Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B796B85CA72E11EDA708F167C4F9AE02.roa
File: B796B85CA72E11EDA708F167C4F9AE02.roa (raw, json)
Hash identifier: KhwVJQQpNwPsMfrDW9P9YhDcNxbm1sqAKvrrpTSkkQM=
Subject key identifier: 0F:99:68:35:B2:F1:7C:6D:5E:C9:95:C4:1C:42:64:18:F2:77:49:18
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 04FB
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B796B85CA72E11EDA708F167C4F9AE02.roa
Signing time: Tue 07 Feb 2023 22:31:27 +0000
ROA not before: Tue 07 Feb 2023 22:31:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140220
IP address blocks: 60.234.181.0/24 maxlen: 24
60.234.182.0/23 maxlen: 24
60.234.184.0/23 maxlen: 24
60.234.186.0/24 maxlen: 24
60.234.190.0/24 maxlen: 24
60.234.194.0/23 maxlen: 24
60.234.196.0/23 maxlen: 24
60.234.198.0/23 maxlen: 24
60.234.201.0/24 maxlen: 24
60.234.202.0/23 maxlen: 24
60.234.204.0/24 maxlen: 24
60.234.207.0/24 maxlen: 24
60.234.208.0/20 maxlen: 24
60.234.224.0/19 maxlen: 24
202.127.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Feb 7 22:31:27 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63e2d13d-dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:8b:00:cc:f0:22:86:3c:ee:ab:dd:34:60:
08:aa:3b:b8:ce:54:6c:66:09:fc:2e:10:83:54:41:
61:45:fe:21:da:dd:24:99:6c:41:91:02:9f:52:55:
54:ab:6c:c8:ed:8d:42:e7:c4:c6:3b:40:0a:87:16:
6a:6b:7d:9f:63:21:66:5f:13:28:4f:d0:af:9a:9f:
0b:af:4e:af:3c:d6:fa:87:79:40:d9:20:1c:05:84:
0c:18:2b:d2:a4:d3:4b:3a:d4:a3:8d:47:4e:4b:17:
dd:34:cf:c9:16:da:88:02:7d:7e:9c:b7:79:f3:e4:
c9:d6:b5:1b:0c:00:c4:73:fc:21:78:f6:6a:f4:4f:
c0:4b:03:31:fc:19:d8:57:ac:21:91:85:9b:58:cc:
d9:aa:9c:19:10:2b:70:d5:59:c9:f9:6f:9a:43:81:
a5:15:c3:6e:9b:73:f8:3c:01:8d:5d:e6:a1:f0:39:
02:ee:a4:81:d1:1b:93:37:91:56:84:8b:77:bf:24:
92:cc:cd:d8:f7:bf:3f:48:17:33:bb:13:22:a0:ec:
8c:64:41:fa:66:20:6f:62:7e:96:34:26:63:c6:8e:
1b:14:30:a1:6d:7f:22:82:18:ac:bc:96:df:8b:07:
97:2a:5d:ab:c2:ae:d7:33:9b:39:ea:05:1f:82:65:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:68:35:B2:F1:7C:6D:5E:C9:95:C4:1C:42:64:18:F2:77:49:18
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B796B85CA72E11EDA708F167C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.181.0-60.234.186.255
60.234.190.0/24
60.234.194.0-60.234.199.255
60.234.201.0-60.234.204.255
60.234.207.0-60.234.255.255
202.127.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:f7:93:6d:65:9f:5b:06:1d:64:fa:fd:b9:38:7f:fb:51:94:
53:f6:3c:87:7c:c1:be:95:7b:61:52:16:62:65:94:b6:02:78:
0d:46:54:24:68:62:3c:43:16:3e:a1:3d:35:ea:dd:ba:4a:7e:
62:f3:93:a1:90:f9:84:b1:24:af:d1:32:20:dc:e2:a7:18:99:
b7:b7:00:19:61:9d:71:62:a1:30:12:01:9d:88:5c:38:ca:e9:
2a:49:95:46:17:b3:43:09:6c:18:1b:e6:0d:e0:8c:98:45:0c:
2e:b6:04:d4:37:b2:72:1a:aa:b2:db:7d:4c:46:d5:5c:5a:a3:
30:55:fe:5d:bb:04:7c:ea:9f:33:64:e9:06:e9:f3:64:33:d9:
00:7d:a6:b6:87:c6:95:df:75:87:a7:85:9a:7a:24:13:4f:4e:
b1:60:24:ed:5b:3e:48:9e:4d:95:ee:55:8c:59:b4:70:c8:d3:
45:d2:b5:0a:20:f1:b1:2b:8c:bf:fd:64:9a:a8:38:2b:42:4a:
05:53:1b:fb:fb:89:86:99:f1:d2:e3:29:95:77:9f:ca:f8:58:
65:2e:12:3e:2f:50:6a:ff:7d:83:cf:b3:4d:ea:67:f5:36:ea:
4a:88:ce:17:9c:7d:f5:92:93:57:2a:0c:ef:03:ab:66:f6:a6:
41:b9:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:45 2023 by rpki-client on console.sobornost.net