Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/E1D09D88B9B711EB9A296A30C4F9AE02.roa
File: E1D09D88B9B711EB9A296A30C4F9AE02.roa (raw, json)
Hash identifier: 1igtVshKbm9VNej1G6HNbDuJ6K+BQKTHfwMfjlw0xHI=
Subject key identifier: A4:DE:FF:47:53:E6:65:CF:73:44:EA:B1:57:85:71:26:CA:7F:C4:CF
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 02E3
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/E1D09D88B9B711EB9A296A30C4F9AE02.roa
Signing time: Wed 25 May 2022 04:28:23 +0000
ROA not before: Wed 25 May 2022 04:28:23 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 8075
IP address blocks: 113.197.65.0/24 maxlen: 24
113.197.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: May 25 04:28:23 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=628db067-963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:de:f1:49:82:46:35:49:ca:6c:c7:e2:98:
55:99:3c:86:64:1b:26:70:f3:21:14:27:46:3e:87:
8a:dd:e7:9d:16:6e:b6:3c:0b:d8:93:49:7e:a8:d0:
1a:02:23:d8:b0:84:e7:76:51:91:4e:02:e6:fc:4c:
57:f4:2f:70:d8:c4:fe:ae:9a:66:58:c6:5f:6b:34:
1e:35:59:b6:01:65:34:fe:e8:19:dd:24:92:73:bf:
fb:d4:d0:99:a8:3a:5c:62:ce:63:49:c1:fc:7b:9d:
61:c5:e7:98:43:d7:00:7d:31:46:bf:02:28:9e:58:
a7:2d:e5:56:d8:da:c8:3f:38:b5:40:44:ae:17:59:
6a:eb:d3:e4:0e:6b:82:ff:6b:d8:04:ec:6f:2b:d3:
da:3b:80:33:81:ac:78:8f:3f:61:96:9c:40:87:de:
7e:bd:77:9a:60:94:81:a1:bc:61:e6:63:45:12:bb:
ba:b4:4c:14:4b:5d:0d:01:00:c6:9b:ae:12:28:20:
f0:23:4a:dc:80:84:d6:b6:8c:cb:bf:06:b3:af:9c:
26:12:6c:2d:aa:7c:87:9a:06:a1:ac:16:99:3a:c8:
af:11:80:18:9e:b3:ce:0f:c8:47:d7:0b:10:61:7d:
1d:05:dd:8d:f9:ce:64:b9:ca:d4:46:24:61:c1:eb:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:FF:47:53:E6:65:CF:73:44:EA:B1:57:85:71:26:CA:7F:C4:CF
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/E1D09D88B9B711EB9A296A30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.197.65.0/24
113.197.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e6:2b:3c:99:18:53:9d:2b:50:23:5e:52:9c:ce:52:e0:b3:
d6:54:85:a7:12:99:d6:c7:cc:53:7c:06:0e:80:48:1d:68:ad:
0a:05:4b:b2:ed:99:6d:dc:43:f5:68:80:8d:95:c7:26:26:fe:
65:1a:98:08:ea:70:79:f5:b8:47:53:a7:2d:fd:dd:58:df:d3:
36:a4:78:c8:32:71:3a:25:50:d8:11:9a:a0:9b:fd:2e:43:91:
9d:8e:fc:eb:55:01:da:5f:2c:76:0e:33:d6:fe:9a:fb:0c:64:
8a:98:2e:22:73:13:da:fd:2a:f0:ac:6d:e4:8b:2d:b8:0e:e0:
1d:46:9e:42:e8:18:ff:78:39:d8:1d:29:fe:5f:4a:f0:46:7f:
aa:22:11:70:e0:49:75:e8:d8:44:85:db:cb:50:31:07:a0:af:
2b:2c:cf:28:97:4d:e5:b6:d0:ae:8c:d7:58:b0:92:d3:ad:cc:
9a:d5:76:cb:e6:3c:d6:71:f2:97:78:d8:c6:64:57:d9:59:df:
6e:5b:2e:36:19:63:ba:38:1d:e9:cf:e7:7a:26:ed:19:e5:41:
3e:80:86:51:cb:0d:b9:38:6b:83:94:42:2a:4e:09:20:0b:58:
df:57:dd:8e:d1:a8:16:22:f0:66:11:6e:09:37:c3:da:44:a5:
4b:fb:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org