Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/AF20D3E6A66411EB891C280FC4F9AE02.roa
File: AF20D3E6A66411EB891C280FC4F9AE02.roa (raw, json)
Hash identifier: d1qhPrbRhp5psAHfkH2qsNX94Y3PTUt7ML6kv9MmYfE=
Subject key identifier: 58:D6:D4:DF:CB:07:B5:78:7D:C5:F0:4A:44:92:50:A8:35:3B:A8:A5
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 077B
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/AF20D3E6A66411EB891C280FC4F9AE02.roa
Signing time: Thu 23 Dec 2021 08:56:32 +0000
ROA not before: Thu 23 Dec 2021 08:56:32 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 198949
IP address blocks: 61.16.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Dec 23 08:56:32 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61c439c0-c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:05:62:85:a8:5c:e5:8d:4a:4b:86:e8:af:
b1:5a:67:b4:f4:fb:10:35:53:a2:c5:67:50:4c:bc:
48:f7:35:f9:46:2f:81:ed:bd:9e:33:b4:77:86:28:
bb:6b:9c:ea:6d:2d:75:22:32:8c:9c:3e:50:93:29:
85:7a:6e:34:1e:db:07:1e:a5:2c:25:d8:3c:41:8c:
2a:db:2d:38:63:24:4a:fe:4a:19:be:b3:e0:2e:02:
5b:55:d0:4b:f5:2a:e8:11:ec:72:9c:12:d2:a3:ab:
72:95:04:a5:b3:2a:d8:2b:b0:64:05:53:3f:6b:3c:
cb:5f:e5:87:1c:46:17:c8:7c:e0:ac:4b:aa:b0:30:
fc:2d:8f:c5:44:0c:be:7a:25:34:e8:29:0f:cb:bf:
41:36:c7:e3:09:27:18:32:b0:6f:07:dc:71:72:e8:
cb:00:66:62:31:90:fa:ea:da:d1:67:5c:07:35:4b:
82:cc:57:76:c5:e8:66:94:43:07:2a:1c:a0:7c:8a:
17:d3:56:c5:c9:b7:2b:67:90:c8:9e:a0:04:a2:d6:
96:69:62:fe:9e:94:4f:9f:7c:14:ba:14:d8:13:f4:
a6:4f:df:66:e2:77:f0:de:71:93:cc:5b:92:8a:39:
64:b9:04:bc:be:45:8e:ba:7e:60:ac:4b:d5:8c:a3:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:D4:DF:CB:07:B5:78:7D:C5:F0:4A:44:92:50:A8:35:3B:A8:A5
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/AF20D3E6A66411EB891C280FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.16.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:86:a9:29:a7:01:99:43:fe:9f:38:7b:36:16:e4:a3:a8:1e:
fa:00:3f:22:b9:a7:9f:49:6a:a6:10:8e:62:07:a5:f5:80:95:
2f:c1:37:67:b6:49:e8:d6:fe:61:98:8a:d4:17:42:4d:e6:92:
d8:5f:e3:e6:24:1a:00:f7:5d:e8:6f:85:de:da:b4:41:a3:67:
8c:f8:7d:ad:f3:37:9b:74:9e:6c:ea:cb:b1:f2:9a:e3:c9:d7:
d4:3b:26:80:ac:5d:bc:2b:c1:cb:a4:5e:89:22:ff:38:70:36:
76:d8:26:21:5f:d1:72:0f:ad:93:cb:4b:1e:bd:7f:a6:24:d5:
05:27:71:31:6a:81:72:5e:ef:e6:d3:0e:88:2e:dc:0c:02:84:
59:63:e2:20:6c:f6:72:a5:75:cc:85:af:0b:72:64:7e:70:f0:
c7:b3:55:02:b5:ff:f5:ab:67:f1:18:82:e9:42:c3:ee:f6:39:
8c:83:16:5a:d2:27:e7:c7:7b:ed:a3:48:8d:39:69:4b:35:2a:
1d:4c:a1:33:2c:f6:03:d0:ef:20:ef:38:94:d9:19:81:22:1b:
d3:53:92:72:10:26:fd:b9:ba:f3:87:bb:47:23:be:cf:fe:0f:
47:d1:80:40:96:eb:4f:d1:01:89:c6:be:5e:a8:4e:82:05:02:
60:3a:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org