Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9AE13EA2593F11EA9F9FA238C4F9AE02.roa
File: 9AE13EA2593F11EA9F9FA238C4F9AE02.roa (raw, json)
Hash identifier: CaEvdgc/cIxQ+7DW9qvwICdyb1deNYAkerpnCFqmCqE=
Subject key identifier: 58:66:40:83:B0:73:57:20:83:AA:16:9B:01:07:51:57:42:9A:4E:5A
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 32E7
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9AE13EA2593F11EA9F9FA238C4F9AE02.roa
Signing time: Tue 20 Dec 2022 15:10:45 +0000
ROA not before: Tue 20 Dec 2022 15:10:45 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 45590
IP address blocks: 112.137.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13031 (0x32e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Dec 20 15:10:45 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63a1d074-7d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:e3:9f:ec:f6:f7:af:67:a6:f8:6b:1b:63:
2d:15:97:b4:5f:2e:0b:a7:99:ce:0f:26:8e:b6:65:
b6:f5:b7:93:37:1d:42:3b:2c:b0:6f:1e:a2:7b:79:
33:85:30:9a:6b:40:1d:e4:c5:8f:13:06:35:bd:6e:
af:42:de:76:6b:10:7a:a4:6c:59:5e:6d:2a:ed:c6:
35:6e:c1:6a:f3:7b:64:e3:18:c9:c2:8a:e8:eb:c9:
45:d2:c2:88:d3:5d:c0:45:7e:58:12:c0:7d:05:4f:
74:cb:12:56:80:4a:58:67:94:26:e5:14:3e:61:ed:
9b:6c:56:bd:11:b6:1d:f4:f6:e1:ff:12:59:cb:d1:
f0:7b:88:2a:e8:01:e9:76:76:57:a3:7d:2f:82:14:
b6:dc:f1:db:f2:49:f8:da:bf:46:66:17:02:fc:5a:
8c:66:45:ce:87:82:4a:36:2c:8c:3e:76:6a:4c:b4:
6e:f2:be:ff:a6:62:4d:ee:48:60:8b:0f:92:52:39:
6f:22:f8:a7:e5:b4:6f:62:09:17:60:b6:56:b4:1c:
67:eb:71:d9:00:72:a2:86:eb:b2:71:27:cb:e1:ac:
97:f3:c9:7a:04:8a:11:90:01:3a:e7:61:cc:57:c1:
77:a7:87:f3:a6:81:f0:71:19:3d:68:44:93:2f:7b:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:40:83:B0:73:57:20:83:AA:16:9B:01:07:51:57:42:9A:4E:5A
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9AE13EA2593F11EA9F9FA238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.137.16.0/20
Signature Algorithm: sha256WithRSAEncryption
98:ef:cb:4e:eb:d9:c1:a6:59:c9:5a:4f:10:5b:3d:a7:2b:99:
81:5a:06:a4:1b:c8:3e:6f:ed:d7:7b:17:f0:57:58:2a:5a:25:
91:da:99:d8:ff:bf:31:94:d8:55:32:d3:e5:d5:91:67:d6:0f:
97:19:c7:a6:4b:92:91:7b:cd:7a:01:50:b9:7e:da:dd:6b:85:
03:f4:6a:7a:b7:67:c1:ef:ba:e5:09:ef:67:fd:ab:aa:1f:c1:
12:3d:49:92:44:9f:15:23:a5:83:7c:ee:8b:ad:b1:2b:a5:f2:
a8:68:97:77:95:a6:b8:fc:45:62:78:fc:8f:0f:bc:53:cb:1d:
c3:8b:9e:36:fb:22:13:f9:1d:b1:87:b9:8e:a7:6d:c1:25:a6:
c7:07:94:1c:bc:02:51:3f:29:ec:1d:6b:c2:4f:55:9a:11:35:
33:b2:cc:f7:89:e1:89:47:9b:99:5e:83:8d:86:06:80:b7:5f:
39:77:e2:95:25:2b:39:95:cd:d3:26:3b:fb:1f:68:6c:a1:e9:
38:df:0f:8c:fc:55:73:30:27:bd:91:3a:81:17:9c:f5:8d:8b:
36:9f:52:24:de:fd:9d:5f:ad:f7:c8:6e:2b:e3:e9:6d:5a:59:
65:bb:4b:36:a3:7a:ea:ab:c3:19:29:86:6e:7e:69:e6:e4:12:
40:49:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org