Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/016F1F2403B211EA9CCF0236C4F9AE02.roa
File: 016F1F2403B211EA9CCF0236C4F9AE02.roa (raw, json)
Hash identifier: ZFDjJ9zRXMsqscG4zEEfj2zB2IlXznkbep8i0A35MkQ=
Subject key identifier: F2:32:97:34:9C:CF:B2:C5:04:75:99:7D:63:4C:5D:1B:D3:A9:25:A5
Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Certificate serial: 0A8D
Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/016F1F2403B211EA9CCF0236C4F9AE02.roa
Signing time: Wed 28 Dec 2022 19:56:26 +0000
ROA not before: Wed 28 Dec 2022 19:56:26 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135881
IP address blocks: 43.230.210.0/23 maxlen: 24
103.78.224.0/22 maxlen: 24
2407:ff80::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Validity
Not Before: Dec 28 19:56:26 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63ac9f6a-9ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:a1:a2:4c:ec:68:08:67:b4:f9:e2:e2:dc:
3b:8b:f0:64:e4:f0:ba:ea:ae:2e:61:0a:5f:17:f6:
84:65:9b:5f:0c:f6:9a:b0:44:9e:2b:3e:aa:ae:ca:
be:64:03:7b:f6:37:c0:88:6e:44:9e:eb:d3:11:23:
96:c1:de:7e:b6:1e:ec:df:6d:4e:fa:0d:47:2b:71:
72:7c:4a:6a:29:5d:3b:14:db:a5:41:96:18:c5:9e:
4a:9d:50:f6:09:57:00:ff:e1:f1:8e:1a:25:68:79:
a1:04:fd:b3:3e:6b:e3:44:2b:55:20:46:44:36:41:
26:61:04:bf:4e:fd:20:2b:e4:87:b8:10:6d:ae:cc:
47:09:e1:8d:5b:11:e6:93:14:4a:87:fc:f3:dd:00:
f1:17:e7:38:cd:60:c7:16:8e:01:76:a5:0a:77:a5:
69:e9:9e:9a:aa:cc:4c:64:d5:42:cb:4d:1a:ff:f6:
19:b7:6b:61:b4:97:36:48:cf:20:a8:07:d0:d9:64:
12:b4:c6:17:6a:9d:a3:43:3f:07:18:16:b2:57:92:
c2:5f:80:2f:90:d6:29:3e:38:ae:55:4d:4b:6c:df:
00:33:81:b3:b7:97:ff:36:02:b4:08:33:62:16:81:
3f:8e:71:12:63:61:9b:36:51:e7:9c:b8:11:e8:55:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:97:34:9C:CF:B2:C5:04:75:99:7D:63:4C:5D:1B:D3:A9:25:A5
X509v3 Authority Key Identifier:
keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/016F1F2403B211EA9CCF0236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.210.0/23
103.78.224.0/22
IPv6:
2407:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
26:ad:62:cf:81:e4:d5:86:fd:3f:f1:09:03:73:b6:70:c5:33:
20:3e:de:07:d9:21:b4:11:4d:c5:69:cf:88:42:ec:37:5d:d0:
95:4d:91:24:ad:b3:0b:00:77:20:af:c2:0e:87:4c:ce:c0:90:
08:52:2f:93:b9:82:0d:42:29:63:6b:0c:3d:3e:78:ab:c5:3f:
37:23:07:5b:71:ba:9c:6a:c8:eb:19:c2:ef:89:f2:81:17:45:
89:42:1d:e1:fc:7c:bb:d6:72:6d:e2:04:df:7d:a4:ef:48:c2:
4f:6c:79:3f:79:c6:73:ae:dd:23:37:93:44:f2:66:eb:d7:cb:
30:f4:92:75:4e:2e:da:db:6b:5d:54:16:e7:3d:86:f8:6e:73:
e7:ba:2d:93:7d:9b:b9:68:3c:78:36:9d:cb:8b:c8:41:e8:d0:
e6:22:94:6c:f2:d9:90:e3:82:22:c7:26:cc:0b:c3:6f:4d:4c:
ff:66:15:5b:6e:73:3d:f0:c3:72:4a:40:27:77:e8:fc:aa:17:
12:e2:1c:a7:6c:bf:8d:20:21:d0:a6:0b:e8:1c:89:b4:98:e6:
84:93:ee:87:39:5d:9c:d5:9a:21:4b:35:fd:d6:2b:64:fe:6a:
65:9a:6a:f5:71:7e:03:ab:47:6a:af:7e:13:b5:9c:4e:7a:d7:
3b:94:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org