Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/629A1912F48F11E89651151FC4F9AE02.roa
File: 629A1912F48F11E89651151FC4F9AE02.roa (raw, json)
Hash identifier: Lo95p0Vj4w5LcijA3MsCU0OdsWNc4WcGFAdahi/ehGU=
Subject key identifier: 8F:FE:DA:A7:94:F3:73:37:C7:B8:4C:E9:EA:E3:97:FB:0A:16:F7:42
Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial: 0E6E
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/629A1912F48F11E89651151FC4F9AE02.roa
Signing time: Fri 08 Apr 2022 18:24:52 +0000
ROA not before: Fri 08 Apr 2022 18:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138016
IP address blocks: 146.196.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Validity
Not Before: Apr 8 18:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62507df4-7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:c7:95:f7:01:a2:1f:9f:2c:92:60:9e:dc:
20:c7:9f:5a:d3:63:c9:05:48:b4:40:db:43:c0:e6:
82:0d:4d:03:af:4e:54:68:28:0b:28:19:39:28:77:
60:92:01:00:a5:b1:f6:37:f8:b0:2f:07:b6:1d:f6:
35:4e:52:ea:3f:12:34:0d:44:40:8d:59:2a:8e:d3:
c8:61:bc:ea:5e:42:75:b3:3c:1f:dc:f5:21:03:c1:
c9:08:14:f8:54:6b:3b:8a:10:c4:d6:34:ae:a7:53:
21:86:42:f0:5f:cf:49:9a:9b:35:46:3e:99:bd:1b:
7f:39:e3:b4:75:99:e3:2b:bf:3a:dd:0d:f9:33:41:
9b:2a:c2:a1:56:ef:fd:35:87:9c:3d:ed:23:c8:90:
07:89:9d:d1:51:b9:44:50:a7:61:ee:e3:8c:47:7f:
3b:88:51:9f:92:2a:af:42:7c:4d:d5:97:f3:ab:59:
b2:5b:96:b8:97:71:0a:08:93:41:2e:fc:2b:24:89:
7f:22:c1:e3:1f:30:6a:f6:b5:f8:8d:2e:ed:58:a2:
f4:51:37:44:3b:1a:3c:90:6d:10:33:4c:60:87:aa:
66:79:fe:06:20:76:49:ce:1a:48:a1:6b:29:4a:e1:
15:5f:11:8a:bf:29:8b:c5:c5:0b:6c:ff:db:d2:8b:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:DA:A7:94:F3:73:37:C7:B8:4C:E9:EA:E3:97:FB:0A:16:F7:42
X509v3 Authority Key Identifier:
keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/629A1912F48F11E89651151FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.196.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:47:80:59:00:af:95:61:81:b4:b9:a8:8a:1f:e2:ac:aa:5e:
6f:65:f7:46:77:19:b0:60:81:e1:d3:f6:f3:57:8f:10:c8:f9:
2a:e5:67:ba:d7:89:79:13:7b:62:ea:74:9f:46:0a:dc:dc:57:
2c:13:36:81:f3:16:a1:7c:6f:d2:b9:10:01:b3:36:49:4f:49:
15:25:ca:bf:2b:c5:76:89:49:d3:00:2f:0e:01:f2:c7:64:e1:
25:17:86:43:f8:7d:fa:10:28:d0:5f:cb:0d:47:28:e9:30:2f:
8e:48:e4:d6:82:af:65:d2:6e:37:17:36:66:92:38:b9:48:76:
b0:95:86:91:8a:00:17:23:a7:d1:b0:61:e0:fe:d8:7b:92:7f:
a8:31:61:29:75:52:1a:d9:9b:bb:6e:ff:d7:5f:92:b1:7b:e1:
29:17:0a:ca:e6:c6:e7:c5:fd:be:3e:05:ad:93:6c:b7:31:78:
dd:52:b7:cd:4f:e2:bc:9d:28:6f:f6:90:7d:92:7d:d4:e4:96:
5d:20:ba:b2:97:9b:fb:80:d8:e7:2f:d1:63:3c:9f:a9:6d:39:
ea:df:84:b8:23:22:1d:1f:8b:0a:f2:74:09:82:20:7f:36:48:
b0:10:45:6d:7f:32:ee:94:00:e6:05:8d:1e:c6:c6:ca:9e:1b:
68:8f:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org