Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5562CDD4E9B311EDBD33DE12C4F9AE02.roa
File: 5562CDD4E9B311EDBD33DE12C4F9AE02.roa (raw, json)
Hash identifier: 30glT1fpivXm3RWxwsiNi/LY5Tzsl1JwGecDcJgMijE=
Subject key identifier: 0D:BF:74:A6:4D:85:69:A0:62:24:B0:C7:F0:D6:EE:07:C4:6A:AB:30
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 6E
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5562CDD4E9B311EDBD33DE12C4F9AE02.roa
Signing time: Wed 03 May 2023 13:06:36 +0000
ROA not before: Wed 03 May 2023 13:06:36 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 133499
IP address blocks: 43.225.80.0/22 maxlen: 22
103.84.120.0/22 maxlen: 24
103.240.164.0/22 maxlen: 24
103.241.52.0/22 maxlen: 22
103.241.52.0/24 maxlen: 24
103.241.53.0/24 maxlen: 24
103.241.54.0/24 maxlen: 24
103.241.55.0/24 maxlen: 24
150.107.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: May 3 13:06:36 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64525c5c-323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:02:fb:b3:68:ab:e2:98:c3:df:2f:06:09:
f6:3c:08:4b:a6:3f:7a:70:d6:4c:d5:5d:4d:c5:23:
b0:fa:cb:6f:58:81:6b:a8:bc:fe:af:d5:dc:9b:7b:
60:bb:06:c3:55:5d:f5:0d:f9:80:6e:ce:72:d3:64:
2b:75:25:01:90:11:15:70:f4:d2:e8:d1:ee:60:ac:
a2:c0:c7:6e:dd:4b:3c:a7:67:2d:ab:96:a5:15:b8:
0a:0e:f7:a9:ff:7d:a2:91:ba:ac:78:26:0d:81:31:
bb:69:a8:fc:7d:e1:4a:1b:1c:57:cb:17:11:72:8d:
aa:77:e0:7d:d5:c2:a4:3e:09:25:4a:54:76:cd:cd:
d0:f7:9a:1e:ad:c6:6e:ee:b3:14:31:ea:63:b6:9e:
4b:de:5f:14:da:ad:b8:4f:a0:51:80:3e:52:ee:9c:
73:87:8d:55:af:15:1e:33:8b:c8:61:eb:74:5c:99:
60:4c:5c:69:94:40:28:2e:45:f7:37:9f:c3:5b:57:
0b:19:bd:ea:b6:f9:6e:cd:fa:a5:c6:bb:73:f2:8a:
3d:41:28:62:2c:55:ba:05:e6:8d:54:25:52:fe:2d:
b6:86:f0:ee:0d:de:a5:cd:f3:52:bf:56:0f:5b:b7:
3b:85:b0:78:22:ae:4d:89:68:5a:50:58:c3:b5:29:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BF:74:A6:4D:85:69:A0:62:24:B0:C7:F0:D6:EE:07:C4:6A:AB:30
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5562CDD4E9B311EDBD33DE12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
103.84.120.0/22
103.240.164.0/22
103.241.52.0/22
150.107.226.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ab:23:c5:f6:21:0c:a4:36:5c:b9:24:16:ca:83:56:9d:a7:
e6:d5:64:3a:9f:e6:2f:2d:56:8f:00:ff:0b:1a:31:83:d9:84:
ac:99:f8:b4:fc:91:c7:d9:5c:1f:31:e9:9d:b7:43:50:3a:f8:
43:08:93:9f:89:c7:53:2c:a1:52:91:36:05:2d:a4:11:84:9b:
eb:c8:b1:fb:d8:38:16:17:a7:39:39:74:dc:42:fe:8d:e7:66:
27:d5:91:d2:80:ff:b4:94:15:e6:78:36:d9:9a:1a:43:2e:6a:
7c:1c:9d:c2:99:7e:d5:ea:47:c3:48:1b:88:46:1a:a1:df:fd:
a4:a1:b5:cf:26:bc:d9:c1:01:5a:ce:c7:30:7a:d8:52:46:66:
ad:74:2c:70:a9:02:fe:2b:b4:f2:ca:df:1d:69:c2:9a:c3:3b:
36:83:b5:76:e9:f4:74:64:0e:de:5c:f7:23:35:b4:69:f2:75:
2b:ec:f9:a9:79:f1:34:ea:7f:e5:89:b3:d5:85:58:25:87:18:
ff:39:dc:ca:5b:b1:af:71:28:98:d5:9e:0c:0f:4c:c3:84:5f:
94:8c:45:cd:41:d2:dd:09:81:87:c6:96:f7:8e:97:1b:85:37:
d1:fc:58:16:24:1b:5c:ab:e9:a0:c4:00:67:bd:9b:6c:a2:5b:
0d:3f:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org