Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/4037527E39D211EB84B9FD6BC4F9AE02.roa
File: 4037527E39D211EB84B9FD6BC4F9AE02.roa (raw, json)
Hash identifier: tJoKR5TluSbi7ASu6G1kNRdlOFF8BbMKqmjJmAflHwA=
Subject key identifier: 5B:E4:43:5A:A4:63:84:76:76:4C:31:02:54:E3:68:C2:D9:D0:2B:27
Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Certificate serial: 074B
Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/4037527E39D211EB84B9FD6BC4F9AE02.roa
Signing time: Wed 27 Apr 2022 09:48:05 +0000
ROA not before: Wed 27 Apr 2022 09:48:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38001
IP address blocks: 203.55.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Validity
Not Before: Apr 27 09:48:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62691155-d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:80:7b:03:c7:bf:2f:e1:97:69:9a:fe:97:
c4:46:c9:da:35:b6:d6:c0:cb:57:d2:c2:db:b5:95:
46:64:18:a8:dd:f3:74:6e:d0:98:0e:9d:cf:7b:f5:
6c:95:58:df:85:63:61:a1:5b:4e:9a:0c:8e:fe:38:
d9:bb:a7:3a:58:82:ff:23:6e:ab:c3:50:37:1c:79:
66:66:ec:89:b0:80:df:e2:bf:c6:57:eb:1d:37:7c:
f6:91:ae:5e:12:20:ab:61:03:1d:99:7a:a3:7a:5b:
55:2b:7a:99:be:6a:5c:82:72:f2:72:a3:d2:03:4d:
28:85:ba:b7:eb:87:dc:73:41:47:f7:42:8d:79:12:
64:9e:c1:f7:39:f8:e0:44:78:94:55:63:74:48:a6:
c3:aa:03:eb:26:06:87:2e:cd:d1:da:de:62:98:de:
45:64:b0:f3:e6:41:3a:f2:ba:58:95:eb:de:6c:34:
aa:9a:1a:50:12:d5:f3:0a:04:80:63:e1:26:73:10:
8a:ce:5c:03:5d:cf:98:5a:5d:ac:86:99:7a:09:4f:
00:71:20:51:f1:ff:9a:c9:bd:27:7b:4e:56:a7:8b:
30:47:82:0c:8b:50:9c:63:7c:26:c1:00:32:f9:28:
85:4d:b0:05:85:fe:ac:c3:c8:f6:83:df:e1:15:19:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:43:5A:A4:63:84:76:76:4C:31:02:54:E3:68:C2:D9:D0:2B:27
X509v3 Authority Key Identifier:
keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/4037527E39D211EB84B9FD6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.55.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:65:d3:58:db:bd:80:a8:70:3a:ea:25:c8:ce:0d:61:94:24:
50:fc:e4:62:be:79:9e:9d:d5:3b:7d:6f:bf:89:56:89:6b:3a:
d6:9f:8f:7c:de:e5:b3:c8:87:b3:6d:77:6f:b2:5d:9c:79:21:
c1:24:f2:e0:6d:44:52:8e:3c:cc:39:b3:ee:10:13:ee:04:9e:
6c:3a:45:83:52:9b:f5:13:ae:4c:28:ae:a4:e1:ee:6e:77:84:
35:72:24:8b:89:a5:1c:ac:fa:87:1f:7b:6a:9e:b2:a8:d7:a4:
76:d9:1c:6d:d6:d6:10:58:d8:ba:d6:61:f4:61:92:de:db:3b:
e5:26:16:17:65:02:b9:76:81:d8:ae:ec:3d:c7:77:7c:bd:54:
b4:3f:e2:00:c1:9a:04:c6:09:9b:42:4e:27:e9:0e:59:fc:e8:
67:c8:de:02:a9:c7:11:db:4d:17:6b:3b:98:4d:af:6d:a1:1d:
4f:c0:93:0a:a0:5d:f7:0d:b7:6a:c9:d3:f8:37:f3:0a:04:5c:
59:65:c1:8e:8a:b0:c3:bd:d1:e6:d2:f7:00:dd:2e:32:e0:64:
5c:12:ff:08:c6:3c:15:c6:fb:7f:7f:85:81:be:01:5e:74:36:
ba:82:c9:4e:09:e0:26:e7:77:f3:9c:e5:2a:a5:44:84:9e:57:
d5:51:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org