Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/AFF9F30442B011ECBA3A677CC4F9AE02.roa
File: AFF9F30442B011ECBA3A677CC4F9AE02.roa (raw, json)
Hash identifier: bORzZ9N67sZ20ekyMZEq+b1MN7nvXSRg8aasr2JhM0A=
Subject key identifier: 9F:1F:F4:BB:95:56:5C:87:53:79:F3:66:8F:B2:13:87:06:F4:F7:AF
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: A6
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/AFF9F30442B011ECBA3A677CC4F9AE02.roa
Signing time: Thu 11 Nov 2021 05:31:58 +0000
ROA not before: Thu 11 Nov 2021 05:31:58 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 2697
IP address blocks: 144.16.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Validity
Not Before: Nov 11 05:31:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=618caacd-4ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:91:57:7f:c2:e4:51:e6:61:6a:d5:8d:df:
7c:1f:19:83:55:2e:67:aa:45:6d:a5:e6:4b:d4:94:
8f:a4:70:37:a6:5a:d3:10:f5:6f:b7:9a:c6:67:8d:
30:e8:16:74:4c:3b:85:6d:ee:d1:c5:04:91:8c:b5:
dd:f7:b5:28:c1:65:33:ae:92:82:1e:52:e2:de:44:
87:9d:89:6e:2f:54:26:d8:1e:7c:f1:29:52:41:60:
c9:fa:f8:56:6e:83:44:dc:f0:4f:46:51:7b:66:fb:
93:2b:bd:ca:61:b5:1d:db:3b:37:2c:ea:ca:c7:16:
e5:01:25:92:86:60:47:9a:10:bd:f4:1c:86:d5:79:
23:e9:b4:25:b7:26:6a:1b:17:15:9b:b1:a2:0e:1f:
75:de:82:60:9d:fc:ec:60:ca:a8:9c:c2:6e:6c:38:
b9:42:e7:76:3c:f8:bf:6c:96:da:58:ed:82:ef:67:
c3:ba:4f:46:99:d9:8a:95:18:29:60:57:ff:5e:9a:
95:1e:3e:f6:76:8b:2c:62:0b:ab:51:4a:89:bf:01:
a6:58:36:36:2f:fc:e7:a5:5d:8f:82:54:eb:db:56:
96:cd:ac:95:4d:51:24:f4:c8:48:6f:34:b5:a6:65:
2e:8d:d9:84:33:77:e0:67:97:5b:85:c3:79:1b:1e:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:F4:BB:95:56:5C:87:53:79:F3:66:8F:B2:13:87:06:F4:F7:AF
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/AFF9F30442B011ECBA3A677CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:d7:51:37:ff:63:4c:ea:b9:1f:71:ee:96:85:de:b4:4a:0e:
da:0d:c1:47:df:85:d9:ff:2f:56:7e:15:43:2a:23:c1:a8:d8:
1d:20:e5:ed:3f:2f:bf:97:6a:b1:06:8e:21:34:20:b5:83:ab:
dc:2d:c9:e1:b7:1e:57:fc:15:69:8f:b1:87:7b:86:eb:5c:bd:
47:a1:e8:a1:04:83:21:64:ea:d4:15:b4:76:a6:ee:1a:85:d3:
6b:bb:3c:15:1d:24:d6:50:9c:99:c8:26:96:ff:d9:39:f4:07:
a4:07:62:e3:14:b8:66:a5:8c:49:53:40:fa:9d:74:9c:6f:3a:
66:09:40:72:41:b5:e6:48:ad:3d:89:2e:3c:d4:09:d9:ae:43:
e0:84:ee:0c:bc:eb:7d:e5:aa:e6:86:0c:f9:17:90:7b:b5:81:
c2:b2:a1:51:66:5d:43:e9:69:c4:2c:e8:b6:f4:7b:50:91:32:
31:93:d3:2d:64:d5:e1:7a:44:bc:22:df:2d:cc:a2:a1:a6:2d:
4d:a3:fa:aa:53:28:3b:e5:4d:ee:b6:c4:55:c5:c7:82:fb:d8:
23:d8:8f:77:04:15:e1:11:ae:96:b1:b6:dc:db:f2:71:bc:2e:
af:ab:33:19:08:07:27:55:26:4c:e6:7a:ce:8a:39:ff:42:5c:
8d:94:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org