Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D40BE160DB1811ED8F1E9C50C4F9AE02.roa
File: D40BE160DB1811ED8F1E9C50C4F9AE02.roa (raw, json)
Hash identifier: tiMwBSHMNkAvogWWOoxqe/bywvIO2En7WWWLQ6g3V/w=
Subject key identifier: D6:5D:DD:34:70:AA:41:82:C4:50:85:D0:8D:34:03:84:22:3D:25:EB
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 01D8
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D40BE160DB1811ED8F1E9C50C4F9AE02.roa
Signing time: Thu 20 Apr 2023 12:46:00 +0000
ROA not before: Thu 20 Apr 2023 12:46:00 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.7.0/24 maxlen: 24
203.32.26.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Apr 20 12:46:00 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64413408-abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:de:aa:9d:3f:8f:b6:d4:a1:f0:7b:45:93:
d4:c8:35:59:40:ae:95:bf:21:2f:d2:29:49:79:8e:
3d:27:77:72:66:e2:22:d9:1c:ad:a2:0d:0c:12:5f:
48:08:4c:32:46:92:86:8b:66:26:f1:8c:19:b0:bf:
98:f5:cb:81:48:d7:19:06:95:62:3d:c8:e4:0f:4f:
38:4e:a7:d8:8e:96:32:3a:42:cc:8e:12:1e:9c:64:
0f:53:29:a1:9a:98:1e:62:30:78:ab:97:cf:73:43:
ce:0f:36:c1:22:44:bf:42:28:93:30:5f:e6:3d:fc:
fa:e4:1e:9a:1a:61:63:39:c4:67:e2:35:9c:9d:33:
e1:a3:1e:30:45:4d:93:e5:8b:ab:b9:87:d3:1d:e1:
18:a6:4a:d1:a1:b1:b8:67:79:10:4e:2d:ce:67:bf:
f5:2a:c7:4c:72:89:a5:62:29:4d:a6:d7:bc:d4:00:
a8:dc:53:91:c1:20:e6:29:49:c6:b2:91:8c:53:59:
c7:ac:1a:00:8a:e1:48:94:33:59:bc:a0:a6:fd:e5:
4e:71:c4:0a:e6:09:82:4e:31:a6:a8:23:58:48:41:
90:00:8d:3c:d9:b0:b9:c6:10:90:c8:ff:65:a0:10:
4a:03:a3:7a:10:bf:c9:37:5e:5a:97:f1:cd:57:7c:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:DD:34:70:AA:41:82:C4:50:85:D0:8D:34:03:84:22:3D:25:EB
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D40BE160DB1811ED8F1E9C50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.7.0/24
203.32.26.0/24
203.32.32.0/24
203.32.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ad:4a:a3:6c:20:0c:e3:ef:25:fb:d9:92:a5:4d:33:8d:7f:
fe:e7:df:67:b7:23:3d:60:3c:43:e7:f3:0e:fa:59:c7:f9:39:
e9:de:26:62:42:5b:00:dc:3c:fe:02:b6:90:79:84:5e:fd:92:
80:22:eb:59:5b:54:19:8a:d7:4b:06:31:e7:9c:1d:07:de:f0:
c6:fb:85:94:35:c6:b8:ec:18:e7:04:a3:08:02:3b:f3:85:64:
1b:21:64:46:55:33:b4:80:ae:05:07:c0:4a:84:c7:e0:e3:98:
93:eb:77:79:c0:ac:f0:20:08:a9:55:e1:82:56:4c:4d:f2:b8:
ff:5b:1e:ec:d4:cf:71:86:1d:a6:a0:98:0e:62:cf:7b:88:ff:
78:75:4c:18:6f:f0:97:f7:20:20:00:2d:7a:ff:8a:9b:22:a8:
49:75:52:4e:2f:68:1a:3e:e4:de:46:03:a9:42:1f:f8:7c:9d:
38:fc:e1:a1:a8:47:b0:9e:70:83:de:a5:cf:e1:c4:db:73:26:
99:97:55:15:24:6d:55:06:12:6d:fd:1b:54:5a:38:25:66:a2:
35:50:f0:0a:10:1e:4d:78:8e:a7:a4:54:33:01:83:24:46:a0:
84:ef:74:ab:cc:9e:1b:fd:c1:02:62:a3:84:92:94:df:28:c1:
d2:ad:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org