Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
File: 658B0B701B8911ED8E01341FC4F9AE02.roa (raw, json)
Hash identifier: hWPHyicjgL5+m5k7ZQUG2ecYorrjae5LKQXp2ntWwOs=
Subject key identifier: D5:9C:0C:BF:93:B2:90:71:AB:5D:17:55:42:0D:13:3F:0B:45:6D:90
Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial: 0871
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
Signing time: Sun 14 Aug 2022 04:27:25 +0000
ROA not before: Sun 14 Aug 2022 04:27:25 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 14618
IP address blocks: 2001:df1:6c80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Validity
Not Before: Aug 14 04:27:25 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62f879ac-e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:bb:02:aa:86:06:21:62:b2:86:df:c5:9c:
34:20:b3:ab:db:cb:dc:9a:bd:40:87:58:95:21:01:
cd:a9:4d:7d:4d:75:eb:f3:3e:f7:4f:ec:1b:68:60:
75:c6:74:3d:30:ba:5d:80:da:1d:65:91:18:34:55:
1e:90:bc:9f:2e:1d:09:8e:10:29:c6:2f:61:34:f6:
31:a6:ab:5e:bc:20:1a:23:45:86:43:cc:a2:6c:0f:
d5:f5:f8:4e:0e:3e:23:78:6d:82:c5:68:b1:47:df:
84:19:09:17:9d:0d:b4:80:32:bc:d5:d6:57:18:80:
b2:22:ba:72:e2:9d:a6:1a:16:c7:64:bb:a7:53:3c:
60:00:cc:d6:cc:8b:2e:f1:05:60:98:4c:a1:f9:e3:
90:30:43:4b:9e:8b:7d:65:fc:b4:d5:59:12:10:ec:
3b:7e:fb:d8:4b:7b:b0:38:d0:d8:77:8b:a7:8e:60:
01:92:ff:46:ea:65:74:e4:94:06:da:08:de:80:d3:
53:f0:7b:b3:db:5d:8e:e2:2a:88:de:b3:36:b5:f6:
fd:ce:07:2f:94:fc:1f:dc:59:65:2e:35:58:06:52:
97:24:3a:32:7f:9b:84:8c:0f:79:28:56:98:0b:70:
ca:af:ea:3e:46:cb:a7:79:84:66:6b:f4:7c:5c:8a:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:0C:BF:93:B2:90:71:AB:5D:17:55:42:0D:13:3F:0B:45:6D:90
X509v3 Authority Key Identifier:
keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6c80::/48
Signature Algorithm: sha256WithRSAEncryption
a2:38:47:63:51:ba:ef:94:01:51:52:ca:95:8b:88:61:9f:15:
dc:aa:99:90:d4:0b:9e:86:9d:c4:1c:80:9b:cf:2c:52:88:08:
b9:f8:eb:37:78:24:b7:d0:d0:c6:02:9f:bd:38:e7:68:54:b7:
5f:b4:ef:85:19:ea:7c:1b:70:b7:5a:db:c7:41:23:d8:c5:ea:
5e:f6:1d:d1:9e:0c:9b:a1:7b:86:fe:43:33:db:98:8b:a6:32:
f4:fd:13:0c:25:13:99:9c:ea:a6:7e:d8:cf:f1:fd:d8:2b:48:
08:0e:ae:ce:e1:98:ad:84:14:bc:0a:a1:dd:38:35:71:a1:1a:
46:6c:16:be:78:1b:63:dc:a4:1b:5f:39:ae:f5:11:83:3d:47:
d7:c0:40:4a:2e:e5:fd:be:46:b2:44:93:b0:9c:1d:d2:00:20:
88:17:88:aa:c5:ec:37:3b:85:fc:6b:ee:88:ac:88:67:2e:47:
60:b6:3c:4d:d5:f9:12:81:3e:3b:ac:7b:12:c6:06:cf:b7:56:
28:26:7a:87:9b:b5:a9:20:f5:52:55:d2:ef:8c:52:d3:26:62:
d6:db:53:f3:1a:02:02:57:22:ea:6c:82:0b:62:b4:1a:ba:08:
37:39:5a:8a:6d:bd:a1:11:f7:18:19:6e:4d:0d:fa:d6:b0:a2:
f0:e2:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org