Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CFA10EAF69B11EC947BBC5EC4F9AE02.roa
File: 0CFA10EAF69B11EC947BBC5EC4F9AE02.roa (raw, json)
Hash identifier: oNGNNoDXIqUbL1zpf3ezJsz8eUCH6dHRTRZDuMOANGY=
Subject key identifier: E0:71:EA:A9:87:AB:4D:8D:C7:CF:9F:6D:3B:27:48:B8:4D:9A:53:FE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 393B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CFA10EAF69B11EC947BBC5EC4F9AE02.roa
Signing time: Fri 26 Aug 2022 14:51:43 +0000
ROA not before: Fri 26 Aug 2022 14:51:43 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.155.216.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 24
103.176.250.0/23 maxlen: 23
103.177.34.0/23 maxlen: 23
103.178.230.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2001:df4:d880::/48 maxlen: 48
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14651 (0x393b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 26 14:51:43 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6308ddff-75ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:78:2b:53:84:71:b6:d5:e7:c3:5a:84:db:
fa:15:a0:3e:f4:32:b5:16:80:48:d4:44:3e:86:fa:
f6:ea:68:2f:0d:48:61:78:f4:62:e7:99:45:93:d6:
9b:53:7b:45:bf:5a:2c:9f:0a:48:a9:40:63:cb:05:
d0:32:8f:f0:36:28:ba:b5:8c:07:81:6f:ff:a8:5b:
a9:ef:dc:45:76:7f:43:37:d3:bf:31:59:ea:71:33:
ed:95:5c:cd:13:fc:99:b7:87:90:cd:0e:12:d3:74:
45:c4:ee:2b:2b:18:dc:8f:2a:49:6c:4b:72:7c:6c:
68:b8:17:c4:30:0e:e3:cd:73:ec:57:20:21:48:e8:
f5:40:6c:ef:60:d4:71:a3:a7:5f:97:2b:6b:33:b8:
13:69:33:39:a9:d1:a3:f3:f6:c9:63:00:a2:51:5c:
1b:a2:1e:fc:8e:a2:0c:6c:6d:38:59:df:d3:b1:91:
5b:0c:31:67:6e:e8:c9:34:62:21:2a:93:00:f8:61:
44:22:8e:eb:08:f2:f9:6b:44:1a:a2:53:51:59:27:
64:d4:42:4a:6e:ac:5d:9d:47:d1:52:ef:38:42:8d:
d8:d3:1c:44:1f:f7:00:61:30:46:64:f8:b1:0d:83:
cc:19:f5:fb:e0:08:53:42:fe:67:20:bf:f3:a5:c5:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:EA:A9:87:AB:4D:8D:C7:CF:9F:6D:3B:27:48:B8:4D:9A:53:FE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CFA10EAF69B11EC947BBC5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.155.216.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.178.230.0/23
103.179.174.0/23
103.180.138.0/23
103.187.168.0/23
103.188.82.0/23
103.188.242.0/23
IPv6:
2001:df4:d880::/48
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
09:b5:5e:d6:c4:7f:d7:53:08:f6:be:a6:83:51:bc:40:ff:6b:
51:c7:7c:e5:76:d5:11:6c:2d:5b:03:ab:55:c3:a7:e2:c1:ab:
96:c6:8f:03:d1:ca:ac:36:f9:5e:0a:50:bf:08:fe:a1:ef:69:
41:ce:4c:1e:d7:83:34:8d:22:cb:4f:c2:57:54:34:ec:be:75:
03:1d:c3:4d:f4:45:f7:73:e9:ab:43:7b:71:c6:dd:0c:aa:56:
2d:77:eb:e5:4f:0a:33:89:08:ba:36:92:d7:c9:34:43:d8:16:
e6:45:6e:4a:89:5f:8d:d4:f6:d8:20:b8:79:67:52:4c:e6:6f:
d1:2e:d3:63:57:08:f0:25:af:8d:0b:5d:17:ce:63:0e:a9:ce:
7f:f3:9a:c5:31:23:ed:4a:dc:02:01:36:08:6f:0b:db:82:6e:
b3:d7:f4:66:83:34:a4:c0:be:65:f4:aa:83:8e:e6:4f:98:83:
87:f7:6c:55:a2:df:f0:12:b4:1f:93:ed:6f:df:56:fe:27:82:
5e:c0:68:b3:b0:f2:37:d1:1b:00:8e:5e:31:23:68:2c:8f:dd:
62:6d:7c:90:58:9a:03:a5:68:1e:d4:b9:92:58:31:56:0f:0a:
7d:d1:8d:92:da:12:1e:58:82:c5:92:67:8c:df:26:f3:a0:e1:
ec:9e:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org