Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/03607464B55711ECB5AAE028C4F9AE02.roa
File: 03607464B55711ECB5AAE028C4F9AE02.roa (raw, json)
Hash identifier: DBCcVklbFZJmEoxqruDSvhYGLUTopepQ9pBVKhqC+KU=
Subject key identifier: DF:76:C9:0B:35:B1:54:1A:C1:0A:2C:C2:8D:F5:03:78:C4:5E:CD:85
Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial: 06FC
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/03607464B55711ECB5AAE028C4F9AE02.roa
Signing time: Tue 25 Oct 2022 13:28:27 +0000
ROA not before: Tue 25 Oct 2022 13:28:27 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 10207
IP address blocks: 101.234.128.0/23 maxlen: 23
101.234.128.0/23 maxlen: 24
101.234.130.0/23 maxlen: 23
101.234.130.0/23 maxlen: 24
101.234.135.0/24 maxlen: 24
101.234.138.0/23 maxlen: 23
101.234.138.0/23 maxlen: 24
101.234.155.0/24 maxlen: 24
101.234.159.0/24 maxlen: 24
101.234.170.0/24 maxlen: 24
101.234.171.0/24 maxlen: 24
114.111.152.0/23 maxlen: 24
114.111.154.0/23 maxlen: 23
114.111.154.0/23 maxlen: 24
122.100.5.0/24 maxlen: 24
122.100.12.0/23 maxlen: 24
2406:5800:1000::/38 maxlen: 48
2406:5800:ff00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Validity
Not Before: Oct 25 13:28:27 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6357e47a-0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:ee:aa:43:25:04:12:a5:da:aa:4b:62:e5:
a9:5d:3c:e3:8a:2d:85:65:be:1e:08:d5:0c:35:6a:
d7:52:8c:5d:ba:b9:d3:48:db:8f:b5:e7:5e:d4:2e:
8d:2f:37:ea:72:d4:ec:53:99:6d:c7:3b:b6:53:f5:
ef:e3:fd:aa:7c:94:d9:e3:54:65:cf:ae:1b:5a:a1:
14:72:96:62:6d:37:2c:59:e6:3a:b3:49:02:90:71:
d1:8b:e1:44:e5:8a:36:33:f9:6f:36:e8:b5:b0:2f:
5d:2d:c1:27:97:94:7d:69:b4:3f:65:f9:fa:1c:0b:
42:cc:0a:1a:bb:30:88:17:a0:88:fd:ee:18:b0:40:
d9:48:90:bb:37:b0:90:40:de:be:c7:ca:63:80:21:
7c:f9:7b:59:51:8d:a5:97:0e:9e:33:ae:04:94:bf:
87:78:d7:6e:26:e7:2d:19:47:57:75:99:92:2f:c6:
58:63:cb:19:65:d1:53:1f:7d:e2:50:ce:f2:38:c7:
7e:9f:34:a1:54:18:3d:32:90:93:10:fb:92:14:69:
5f:56:46:24:a7:cc:1d:38:eb:ec:74:d9:77:99:82:
51:76:c3:65:f3:83:78:3d:bd:c7:71:12:81:21:28:
cf:7f:68:42:99:06:53:bc:4e:df:78:f3:dc:ef:06:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:C9:0B:35:B1:54:1A:C1:0A:2C:C2:8D:F5:03:78:C4:5E:CD:85
X509v3 Authority Key Identifier:
keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/03607464B55711ECB5AAE028C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.234.128.0/22
101.234.135.0/24
101.234.138.0/23
101.234.155.0/24
101.234.159.0/24
101.234.170.0/23
114.111.152.0/22
122.100.5.0/24
122.100.12.0/23
IPv6:
2406:5800:1000::/38
2406:5800:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
03:02:90:23:cc:86:ce:ea:dd:1f:3c:24:65:11:b3:c9:df:15:
b6:6b:db:01:6f:6e:da:0c:8a:79:17:c2:dd:84:be:cc:10:de:
93:b1:5d:52:4c:31:fd:3f:5a:52:f3:b9:d2:09:23:c6:b4:48:
bd:a8:75:1a:7c:65:f2:d1:80:89:b4:b1:f3:fc:91:20:22:79:
7a:d0:d5:84:96:8f:c7:08:b4:9e:6d:d7:f8:6f:ec:6f:3d:44:
64:d4:f9:12:f9:22:d6:90:ad:19:88:d6:59:47:64:62:ff:71:
9c:3e:b9:db:9f:a7:04:3d:45:d5:db:61:bb:e6:6b:1e:d7:b0:
05:61:a2:08:fe:03:62:a1:21:63:a4:9f:bc:37:c0:80:24:3f:
b3:60:1a:67:6f:59:b0:44:40:6b:93:2c:a9:78:21:41:94:7b:
fa:f3:30:51:8d:2d:fb:36:98:f8:04:8d:95:d4:ef:94:cf:8e:
c5:9c:f1:f2:ef:2d:e7:2c:eb:5f:d7:c4:74:d9:2b:5f:b7:a3:
5b:1f:95:0b:25:0e:20:b5:86:70:71:a2:b5:2f:6c:d4:7c:11:
c0:39:78:93:e6:88:2c:8a:33:80:19:a4:83:a7:33:c1:6d:ae:
85:11:3e:81:ae:39:89:86:a4:cb:c2:d4:33:6f:7e:cd:91:b8:
86:c9:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-fra.rpki-client.org