Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0E50260A50111EC9746F864C4F9AE02.roa
File: F0E50260A50111EC9746F864C4F9AE02.roa (raw, json)
Hash identifier: wE1PS+IeJMeV5e1THOUTpCcSwS7tlv2C/SG8HCvBC4A=
Subject key identifier: FA:3F:27:0F:79:23:FE:90:44:84:75:F1:46:DE:72:47:B1:CA:2A:01
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 38A8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0E50260A50111EC9746F864C4F9AE02.roa
Signing time: Thu 11 Aug 2022 09:00:35 +0000
ROA not before: Thu 11 Aug 2022 09:00:35 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 131423
IP address blocks: 45.118.144.0/22 maxlen: 24
45.119.212.0/22 maxlen: 24
103.48.84.0/22 maxlen: 24
103.48.192.0/22 maxlen: 24
103.237.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14504 (0x38a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 11 09:00:35 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62f4c533-b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:af:ac:b6:91:dc:fa:9f:dc:0e:4e:50:6b:
33:60:93:67:23:00:e4:f4:99:c0:42:e5:75:59:2d:
61:51:fb:03:4c:4d:94:29:6f:8a:10:d4:08:45:a1:
83:e8:ec:58:0a:63:b7:1b:0e:d0:99:8e:28:78:5e:
3c:7d:b1:af:5a:31:57:00:9d:a5:c1:bf:60:d0:dd:
92:e4:c4:20:81:6a:2f:3b:75:5c:a8:f9:a8:c0:a8:
06:40:9f:4c:48:3e:fc:7c:91:1d:65:84:a7:15:65:
7c:06:ae:63:8c:19:d0:77:b1:72:fb:69:e2:52:d1:
96:30:0c:08:84:26:d9:53:af:5c:29:3d:3c:c0:bf:
be:bb:81:db:cc:54:e7:e5:9b:b8:c1:0a:82:ef:41:
c7:31:9b:2a:a5:1f:9e:66:d4:a9:03:a0:e4:2e:16:
02:eb:b5:4a:d2:ac:58:95:89:36:0e:a2:5d:8c:12:
91:1b:c8:e2:e2:bb:41:b1:9e:1f:19:b0:aa:97:ce:
9d:27:01:23:93:c5:ed:73:ea:6f:ce:70:d2:76:29:
bd:a9:5f:2d:45:fa:5c:85:8a:c0:fe:9e:3d:b7:2d:
8c:11:e8:b5:a1:e1:08:78:d6:4a:b2:0a:f4:29:ec:
2c:52:95:04:13:59:98:9d:92:25:a3:83:6f:4a:b5:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:27:0F:79:23:FE:90:44:84:75:F1:46:DE:72:47:B1:CA:2A:01
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0E50260A50111EC9746F864C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.144.0/22
45.119.212.0/22
103.48.84.0/22
103.48.192.0/22
103.237.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:98:e1:00:54:19:44:4f:bd:f6:8b:58:53:98:4d:74:53:f7:
64:da:f4:59:42:03:23:80:a9:bb:2d:3a:0d:10:2f:f9:1d:70:
17:f8:6e:f8:cf:91:8b:47:b8:1a:d8:d1:96:ba:60:67:99:40:
f4:9b:4a:b8:8f:84:fd:7f:f9:d2:e6:50:52:24:83:43:a4:c5:
e2:e8:da:c1:0b:c1:ba:f1:cf:9f:22:60:fb:eb:40:17:ee:8a:
9e:b6:b4:a6:15:56:1e:03:13:c4:27:a5:13:99:ee:9d:b2:e4:
21:20:88:9a:da:eb:77:cd:62:53:94:8a:ee:5e:d8:d6:f6:9f:
e1:7f:04:f6:a2:7f:44:f7:ae:e0:2b:61:c5:2a:8f:2b:2b:5f:
ac:07:14:05:bf:d5:5d:af:ec:96:e0:ff:9b:0c:8c:e5:ae:47:
2e:68:ce:f7:7e:2c:b8:77:be:e4:f0:37:f0:13:f4:6b:9f:fb:
1c:29:06:a5:e2:4f:89:ac:f3:a1:42:65:c8:1d:b0:ae:00:6e:
41:95:eb:b8:ef:2f:77:ac:de:f8:f6:da:55:a7:aa:e3:97:78:
c8:17:93:33:b0:31:a2:5b:0e:89:e0:dd:89:21:8d:a2:10:9a:
bb:14:8d:45:bd:9f:d0:93:11:fb:90:b8:03:52:cd:7e:86:80:
20:8a:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org