Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/3B73AE84956811EC9028F155C4F9AE02.roa
File: 3B73AE84956811EC9028F155C4F9AE02.roa (raw, json)
Hash identifier: tGHjyhzrrFXVzHRn3y6x5SVykJzxnojgwW87x02Xpcw=
Subject key identifier: 55:B0:34:DE:29:D4:CD:BD:ED:90:A1:CB:7A:52:D9:C9:B6:00:45:94
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 0140
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/3B73AE84956811EC9028F155C4F9AE02.roa
Signing time: Thu 24 Feb 2022 11:52:25 +0000
ROA not before: Thu 24 Feb 2022 11:52:25 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 20473
IP address blocks: 202.43.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Feb 24 11:52:25 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62177179-3f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:c9:2c:ae:63:8e:6a:ad:0e:43:3d:96:ab:
cc:ed:2a:b0:e6:2f:f1:cb:f4:5d:34:85:51:f9:1d:
23:43:0d:9b:91:59:26:67:74:88:c8:5b:c7:d4:5b:
00:82:90:17:ad:e6:c6:01:6e:03:b5:49:5d:25:fc:
ef:df:cb:21:33:a4:2e:ca:45:76:e4:02:d3:8d:6c:
e9:c3:94:89:82:c6:6a:44:83:df:fd:db:f1:77:5f:
e4:97:4a:17:7b:95:b4:5b:4a:37:d1:35:09:f2:e7:
39:a9:ec:40:50:29:1b:02:37:94:45:b5:95:c1:a6:
9c:25:02:2f:14:36:a8:3c:fb:e8:b7:06:de:6f:b6:
57:eb:c8:cd:5d:9b:e0:e7:eb:6c:9b:c8:12:8a:c9:
0c:ea:37:3b:d7:83:dd:a2:25:a0:3f:11:06:09:ac:
60:42:b3:52:fb:6a:ec:04:40:f1:06:6e:9e:45:66:
9b:de:0c:1d:d8:d9:33:3f:1d:72:d7:e2:15:c3:e4:
9c:07:a5:94:e1:67:09:cf:9f:05:ea:35:12:75:aa:
37:ef:17:f9:85:4e:d0:e7:7e:e7:41:18:9e:58:bf:
03:52:70:25:33:88:d3:52:be:1d:3c:1b:f2:4c:47:
2c:c7:0f:b6:7c:9b:e9:32:7e:76:9e:d7:fa:04:9f:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:34:DE:29:D4:CD:BD:ED:90:A1:CB:7A:52:D9:C9:B6:00:45:94
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/3B73AE84956811EC9028F155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.43.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ca:d3:88:59:bf:17:a9:82:b8:44:83:84:e0:23:42:81:38:
13:5e:1b:99:b2:81:04:55:4e:8a:96:0e:ff:02:b9:03:5f:18:
c1:6e:63:64:3f:40:6b:4c:d0:61:7d:67:a8:b9:07:12:02:af:
83:a9:f1:a5:a7:f0:ec:eb:bf:24:26:d7:2d:4d:d6:71:5c:65:
c2:0f:b4:d7:ee:ec:5d:f6:3f:f7:cd:3d:9e:35:b6:75:54:aa:
10:7d:a9:66:4b:f1:77:7a:c1:ad:14:16:d8:bd:c2:eb:a6:fb:
2b:f2:fc:89:6a:19:e1:ad:24:61:68:ae:46:39:77:25:36:73:
ed:a7:63:dc:99:10:3f:a3:f1:b7:21:cf:fb:3c:9a:70:cd:d4:
c6:11:c6:8d:4b:cc:93:d0:22:15:f0:5d:79:09:b5:d8:50:e0:
f2:c0:e9:fb:66:ca:55:fb:d5:b9:7c:09:22:fd:60:0c:12:21:
34:95:0d:fc:9d:7d:ab:7b:28:82:a1:5f:4e:3c:33:70:1d:55:
86:fc:04:7f:92:09:88:ab:5b:90:a8:40:c4:f0:65:e8:9a:4f:
35:55:ba:29:f8:3a:e1:cc:f1:8a:d0:9c:4c:03:63:66:e1:41:
b4:ba:b9:6a:40:8a:e8:ca:e6:f6:ad:e9:c6:57:87:e9:b4:dc:
2e:5c:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org