Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/24DEC644B58A11ECAF32FE29C4F9AE02.roa
File: 24DEC644B58A11ECAF32FE29C4F9AE02.roa (raw, json)
Hash identifier: 2s5Yza+BXEoOG6TGJwJNg+RX7A0vbZNIk9e0XoP7xAo=
Subject key identifier: DD:BD:39:D5:09:47:46:6B:96:42:3D:42:36:57:4F:B9:E3:7B:6F:E6
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 02
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/24DEC644B58A11ECAF32FE29C4F9AE02.roa
Signing time: Wed 06 Apr 2022 09:15:47 +0000
ROA not before: Wed 06 Apr 2022 09:15:47 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 58945
IP address blocks: 103.26.112.0/22 maxlen: 22
103.26.112.0/24 maxlen: 24
103.26.113.0/24 maxlen: 24
103.26.114.0/24 maxlen: 24
103.26.115.0/24 maxlen: 24
106.0.52.0/22 maxlen: 22
106.0.52.0/24 maxlen: 24
106.0.53.0/24 maxlen: 24
106.0.54.0/24 maxlen: 24
106.0.55.0/24 maxlen: 24
2401:4440::/32 maxlen: 32
2401:4440::/36 maxlen: 36
2401:4440:1000::/36 maxlen: 36
2401:4440:2000::/36 maxlen: 36
2401:4440:3000::/36 maxlen: 36
2401:4440:4000::/36 maxlen: 36
2401:4440:5000::/36 maxlen: 36
2401:4440:6000::/36 maxlen: 36
2401:4440:7000::/36 maxlen: 36
2401:4440:8000::/36 maxlen: 36
2401:4440:9000::/36 maxlen: 36
2401:4440:a000::/36 maxlen: 36
2401:4440:b000::/36 maxlen: 36
2401:4440:c000::/36 maxlen: 36
2401:4440:d000::/36 maxlen: 36
2401:4440:e000::/36 maxlen: 36
2401:4440:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Apr 6 09:15:47 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=624d5a43-5848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:6d:10:4a:ec:2b:8a:fd:cb:6d:dd:44:e8:
a6:34:c9:7a:e3:ab:35:23:42:be:69:6f:5a:48:49:
2c:50:27:15:62:9b:c2:a0:69:6e:a4:c4:73:51:4d:
20:2c:f8:a8:30:77:31:c0:18:e7:5f:2d:fe:e6:b2:
27:17:50:4b:5f:db:53:a4:2f:64:28:31:d0:25:2f:
4d:e0:79:5e:86:61:df:3f:6e:54:b8:f5:f3:eb:ea:
5b:18:f1:03:35:a3:05:42:aa:dc:58:60:f3:52:ae:
eb:ed:27:ce:f9:05:0b:1c:fb:e9:c4:6d:8d:c0:82:
95:21:08:50:24:39:f7:07:cd:7a:50:44:3e:20:4f:
a6:31:83:4c:68:01:cb:94:8e:20:a5:91:67:a9:62:
55:49:75:17:cf:f8:fd:1d:98:7e:17:b3:f5:12:f2:
b5:5e:40:6b:26:51:2d:72:25:99:cf:dc:02:c4:df:
b9:56:30:13:ac:1d:61:0c:7d:ee:d4:6d:0a:c0:25:
b1:40:c1:e8:0d:9e:d8:2f:ce:38:01:0c:dc:26:47:
08:2f:c1:b2:af:ef:13:17:c5:5f:36:00:de:c3:e8:
82:03:c1:41:ac:d3:63:6e:16:c9:7a:bb:1b:79:a4:
98:e4:fd:5e:77:fe:81:6b:1d:25:5c:2d:66:a7:2f:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BD:39:D5:09:47:46:6B:96:42:3D:42:36:57:4F:B9:E3:7B:6F:E6
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/24DEC644B58A11ECAF32FE29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.112.0/22
106.0.52.0/22
IPv6:
2401:4440::/32
Signature Algorithm: sha256WithRSAEncryption
08:10:3e:58:a3:64:0f:ba:89:2b:ac:fd:8f:f4:77:f9:65:cb:
f3:e8:e3:0a:6d:85:3e:c1:05:f8:db:29:c5:52:30:f3:9b:96:
66:7e:f3:5f:02:d2:a8:8d:78:b7:8f:e0:0a:3a:7d:05:35:14:
7b:38:89:30:22:6d:d9:c3:f3:32:89:53:09:3c:e0:26:91:5d:
41:af:ac:6e:cb:29:f2:a7:dd:03:0c:6c:aa:f7:ff:2c:35:f8:
15:ab:a4:ec:83:c9:4e:ad:6a:e1:c4:f6:7c:95:72:6a:2d:ac:
6b:1b:17:17:b1:af:a7:06:9d:e6:72:df:4c:e0:ce:ca:ae:1e:
d3:d3:c5:6f:c4:1e:74:b6:0b:2d:9e:aa:30:a4:40:ad:9b:3b:
0f:13:87:10:98:ab:32:ce:92:b5:bb:87:1b:9f:3d:fc:60:d3:
ac:fa:eb:c0:14:3f:62:8d:c7:cd:c5:7a:fe:f9:17:7f:4c:96:
77:c1:2d:c2:45:02:3c:6e:c0:b6:76:33:b9:56:2e:17:a9:00:
0e:b8:e5:33:55:c7:d5:08:8e:21:24:16:93:25:87:52:9d:49:
13:2b:a8:63:a0:ca:60:de:1f:01:1e:9d:55:39:20:b0:77:f4:
95:4e:f8:49:ef:b9:3b:be:04:3a:a3:66:e9:92:b0:ba:2c:ce:
2b:3f:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org