Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/077D52C21A1211ED850BD259C4F9AE02.roa
File: 077D52C21A1211ED850BD259C4F9AE02.roa (raw, json)
Hash identifier: pr2zaxdMltyTM06H6Z6FP0DxFujm2NAE7VegUuAkpGI=
Subject key identifier: 47:34:98:7B:04:B7:8F:F5:9C:52:01:7A:38:AB:BD:E3:51:CF:00:93
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 328F
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/077D52C21A1211ED850BD259C4F9AE02.roa
Signing time: Fri 12 Aug 2022 07:40:26 +0000
ROA not before: Fri 12 Aug 2022 07:40:26 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139088
IP address blocks: 121.46.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12943 (0x328f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Aug 12 07:40:26 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62f603e9-26f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:de:78:02:9a:b0:84:b1:b6:a9:17:0d:22:
04:52:23:4b:fd:ed:66:d8:b8:eb:93:c7:21:75:20:
03:39:a8:50:85:e1:69:04:c6:e1:a5:51:84:76:c4:
33:92:02:db:d2:38:7b:69:2e:03:b7:2d:60:ea:3f:
e0:44:c5:8a:d3:51:94:36:37:77:82:e4:36:a6:2d:
fa:11:8b:55:37:43:6f:e5:7e:2f:72:fa:51:ba:56:
97:5f:27:90:75:60:8b:64:ad:cc:77:8d:e4:7f:29:
f6:f3:9a:32:de:7f:7a:df:ba:3c:62:1b:d6:57:c1:
4f:36:7f:46:e3:b0:ef:33:86:24:9e:63:cc:94:cb:
0f:b3:a0:29:00:0c:7f:0a:7e:c0:bf:25:97:39:76:
54:9c:e5:35:83:d5:36:81:50:08:79:ea:d1:5c:f2:
81:bb:e1:9f:d4:d0:2b:4d:27:bb:2d:ca:5d:b4:0e:
64:c2:8f:7e:69:eb:fb:a2:c9:85:4f:f3:60:a0:b7:
c1:af:62:af:79:4a:8c:83:2b:d6:52:55:9a:1e:df:
7d:c0:e4:b8:34:f1:cb:78:43:d1:5a:80:7a:d3:0b:
3a:f4:e1:0d:02:d3:83:48:a8:30:3c:00:62:24:92:
5a:1c:ba:01:c5:59:d4:d4:d2:77:10:89:33:0d:6e:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:98:7B:04:B7:8F:F5:9C:52:01:7A:38:AB:BD:E3:51:CF:00:93
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/077D52C21A1211ED850BD259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.46.66.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0a:a8:c1:a0:9c:0f:43:ff:c7:89:d6:5c:85:60:a2:32:79:
82:49:cd:59:79:33:88:61:3d:0f:fc:4a:a2:38:20:87:f0:9e:
a8:2a:90:0c:a3:7e:08:4b:43:93:ea:59:bc:21:e5:15:84:1d:
3f:6d:3a:c6:ed:d9:84:55:3f:ae:f3:58:18:79:5e:7b:5d:08:
83:2d:70:0a:14:f4:9f:25:f0:e2:5d:18:33:ef:ff:98:67:27:
f7:4c:b6:69:b9:9b:d8:76:35:3e:d1:96:f5:a4:f8:f3:b2:1d:
40:44:bd:e9:9d:41:af:83:08:f5:37:a8:5f:62:51:9d:5a:1c:
b9:c2:66:25:d6:2f:97:3f:21:e6:18:d4:eb:a0:52:f8:a8:ba:
0e:81:cb:ba:aa:66:41:01:7e:60:58:bb:71:07:74:1b:59:0b:
e9:e4:e0:c8:21:73:40:45:94:8d:ab:05:77:e7:fb:f4:ea:70:
23:d2:6f:1b:94:3a:d1:5e:4c:58:55:4b:ea:4c:3a:68:52:3b:
98:59:15:d9:c0:29:f6:6f:b1:0a:26:87:45:53:f6:a5:40:cb:
fd:db:21:97:43:a1:95:33:88:85:d0:84:14:67:c5:d7:aa:2f:
b7:b2:0e:14:bc:06:a8:78:ff:d6:53:10:f5:d5:26:8f:c9:95:
18:b9:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org