Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/48B5A30AAD6011EF92877751C4F9AE02.roa
File: 48B5A30AAD6011EF92877751C4F9AE02.roa (raw, json)
Hash identifier: 2iBifbNJYnS66e44M7/PXnl8pk1nRUj8CGXvGupRjlo=
Subject key identifier: 78:49:32:30:20:B7:55:6B:6F:B6:0E:D8:17:22:5E:B9:D4:9C:D8:7C
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 0139
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/48B5A30AAD6011EF92877751C4F9AE02.roa
Signing time: Thu 28 Nov 2024 08:10:52 +0000
ROA not before: Thu 28 Nov 2024 08:10:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 136173
IP address blocks: 43.224.148.0/24 maxlen: 24
43.224.149.0/24 maxlen: 24
43.224.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Nov 28 08:10:52 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6748258c-30da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:34:1c:9c:74:7f:14:52:8b:d0:2b:bb:82:
7e:15:53:e0:2c:5f:44:10:cb:5c:6b:ce:b9:38:23:
a8:87:1d:54:02:5c:c5:16:44:55:0a:4b:c5:61:10:
73:d7:03:da:fb:e2:27:85:2f:87:e7:e7:e0:7b:10:
11:c6:96:9b:3e:64:ce:63:f7:fb:06:8f:2b:fc:f3:
97:f4:ca:98:04:b5:57:3f:8d:89:35:c2:99:23:11:
a5:c5:18:c8:db:a2:1b:a9:c8:0d:4d:11:80:a9:89:
06:51:3e:71:13:4c:f6:d7:e4:f8:bc:45:c3:12:91:
c5:a6:39:e1:03:4f:67:b5:cd:2e:77:53:2c:a0:45:
a3:d4:81:49:e1:d8:b3:29:29:64:a2:09:34:58:49:
dc:7e:9d:86:a4:fd:f0:b0:f9:a9:10:17:b5:17:93:
64:f5:16:46:2c:8b:57:d4:06:24:52:0a:11:11:3f:
e9:2f:e7:14:fe:ac:9d:27:fa:78:a4:6f:fe:40:69:
7b:91:63:1e:44:8a:51:50:a5:91:1c:22:34:e2:4e:
73:79:55:10:4c:b8:88:5c:1c:e8:ae:fc:0c:7a:4a:
c4:5f:d6:3b:24:29:3f:a5:69:c2:04:d3:f5:8a:0c:
6d:f4:c7:8f:82:14:f6:05:8c:ed:2c:79:70:88:44:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:32:30:20:B7:55:6B:6F:B6:0E:D8:17:22:5E:B9:D4:9C:D8:7C
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/48B5A30AAD6011EF92877751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.148.0/23
43.224.151.0/24
Signature Algorithm: sha256WithRSAEncryption
12:58:fc:d0:b4:63:66:d6:45:53:aa:e7:2b:b5:c8:0c:ce:7d:
bb:27:d8:c5:e0:26:49:16:5e:42:c5:2f:cb:54:6f:6e:c6:15:
3d:ee:96:f6:82:e3:d1:8a:98:e4:0e:66:5f:07:56:03:04:12:
4a:9e:5a:5f:13:fb:76:5a:a5:cf:82:7c:0e:47:d3:ba:3c:38:
02:ea:ee:cf:6a:83:7b:fb:f0:9c:9b:e8:81:e6:f2:c8:33:90:
02:c1:28:95:2d:ae:2e:8b:60:76:de:b5:29:62:c3:b1:17:14:
35:6d:09:3d:63:52:c7:97:37:fe:75:a5:17:66:48:8d:e8:b6:
2e:c4:94:9f:9d:57:7a:84:ca:cb:ce:d2:5b:b7:a3:a4:bc:8f:
8a:0a:33:73:92:ae:bd:a5:c9:20:1a:c9:19:c6:2c:72:54:4f:
f4:99:5b:19:ad:1a:1c:ec:c6:eb:d8:ea:e6:fa:2e:39:d8:fb:
22:b4:7b:55:dd:3a:df:c3:bd:6b:bd:25:e8:79:e3:b4:d9:87:
76:6d:1e:49:fa:8b:1f:8a:9a:74:fd:eb:e4:45:36:92:e1:ad:
f5:81:5e:4f:5c:e0:90:24:6a:15:89:a9:23:08:54:32:19:9c:
0a:94:5f:3d:73:99:bf:89:25:65:53:1a:02:b3:d6:8f:2d:cd:
a2:f6:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:16 2025 by rpki-client