Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/BCF72B84803711ECB2187650C4F9AE02.roa
File: BCF72B84803711ECB2187650C4F9AE02.roa (raw, json)
Hash identifier: YZ6mXWTVSNAC66oIdDV+z0TKW8RidtNXUkYU7reaGdM=
Subject key identifier: 61:88:72:CD:98:52:21:25:5D:0E:EF:BB:91:06:A7:6D:BD:ED:3E:5F
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 0224
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/BCF72B84803711ECB2187650C4F9AE02.roa
Signing time: Sat 07 Jan 2023 04:23:03 +0000
ROA not before: Sat 07 Jan 2023 04:23:03 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 132372
IP address blocks: 43.228.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Jan 7 04:23:03 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63b8f3a7-a3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:66:2d:30:45:7b:07:4c:d6:9a:94:74:44:
c1:e6:e9:ff:84:77:d8:a4:7e:a7:e4:41:8a:81:b2:
75:44:8e:1f:4d:e3:4d:94:c3:58:ea:5b:f0:ae:6e:
bf:43:90:3a:0b:72:2a:e9:3a:c8:ae:dd:e6:34:d6:
5f:87:da:57:37:81:48:e6:71:d8:1c:5c:98:15:b5:
87:e6:f6:af:c7:ce:3c:ef:d6:83:70:ab:bb:65:dc:
08:6c:e5:d0:9b:f5:41:b1:80:3c:40:7b:f5:72:dc:
75:55:bd:1f:4f:61:20:9c:79:cb:4b:0d:6d:f3:84:
c2:1d:55:0a:8f:d3:07:59:59:fa:69:e5:f2:61:c6:
7f:a9:aa:3c:a6:ee:d0:b4:51:1c:27:12:d0:cc:8c:
2c:70:9b:8f:cb:6c:23:97:17:10:f6:73:a5:79:c9:
3c:43:73:55:f1:10:ae:07:d5:db:f8:51:86:99:08:
d7:e9:6b:5d:77:dd:88:a5:49:53:13:95:1b:e5:39:
53:a6:f6:1b:83:ef:13:e5:e3:1d:5a:af:17:17:1a:
b0:99:9a:6b:ec:a0:68:24:f7:50:c8:16:71:b5:bf:
6a:08:4b:6f:03:2f:92:60:64:aa:c6:ae:52:4f:67:
4d:e6:aa:5b:3d:ac:a2:3a:e9:29:e7:16:22:c6:e3:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:72:CD:98:52:21:25:5D:0E:EF:BB:91:06:A7:6D:BD:ED:3E:5F
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/BCF72B84803711ECB2187650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.158.0/24
Signature Algorithm: sha256WithRSAEncryption
54:17:d8:5f:60:97:98:09:2c:88:64:22:86:3b:87:3d:ca:d3:
bc:6b:34:04:5d:53:d5:e9:94:4a:61:cb:75:d6:fc:58:bc:51:
cc:4c:6d:1d:be:05:43:40:94:66:50:ca:95:09:2a:f6:18:6b:
0e:4a:53:ba:e0:bb:d3:b8:c8:67:21:e1:17:58:ab:1f:63:ff:
de:88:f8:6d:6f:71:87:2e:f7:83:06:ae:14:63:07:3e:82:fd:
82:2e:fd:ee:05:08:46:4b:07:a3:5d:b9:cf:3a:c1:d7:22:22:
f7:c6:24:85:b1:00:55:5b:e3:08:45:10:dd:2b:a6:55:1c:0f:
75:80:cd:44:40:94:ca:d4:42:a0:0a:00:4f:d5:73:e1:f8:0c:
ef:83:ea:53:8c:04:55:6d:f3:4d:27:2b:b9:98:c1:8b:fb:d3:
d6:ef:b5:22:22:7d:38:a7:04:da:58:c8:de:8c:85:ae:86:87:
a3:83:8e:bc:32:9f:e8:08:01:b3:ff:f9:3e:00:da:78:c6:70:
4a:b0:c1:24:ef:c0:d0:b0:03:d1:5c:6d:29:16:ba:95:e8:b5:
6f:04:21:24:8e:95:31:a0:1d:68:47:c3:64:9e:04:f7:49:d5:
d2:bb:fc:00:45:a7:3f:93:b6:bb:e7:28:b8:82:b4:53:31:39:
6e:b8:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:34 2025 by rpki-client