Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/310014BEC1DD11EC9D73C67DC4F9AE02.roa
File: 310014BEC1DD11EC9D73C67DC4F9AE02.roa (raw, json)
Hash identifier: BoUFtZs+5ptWSwa5T3MQgMwAA0YnFOSc/+wIKAptcoY=
Subject key identifier: 9F:20:94:7A:A9:6A:1E:83:0E:01:E1:F4:A6:68:DC:B0:AB:82:8A:F2
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 38EB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/310014BEC1DD11EC9D73C67DC4F9AE02.roa
Signing time: Wed 24 Aug 2022 16:30:35 +0000
ROA not before: Wed 24 Aug 2022 16:30:35 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 140832
IP address blocks: 45.125.239.0/24 maxlen: 24
103.47.192.0/24 maxlen: 24
103.47.193.0/24 maxlen: 24
103.68.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14571 (0x38eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 24 16:30:35 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6306522a-2374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:16:3c:a5:62:f6:4b:5f:2e:dc:c1:1f:a8:
4d:10:17:f3:e2:34:b3:b6:12:f9:1b:a9:2d:6a:24:
f8:8e:92:28:c9:94:2d:93:f9:f2:08:45:22:68:d7:
35:39:8b:8e:9d:61:ca:8d:66:70:c0:86:8d:3a:b3:
41:66:d7:7b:43:0a:db:a7:1e:89:b5:f8:b8:8b:cc:
34:60:80:5f:f1:0f:2a:36:3c:17:5d:5e:ac:7d:7e:
83:73:54:ce:65:f1:ff:0b:34:51:66:a3:a7:46:77:
49:7f:9c:b2:b1:a5:28:49:45:c1:d9:6e:6f:cc:6f:
29:c2:f2:e4:aa:1d:23:98:05:5e:4b:02:7d:4f:58:
17:d4:67:da:62:c2:f0:e4:1a:98:19:19:46:15:d4:
8e:91:60:93:a5:88:fc:e5:e1:6c:2b:54:79:b8:db:
99:25:fe:28:eb:e8:ce:ca:43:37:08:cd:ac:f3:0b:
3a:4c:20:73:0b:e8:11:77:65:07:b7:f6:e7:10:af:
5a:0b:b2:8c:de:a7:8d:5a:c9:f1:24:15:09:fa:b3:
27:bd:d1:02:7e:73:2b:59:ef:ff:52:b0:6c:ae:ed:
4f:6c:4b:b9:24:32:39:af:04:c9:d1:f6:c2:2f:3b:
2b:20:e8:93:7f:2e:2a:dc:95:97:f9:c9:3d:08:b4:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:94:7A:A9:6A:1E:83:0E:01:E1:F4:A6:68:DC:B0:AB:82:8A:F2
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/310014BEC1DD11EC9D73C67DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.239.0/24
103.47.192.0/23
103.68.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f1:cf:8a:57:0e:b8:f1:24:50:71:a7:52:71:1e:da:dd:86:
73:0d:f0:c7:44:ac:fa:a2:bb:74:6d:bc:71:14:1d:00:f4:1d:
a8:eb:5e:4d:23:4f:d2:27:9b:93:fe:8b:28:03:31:ae:77:b8:
68:bb:75:32:ce:5d:43:fb:60:57:3e:a7:bb:c9:94:26:6d:15:
cd:d7:dc:51:81:5d:c3:3e:76:23:a3:14:c0:9b:61:90:29:f5:
ad:d6:98:42:04:bf:44:3c:a5:24:a5:92:35:e0:e5:ff:86:fb:
17:b4:36:39:fd:30:d8:9a:b5:02:3a:ed:0b:b7:5a:41:dc:b4:
5c:19:8e:10:27:63:f0:0f:d8:88:77:32:51:9c:2e:d9:19:0f:
ca:04:7f:0a:40:20:a3:7b:f7:4d:a4:6d:8c:a6:23:d4:fb:0d:
63:2e:f9:c9:28:f3:d2:32:44:69:ee:8f:33:af:4d:b7:36:06:
e3:7a:d7:0b:39:4c:76:96:04:c1:76:ce:df:cc:0b:91:2f:cc:
74:2c:d7:a6:5f:40:1a:00:34:d4:fb:2c:1f:89:b5:47:e1:88:
bb:9f:3e:17:b9:af:61:4b:63:37:f3:b4:3a:1a:36:9f:8d:27:
14:ac:55:b9:cd:56:87:14:59:a4:fe:a2:8e:95:15:19:27:6f:
32:ed:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org