Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
File: A278209A459511E9A18A751DC4F9AE02.roa (raw, json)
Hash identifier: WZzGpRAd4XoMfH/jwUZ8nw8wW72moYT8CmB8ONx8UBI=
Subject key identifier: 2F:E6:89:55:99:08:02:30:2A:32:28:AE:23:1A:F7:41:B2:29:B9:5C
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 24B3
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
Signing time: Tue 02 Aug 2022 04:22:44 +0000
ROA not before: Tue 02 Aug 2022 04:22:44 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 138558
IP address blocks: 2402:9e80:46::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9395 (0x24b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 2 04:22:44 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e8a694-017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:4c:0e:7d:e4:47:3a:f1:d7:78:52:1d:35:
45:9e:13:71:1b:aa:fd:f1:38:f9:b4:81:12:b2:e0:
73:b2:d4:a2:b8:c4:6f:d0:0d:c4:df:bb:bf:7d:db:
88:43:77:43:64:0d:b9:f8:47:03:11:59:ae:87:d1:
bd:49:09:23:f3:b0:8a:e5:46:d5:a5:96:33:ed:9f:
f5:89:de:d1:4c:14:f5:ed:bb:f7:49:e1:2f:aa:6a:
ee:53:ea:58:44:f0:1f:13:0a:4f:73:35:19:1a:29:
c1:2d:41:8b:ca:4b:f2:b8:56:59:1f:2b:36:8b:4e:
cc:0c:aa:f6:6c:cc:61:02:7e:5e:f5:19:d5:b7:ba:
e0:5d:b5:b0:32:fa:9c:0f:0f:88:f8:62:1a:62:b2:
10:7a:9f:89:7c:d4:7e:53:0e:b3:1e:eb:ff:e1:c9:
2e:51:c1:cd:f9:31:3b:b1:da:f2:ea:33:78:55:fe:
a7:63:a7:ca:a0:fb:3c:85:b6:ed:33:dd:6a:f5:33:
88:75:ea:0e:1e:44:de:11:dc:08:c1:20:5c:1b:93:
db:c0:5e:a3:3c:02:11:a6:dc:f0:45:e5:e0:41:8f:
0a:70:d1:a8:46:5d:90:ce:5f:05:74:60:18:d9:77:
5a:e1:0a:65:e8:e1:a6:b0:2d:0c:fe:60:ae:f2:76:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:89:55:99:08:02:30:2A:32:28:AE:23:1A:F7:41:B2:29:B9:5C
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:46::/47
Signature Algorithm: sha256WithRSAEncryption
76:53:90:ac:7f:94:7f:7f:e2:57:ec:0d:2f:51:29:9a:04:f4:
52:bb:a6:21:3d:46:f9:35:82:4b:07:1d:71:b2:d5:4c:38:12:
1f:1a:38:90:21:77:bf:18:10:30:4f:02:6c:1d:39:a4:48:14:
50:2c:ca:f5:1b:3b:c2:b8:3d:a5:a5:53:d6:de:92:bc:37:04:
63:36:77:80:f0:30:78:27:56:15:98:70:9c:fc:98:71:7c:20:
20:15:2d:6c:e4:eb:39:73:bc:51:bd:35:36:3f:a4:2b:56:9e:
d6:78:5f:95:dc:0a:e8:75:ce:6b:8d:ed:4e:0d:ff:52:23:ed:
1b:49:7e:ae:15:70:82:55:65:81:ad:1c:8f:9d:32:e3:ab:57:
5e:c9:44:37:90:99:d0:f4:0c:d0:12:b6:95:bd:6a:06:b5:df:
c0:a1:63:a2:fc:a2:6c:5c:da:f3:55:fc:f4:82:4b:d2:d9:f1:
20:80:59:3f:56:d4:24:5b:f8:3c:82:9d:df:e1:8d:2b:9a:5a:
03:b4:ef:51:00:1b:03:4a:3a:bc:d4:86:97:4e:52:b9:b4:ca:
c5:69:c5:64:30:43:c8:fc:36:aa:ae:e3:d5:8b:3b:92:f8:57:
b6:6f:cd:42:dd:46:77:01:6e:1e:43:55:b2:f4:a8:6e:7b:bc:
7c:47:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org