Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/A33855F087E511EC95236C3FC4F9AE02.roa
File: A33855F087E511EC95236C3FC4F9AE02.roa (raw, json)
Hash identifier: KVNEdzesaCGuRs34YxAc5yvUgYCT5+cHLVRenZNMxgs=
Subject key identifier: 29:A2:78:45:05:BD:37:FC:68:22:6C:39:44:68:2D:55:BF:7F:48:A6
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0118
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/A33855F087E511EC95236C3FC4F9AE02.roa
Signing time: Sat 09 Apr 2022 05:13:52 +0000
ROA not before: Sat 09 Apr 2022 05:13:52 +0000
ROA not after: Sat 28 May 2022 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
122.15.0.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Apr 9 05:13:52 2022 GMT
Not After : May 28 00:00:00 2022 GMT
Subject: CN=62511610-45e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:3a:e9:14:60:0d:26:d8:ad:ef:71:88:b4:
73:61:20:4c:5b:49:89:5e:01:59:66:ac:cf:13:27:
bb:d8:b5:79:59:c5:06:15:aa:9a:72:81:33:b8:0e:
3d:43:04:a6:ca:12:e6:3c:2f:2f:68:98:36:fc:05:
70:3d:5e:65:43:67:b1:a8:38:e7:25:c8:59:40:15:
3b:d8:1f:a7:e3:3e:d1:55:cf:64:23:64:19:5e:b6:
7d:8b:33:b9:ca:6a:d5:6a:28:0e:ee:e5:1c:d8:36:
76:a4:67:a4:85:1a:3e:5b:73:55:fb:03:df:7f:93:
5f:bc:6c:da:c6:de:51:7e:5d:e6:f0:eb:7b:ac:b0:
48:d7:14:41:f4:4c:74:60:d0:bd:29:5e:e6:23:1f:
4a:fe:90:07:a6:c2:90:1f:6c:f8:8a:d4:f4:40:2d:
18:af:22:9a:fd:11:01:b5:3c:10:3b:c8:97:86:00:
c2:3d:5e:2c:28:3a:72:ab:14:a7:01:11:ec:80:bd:
32:16:41:77:54:b9:5e:82:35:c1:ff:52:36:54:64:
a2:df:8f:3b:16:bf:5b:91:4a:2e:1f:95:28:e9:82:
9f:3e:ef:5e:ff:ec:e8:69:21:d1:62:a2:cc:40:c3:
9c:79:c2:a8:8f:3c:03:72:3d:2c:78:e2:43:a6:39:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:78:45:05:BD:37:FC:68:22:6C:39:44:68:2D:55:BF:7F:48:A6
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/A33855F087E511EC95236C3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0-42.104.87.255
42.104.96.0/20
118.185.200.0-118.185.215.255
122.15.0.0/21
122.15.32.0/21
122.15.48.0/21
122.15.96.0/21
122.15.128.0/21
122.15.144.0/20
122.15.176.0/21
122.15.192.0/21
122.15.224.0/21
122.15.248.0/21
Signature Algorithm: sha256WithRSAEncryption
54:7e:a7:0b:3c:d2:c9:d3:5d:7a:9a:21:1d:fe:c3:b3:3c:2c:
2f:27:0c:f9:bf:18:26:7d:9c:32:34:54:2c:23:f5:47:32:a0:
23:d6:8a:67:60:26:5b:d7:0b:0f:64:00:16:3f:c8:26:73:41:
80:21:5a:e2:a2:24:6e:cd:14:b6:e8:df:34:0c:8c:b7:17:ff:
70:f5:ca:87:95:c7:3d:80:f7:0f:7f:6e:9d:fd:21:ec:50:54:
5b:ad:eb:c4:c7:c9:24:31:57:52:bd:c7:20:cc:99:df:56:d0:
d6:f0:9f:17:24:f0:b5:78:82:71:85:a8:8a:21:d2:11:65:e3:
92:3f:63:d4:6b:04:30:1a:08:38:6c:5e:43:31:04:56:80:1a:
27:e7:7d:6c:de:7b:37:4c:36:81:f7:98:04:e5:d1:52:52:f1:
22:13:63:85:bf:c1:8b:73:58:b4:af:37:32:9e:9d:78:0f:a6:
26:3d:05:8f:c4:57:13:50:a3:7a:e9:35:88:3d:c8:30:82:82:
dc:8d:ba:2f:ca:c4:d2:46:1f:3d:fa:62:51:00:b2:60:b8:14:
b2:fb:f2:b7:bb:df:f8:e8:32:c9:e7:fc:88:fc:72:8c:d1:52:
51:e2:81:1b:a6:4c:75:66:76:a1:e4:b7:c5:bc:ee:5a:e0:45:
3b:a1:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org