Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/4E7039963A7F11EDA75E2E49C4F9AE02.roa
File: 4E7039963A7F11EDA75E2E49C4F9AE02.roa (raw, json)
Hash identifier: krp0vFE3R1zUDzvafHjfN9HT7iH+1FijmTINukpwWkc=
Subject key identifier: 90:55:75:AA:80:7A:A1:47:61:39:82:CE:54:10:B3:8C:B5:BD:2A:33
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 02E6
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/4E7039963A7F11EDA75E2E49C4F9AE02.roa
Signing time: Sat 03 Dec 2022 03:32:38 +0000
ROA not before: Sat 03 Dec 2022 03:32:38 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 7603
IP address blocks: 2400:a6a0:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Dec 3 03:32:38 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638ac356-5760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:b7:73:25:b4:96:05:b8:19:11:6f:5b:63:
82:36:a1:0e:b3:8c:7e:f7:d5:bd:d9:5a:43:e9:76:
eb:a3:9e:d7:40:e5:8b:7d:fc:3a:6d:d9:36:b8:4c:
43:ea:3b:7b:01:e9:ed:98:3a:a7:4f:de:1a:3a:14:
e0:82:b7:df:4c:73:44:1c:51:0a:b9:51:52:98:0c:
6a:0a:ec:9b:19:58:33:13:6d:6f:7a:94:a8:0e:82:
6b:ea:55:db:9c:83:c5:17:04:a1:ff:a5:6d:f6:0f:
33:87:a9:18:4c:0b:2a:2e:75:8b:6c:17:b3:e7:90:
38:fe:b7:83:cf:e4:77:de:52:b0:b8:19:02:25:e0:
0f:d2:5a:15:d8:24:3b:eb:60:db:ac:88:2f:06:99:
cc:e6:23:83:5b:b8:5f:9b:99:fc:52:9d:01:21:39:
de:dd:2a:74:81:19:96:e1:d6:fa:29:c6:66:36:1c:
f8:20:5f:40:ed:dc:35:63:de:b5:5f:31:45:03:ae:
df:2a:d3:6d:26:43:d5:31:a4:83:c4:14:61:61:bf:
e7:3d:e1:f2:06:9c:c6:bc:e3:48:7a:9d:3a:2b:ca:
0b:cb:59:7d:55:ab:9b:ad:08:7b:b2:f5:8d:aa:96:
3f:ba:32:39:88:c6:58:d0:b4:59:d1:2f:72:40:4f:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:55:75:AA:80:7A:A1:47:61:39:82:CE:54:10:B3:8C:B5:BD:2A:33
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/4E7039963A7F11EDA75E2E49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:a6a0:100::/40
Signature Algorithm: sha256WithRSAEncryption
5f:1a:9e:4b:9e:8e:ea:2d:89:a3:1a:a9:1f:0f:df:69:4c:12:
f9:c1:3d:e6:5a:c8:c1:51:4d:f9:e7:3b:d6:0e:f0:d7:c6:fd:
c0:82:97:6c:e2:fd:26:39:67:19:2a:f5:37:0e:7d:b1:29:9a:
21:aa:d2:3d:11:ea:01:0c:15:0c:58:f3:06:bf:a0:fb:9b:b5:
1f:bf:1d:c5:9f:78:11:d9:6f:db:e0:05:21:8c:96:2c:bb:07:
f8:eb:90:54:90:4a:8b:43:12:0a:66:52:49:5e:7b:b1:44:7a:
0c:91:a7:3f:88:6d:2a:e6:29:07:3e:7a:fd:73:96:55:17:f7:
78:e4:31:fa:70:52:5b:53:01:69:2b:1a:62:eb:09:25:a8:3a:
58:58:b7:e4:ab:17:27:2b:1e:2c:40:f4:e3:09:36:f6:c3:7f:
9a:4b:c9:a6:99:28:cb:37:b7:f9:d3:88:46:60:b1:b4:83:e0:
00:e3:2f:f8:66:84:eb:52:11:11:07:ad:d8:62:e1:d5:77:da:
49:8d:aa:73:96:8b:92:c4:ad:4d:3e:28:85:07:85:de:e4:a7:
38:e2:12:a3:d5:45:01:dc:0f:3e:9f:e3:f9:cd:4c:7c:15:0f:
e7:1a:3e:76:84:b0:5a:fe:bb:b0:81:0c:d7:62:fb:70:29:7b:
70:35:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org