Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
File: 9039BE4E1C1711EA8B048E84C4F9AE02.roa (raw, json)
Hash identifier: rucKDr9nTQr0vG9TBVHurffVYvImx2meRQqt/Dw2jPc=
Subject key identifier: 77:EE:45:BD:24:BD:BC:B8:97:E6:D4:85:95:FE:05:0B:18:C2:DF:1B
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 327C
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
Signing time: Thu 11 Aug 2022 02:40:25 +0000
ROA not before: Thu 11 Aug 2022 02:40:25 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 24503
IP address blocks: 202.51.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12924 (0x327c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Aug 11 02:40:25 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f46c18-b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:1c:72:b5:2e:03:a3:74:78:92:11:f2:df:
25:75:e5:58:11:c8:e8:36:5b:76:68:f8:74:dc:86:
11:97:e4:eb:96:5a:36:63:7e:45:ba:71:a6:0d:af:
b2:6b:87:e8:d3:c3:85:24:a1:d9:b5:b2:ff:f2:e8:
d3:b1:ce:c5:41:14:68:c5:ef:cb:55:a2:11:25:e3:
b2:7f:8e:71:66:22:14:ca:d9:80:c3:2b:ef:9d:e0:
4a:e5:87:c7:18:0e:7a:e1:1a:0d:71:ea:58:a7:cf:
2c:d2:dc:af:9e:33:25:31:8a:8f:6e:b9:b1:e9:c7:
4d:d8:f5:45:f8:d0:f0:89:9f:1c:88:d8:57:80:a3:
b4:ba:eb:47:ff:a5:53:11:1f:69:b2:1a:40:89:ab:
90:3e:36:f5:8b:f9:1e:ae:4b:8d:9c:8b:b6:26:a6:
b8:eb:2c:dd:e2:7d:86:e0:c8:00:4d:78:74:77:eb:
9a:6f:fb:ed:3e:b9:f4:2f:ba:62:88:e5:4e:8e:62:
46:31:f7:db:72:17:4b:dd:a4:fe:7b:07:4e:2d:23:
e2:fb:c1:d5:46:d6:9d:ca:ce:fb:b3:3d:91:dc:2d:
54:6b:81:4a:25:5b:b6:4a:b8:29:04:78:38:a5:70:
0b:14:31:1b:96:e0:00:f9:59:8a:2f:8c:96:ff:35:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:45:BD:24:BD:BC:B8:97:E6:D4:85:95:FE:05:0B:18:C2:DF:1B
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.51.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:22:3f:91:07:c2:70:57:67:ad:68:ee:6a:06:61:01:a9:35:
7f:64:f0:88:07:f8:af:d1:3c:a5:3a:09:78:60:0a:2f:45:9f:
b6:46:b5:0f:0f:e8:cb:bf:74:96:ff:1e:d9:1a:91:11:73:0e:
59:a2:41:26:08:0a:47:a0:de:7b:0a:51:a6:ab:41:dd:fe:8c:
3a:f2:cc:2a:25:af:64:24:39:3e:0c:43:2f:60:00:08:fb:b2:
8d:87:84:5c:cc:17:95:00:b4:f4:a3:b8:44:cb:f4:c9:d5:cd:
40:8a:88:3a:08:e4:08:03:ac:2a:17:31:ae:4e:fa:6b:e0:0f:
ff:6c:b6:76:ad:40:06:cc:04:d1:2f:3f:08:00:6e:63:f2:60:
8a:b5:80:37:9b:33:f2:3a:bd:36:8b:08:94:10:ee:3d:b7:a9:
49:ba:1c:99:57:0b:da:c5:38:ee:df:58:1d:00:99:db:b4:c8:
55:9c:05:8f:2a:56:b5:e0:95:31:d7:39:52:42:67:dd:ac:52:
7c:46:21:cc:92:c8:04:f4:01:da:2a:44:63:78:1f:54:46:92:
ec:ea:28:fc:5f:f2:9c:28:7a:78:06:aa:a3:f0:e6:c9:7f:f3:
cc:22:ff:fa:75:fc:ac:48:14:20:a9:1d:1a:01:92:87:18:b5:
fb:45:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org