Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
File: 570BBD88DDC411EA925DE580C4F9AE02.roa (raw, json)
Hash identifier: R/KfXPwIV4vsW/tfAM5lZWz0IcKWbFTOFGDVeLaO1Xs=
Subject key identifier: F5:8B:4D:5C:3C:04:0B:32:77:E5:32:E1:BE:2F:C5:D0:99:89:00:A1
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7AFB
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
Signing time: Thu 15 Sep 2022 06:14:50 +0000
ROA not before: Thu 15 Sep 2022 06:14:50 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 139760
IP address blocks: 202.9.115.16/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31483 (0x7afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Sep 15 06:14:50 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6322c2da-ef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:c9:d7:5e:b6:76:5a:06:45:a5:32:44:9e:
de:12:ef:b2:7e:dc:bb:66:90:e3:85:4a:f8:95:3a:
e5:d5:ca:13:d8:ca:f6:ad:22:a3:8d:f0:58:5c:e6:
05:45:30:4d:59:1a:0d:5e:91:f8:07:20:84:93:e0:
72:ec:8b:66:eb:a8:4e:d2:0e:b0:b9:c2:42:64:40:
e6:e0:db:21:cb:de:a3:40:fe:63:00:7c:b8:03:ea:
71:c6:ae:d3:e6:2e:22:56:b6:1a:07:90:18:5c:3f:
5f:bd:b6:ef:a1:fb:d8:05:76:48:85:d3:12:d9:33:
6a:0d:fd:ea:32:27:c4:45:29:1a:6b:4b:ce:ad:df:
7f:62:0b:c3:73:8e:83:bf:c0:fc:6a:e8:fe:27:a3:
24:23:bb:cd:ac:bb:10:36:89:c5:36:b9:7c:54:44:
28:8c:9f:7f:35:8d:6f:fd:e2:ef:72:c6:e6:1a:7c:
a0:d4:02:cd:a7:53:d4:37:22:db:7b:0f:c2:b9:db:
f1:4e:80:c1:4e:b1:71:0e:5e:96:7c:5c:07:12:10:
91:86:dc:75:63:d5:b0:22:c1:de:fa:09:14:78:47:
78:7a:0b:0e:b5:1d:21:64:45:f6:3e:9e:71:41:9a:
ef:b8:5b:bc:8b:6f:55:df:de:46:47:a4:6b:f1:ba:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:4D:5C:3C:04:0B:32:77:E5:32:E1:BE:2F:C5:D0:99:89:00:A1
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.115.16/28
Signature Algorithm: sha256WithRSAEncryption
18:79:12:f0:12:0d:e9:9a:9f:65:1d:36:3e:6c:4d:99:92:a7:
b6:f7:e4:fd:2c:d0:ee:22:c4:16:a7:c4:e4:aa:aa:75:2e:39:
90:33:e7:82:8a:98:c1:93:64:08:ad:0c:ec:5e:aa:df:98:b9:
c9:3b:f9:d2:6e:30:cc:f0:b9:9d:21:5a:f9:b2:d6:16:97:18:
18:df:a4:c5:b4:5d:73:8a:79:34:15:f2:bd:a2:2d:99:33:28:
b4:fd:da:d0:c1:e3:9d:0d:3a:a5:65:5e:b0:e1:5e:6a:d5:2f:
20:4b:7d:65:16:f9:de:03:8c:a7:c0:cf:ee:a9:ee:25:74:f2:
1e:a4:f4:02:05:17:74:48:73:13:a5:ec:d5:59:33:1b:91:cf:
00:07:9d:03:32:9b:48:0d:4c:ea:60:a1:28:23:d9:b3:29:a9:
f4:0e:e9:3e:d6:d2:3e:41:d4:1c:60:9d:82:58:d0:10:4d:04:
d7:91:18:db:cc:88:42:35:35:25:ea:b8:39:e1:ba:de:31:98:
d2:44:78:cb:dd:a5:ca:36:7c:fe:41:e8:0e:b2:ad:dc:8c:cd:
15:fa:c9:d3:60:a7:48:2d:d8:e1:e9:e2:1b:64:a8:7c:bf:ec:
4b:ed:72:69:01:70:6e:e9:31:86:98:d8:a0:dd:31:ad:77:0f:
34:9e:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org