Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E9C553B250EC11EDA7DA9346C4F9AE02.roa
File: E9C553B250EC11EDA7DA9346C4F9AE02.roa (raw, json)
Hash identifier: hkoBciBY35ipcne0S00QJIcZ+Cawme3chM8H626foMA=
Subject key identifier: FC:FE:13:59:CF:AF:A9:24:80:9F:78:4A:39:F0:AA:CB:A4:58:D3:8D
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 21BA
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E9C553B250EC11EDA7DA9346C4F9AE02.roa
Signing time: Fri 21 Oct 2022 03:03:18 +0000
ROA not before: Fri 21 Oct 2022 03:03:18 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 132508
IP address blocks: 112.198.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8634 (0x21ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Oct 21 03:03:18 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=63520bf6-c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:ca:c2:30:fb:78:2e:9a:d3:7b:34:0a:19:
88:d3:16:ab:32:7c:d6:c0:79:08:bf:16:08:ee:6f:
65:80:2f:4b:96:fd:a4:e9:b5:ef:ac:5f:17:bc:c1:
d1:10:66:d7:a2:af:5a:60:a4:7d:0d:52:0f:ae:84:
6d:c4:7f:b8:99:cc:b2:db:38:0f:dc:b5:81:80:3d:
35:6a:47:9c:72:3e:83:a5:0d:0a:42:9f:0e:f4:4d:
75:70:ca:57:dc:af:c1:73:f1:9e:69:52:4d:6a:07:
ea:15:4d:4b:56:bb:af:82:38:f7:50:e2:b4:e5:03:
22:91:c4:a4:ef:6d:3b:10:57:14:b6:92:dd:e2:46:
e4:e7:50:87:a4:12:84:1a:29:4e:89:56:ed:be:8c:
7d:42:4f:00:6e:bd:74:5a:e4:79:01:62:6f:d9:7b:
2c:83:2a:82:5f:cb:3b:87:dc:74:7f:ce:17:4b:4c:
66:4c:3a:5b:c1:dc:5b:30:6e:27:1d:77:b7:51:94:
37:a3:77:11:a9:c6:93:d2:a9:f4:d6:bb:ec:42:09:
5a:56:b2:88:e8:34:c6:47:c0:59:73:7f:20:cd:56:
d5:6a:cb:f3:84:8f:61:2c:b9:34:70:20:d3:2c:d8:
0e:c2:23:02:0a:35:18:c5:52:3e:ac:7b:9e:3a:b6:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:13:59:CF:AF:A9:24:80:9F:78:4A:39:F0:AA:CB:A4:58:D3:8D
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E9C553B250EC11EDA7DA9346C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.198.25.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:35:41:8b:eb:ff:27:86:a2:32:6b:9e:aa:bc:4f:ac:0f:06:
06:59:3e:b3:91:d5:56:5f:fb:46:97:0a:8e:64:04:90:aa:86:
a4:af:00:dc:96:97:4d:4e:73:ea:e3:49:88:08:5c:f3:70:9f:
d5:b6:97:a5:0a:c6:7a:7a:f2:54:1b:29:f1:a9:fd:52:c8:8c:
a6:9d:77:84:87:91:7f:31:40:05:c7:e1:33:25:ca:82:ab:57:
8a:68:97:aa:a0:a3:00:83:67:ac:6c:b8:a0:48:43:c7:d2:28:
c3:bf:af:46:bf:76:65:26:2b:95:e8:8f:fc:7f:35:1e:d2:79:
f1:cc:6a:1b:8d:e3:f8:4e:86:38:a9:6c:7b:d5:ee:97:7d:5d:
fd:3d:11:33:48:b3:92:55:a1:09:79:fa:f1:cb:b3:36:53:d4:
69:95:9b:6f:ca:a8:4e:4c:1a:c2:7e:aa:41:02:c1:aa:6c:43:
78:53:3a:ac:38:d9:56:72:dc:dd:07:06:52:b5:61:dd:d1:e2:
d9:a0:ae:a8:90:28:36:ea:b7:21:f5:1c:f5:17:0b:9f:36:8d:
14:ed:55:59:01:41:91:70:e6:80:6c:1c:07:65:21:1c:b7:16:
17:59:62:df:de:0a:fe:33:81:b4:e7:21:f1:51:73:10:64:74:
f1:48:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org