:e1:b4:fb:9e:d5:f2:61:28:15:a6:d2:26:
28:6f:95:f6:0f:e9:cb:ee:aa:12:21:29:2e:8f:e0:9d:bc:69:
25:41:19:b0:89:45:ca:3f:e0:2f:5d:4d:83:1f:9d:5f:fb:a2:
80:1c:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org