Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/85CDA596822711ED94C3212CC4F9AE02.roa
File: 85CDA596822711ED94C3212CC4F9AE02.roa (raw, json)
Hash identifier: cF0qzHMNndSvtW6mnGlDNNnlgzVA1djb12FUY0VxKNU=
Subject key identifier: 89:38:B2:F6:95:1A:A9:A2:0B:D0:4C:AA:CA:EA:EB:11:8B:CD:E8:01
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0BA1
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/85CDA596822711ED94C3212CC4F9AE02.roa
Signing time: Thu 22 Dec 2022 18:36:18 +0000
ROA not before: Thu 22 Dec 2022 18:36:18 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 43.243.170.0/24 maxlen: 24
43.243.171.0/24 maxlen: 24
103.38.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2977 (0xba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Dec 22 18:36:18 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63a4a3a2-b6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:35:db:6e:fb:49:00:8e:10:37:4f:91:8d:
84:c9:f7:9d:76:2e:48:bc:69:57:aa:a7:57:96:7d:
11:c0:db:ab:ac:00:a4:00:4f:cd:71:ec:92:98:08:
bb:d0:ea:99:d3:94:16:d1:0f:1e:74:6c:0f:55:89:
6e:69:88:dc:e4:24:35:83:9a:a0:72:a8:40:a6:1e:
9f:7e:6b:04:d3:fc:71:2f:ec:4d:f2:9a:75:e3:2e:
da:31:ef:dd:a2:93:3a:76:31:ba:9e:00:74:e5:85:
1e:22:1f:da:14:24:34:d3:85:b8:f7:a2:d1:e0:71:
48:0e:3d:cb:d8:10:65:45:dd:95:09:62:0b:aa:a3:
43:11:a4:9e:cf:db:9c:b1:8d:30:25:ad:3d:aa:72:
25:fd:7e:c8:aa:1d:78:ba:9c:48:76:f1:72:86:f7:
b0:1b:9b:2d:e9:96:72:82:e9:0a:18:22:fe:da:80:
77:9b:75:8a:10:c7:5b:85:2e:dc:9a:bc:2e:00:06:
00:29:76:16:04:59:b6:8c:4f:f2:a8:2e:96:0c:4d:
cb:c1:29:27:34:12:5b:15:5b:47:88:c2:ce:68:24:
d9:a1:45:93:b4:90:4a:96:94:e9:9c:ee:ba:61:29:
ff:31:4d:3a:c4:7b:42:6f:3b:23:c4:ae:dc:a5:93:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:B2:F6:95:1A:A9:A2:0B:D0:4C:AA:CA:EA:EB:11:8B:CD:E8:01
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/85CDA596822711ED94C3212CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.170.0/23
103.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:30:72:d8:4e:ec:00:ed:91:11:75:79:93:96:de:bb:be:4e:
a3:36:ce:12:38:7b:e2:ea:b6:48:43:87:b6:eb:d6:20:d5:7a:
b5:ec:9a:0e:2e:81:ef:b9:75:99:b0:db:c1:be:f7:4f:a8:d1:
70:77:e4:b7:b1:15:2c:b0:bc:e2:f0:70:58:3c:7b:dc:6f:04:
04:60:64:6a:63:0a:50:e0:32:b6:ce:20:cc:50:03:1f:46:5f:
d8:d0:fd:70:a5:b8:51:f7:b1:b4:1d:9a:ad:27:e2:5c:0a:3b:
03:5f:b5:8e:28:cf:0d:39:87:21:8b:7f:b2:67:67:25:49:7a:
09:ee:12:dc:14:b0:65:0a:e9:42:64:82:62:7d:3b:d3:cd:68:
0e:85:ae:1e:04:3e:8f:1b:2f:d6:07:b6:0c:2f:d0:4d:05:88:
21:50:bd:b1:c9:26:63:67:bc:a8:08:09:83:54:9d:d5:b6:81:
2e:47:1e:0e:15:00:f6:a9:78:df:4a:19:1e:a4:1f:75:c7:f1:
de:a6:0e:35:6f:1b:0a:80:0f:37:1b:6f:ff:a9:67:e8:a5:63:
f3:4a:b5:3b:a8:57:76:95:c5:b8:76:20:46:9e:f7:26:65:5f:
2f:16:8a:b7:b3:e6:1c:10:bb:fb:44:a8:b7:5b:51:3b:78:8a:
c4:4b:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net