Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A5488E2E22D511EDA3352647C4F9AE02.roa
File: A5488E2E22D511EDA3352647C4F9AE02.roa (raw, json)
Hash identifier: Npms0g8AhwLDeTHkLMU9tDhvvlMiGT4Feus3B9LyzA4=
Subject key identifier: 30:41:AE:26:D4:F7:65:B8:74:8B:5C:EE:FB:C2:31:10:8B:35:F9:59
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 046B
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A5488E2E22D511EDA3352647C4F9AE02.roa
Signing time: Tue 23 Aug 2022 11:20:51 +0000
ROA not before: Tue 23 Aug 2022 11:20:51 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 36.255.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Aug 23 11:20:51 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6304b813-f25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:4c:93:34:49:c2:f8:43:07:9e:29:b2:43:
20:56:96:ba:26:15:b5:2f:e9:50:a0:f2:5b:67:d5:
51:91:46:11:73:1e:bc:53:c4:93:df:22:c0:b3:71:
df:cd:3c:44:45:0b:da:a5:36:a0:36:63:09:77:ce:
c4:5e:4d:7a:47:80:a1:eb:6b:fd:35:d8:65:bd:c3:
fb:9a:95:2d:99:8e:67:63:b0:91:e8:78:4b:89:2d:
ff:fa:d7:d6:58:6e:ff:0f:55:8e:1b:4b:7c:6d:00:
78:b7:60:42:c4:e6:24:95:3b:85:67:20:77:dc:b0:
34:79:f8:6c:95:21:03:1c:d1:af:a2:56:c7:f2:88:
1f:14:d3:0a:29:0d:d9:07:3e:11:6b:88:c1:c0:30:
bc:0f:7e:1b:0a:26:ed:a9:4a:23:8a:c5:c5:35:50:
ba:55:ae:47:b5:11:83:a8:91:9f:5a:80:36:a9:1a:
81:0e:78:b6:64:75:fc:f8:30:65:e9:67:f8:b8:9b:
74:28:1f:01:a1:92:d4:cb:1e:60:83:84:26:8c:40:
6d:29:56:78:15:4f:45:87:7e:82:a4:d3:f4:58:cf:
58:d1:bc:76:c0:c3:11:ad:94:6c:6a:bb:49:1c:00:
92:19:5e:0c:a4:2c:04:4a:9e:f5:97:37:84:4c:83:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:AE:26:D4:F7:65:B8:74:8B:5C:EE:FB:C2:31:10:8B:35:F9:59
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/A5488E2E22D511EDA3352647C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.198.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:82:9e:b3:09:9c:d0:86:93:72:a8:7f:3b:4b:47:98:29:9f:
12:2b:22:d9:76:ed:b0:0c:b0:49:33:9f:e9:09:1d:5c:47:63:
ea:48:87:f5:2a:90:8f:43:8c:9e:3a:da:fb:28:42:b0:24:b0:
23:07:92:04:e7:f1:8e:3f:8f:b4:b3:50:83:e5:55:9c:5f:df:
f2:d6:40:d4:99:28:2f:83:f5:35:86:2d:15:c5:bb:fb:6e:9b:
60:5b:e7:de:51:20:3f:8c:c8:bb:dc:4c:33:c4:5d:04:e4:34:
ef:7d:96:f7:e1:b7:cd:9f:68:a6:85:67:21:59:0d:42:b5:1e:
35:07:ea:6e:a9:4e:3a:85:21:98:cb:3c:81:4b:25:8d:ee:30:
57:fb:60:56:28:9e:67:76:4e:e5:cb:b7:b5:09:5b:8d:cf:12:
8d:23:ac:cf:76:50:f9:49:4c:2b:ef:ef:3e:f2:14:5f:4b:df:
e7:80:fa:e9:7b:6a:f3:a7:a7:76:89:93:af:50:e7:ea:46:be:
38:a5:d5:d6:de:c5:04:97:13:e2:21:53:6f:ee:b8:70:04:af:
d1:d5:6c:e3:aa:93:f4:a4:b5:4d:72:f1:e1:df:4c:f3:da:49:
4f:3c:b7:7e:8f:99:64:f9:df:3f:23:4f:9d:09:07:8a:6b:4f:
17:b1:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org