Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/51B5CAE866BC11EEA26F1A87C4F9AE02.roa
File: 51B5CAE866BC11EEA26F1A87C4F9AE02.roa (raw, json)
Hash identifier: VFAXkiH4mtdaNVD0r0iyN6/SkshnXONxvUkgjoJF7Mk=
Subject key identifier: AB:36:7F:42:80:FC:84:BA:10:3F:A3:A4:4E:FF:79:B5:B5:C7:AA:39
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 33EC
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/51B5CAE866BC11EEA26F1A87C4F9AE02.roa
Signing time: Mon 09 Oct 2023 15:55:51 +0000
ROA not before: Mon 09 Oct 2023 15:55:51 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 10753
IP address blocks: 116.90.96.0/24 maxlen: 24
116.90.97.0/24 maxlen: 24
116.90.98.0/24 maxlen: 24
116.90.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13292 (0x33ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Oct 9 15:55:51 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65242286-3989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:12:b4:ff:c2:c9:c8:a0:96:72:2b:93:92:
70:b3:6c:33:5f:8a:59:fe:c9:6f:e3:ad:c6:de:21:
1d:59:87:aa:5c:a4:ff:00:9e:dc:16:17:43:16:6d:
29:19:c8:ef:fd:cc:60:f5:8b:47:03:eb:f5:a9:f6:
ea:1b:5e:36:52:a8:33:f5:0b:57:bd:02:d7:71:c3:
57:1a:c4:26:8b:33:1c:de:c0:4c:73:bd:48:77:02:
33:5b:7d:36:9a:37:c1:0b:e0:26:fe:c6:60:96:d1:
3e:5e:c9:d8:c2:59:46:fa:94:69:ba:c3:9e:22:75:
d9:47:c2:11:fc:34:9e:b3:cd:61:28:89:ec:06:b4:
0a:d4:16:56:6e:0d:4b:6b:b3:9e:7b:7c:b3:5e:93:
85:c9:01:39:3f:60:45:06:57:f7:34:68:93:ee:14:
1a:15:d1:ae:70:b7:3e:95:a4:31:e2:fe:c8:a4:09:
85:68:d8:f3:43:86:37:b7:0a:9c:3c:9e:d6:83:fb:
76:66:ba:72:ba:e6:51:65:93:12:54:b9:8c:78:28:
4c:0c:d0:d7:c7:09:ee:03:b6:46:b8:46:97:52:b2:
46:27:25:7a:03:b0:7a:e6:cb:68:28:42:78:dc:59:
ff:90:79:66:08:b6:cf:fd:f4:32:cb:0e:2a:e7:f1:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:7F:42:80:FC:84:BA:10:3F:A3:A4:4E:FF:79:B5:B5:C7:AA:39
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/51B5CAE866BC11EEA26F1A87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.96.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a4:c8:1f:f0:42:d4:14:05:c5:8e:dc:ca:67:02:20:29:0a:
19:8b:83:5b:87:c0:6e:cf:a1:87:af:5f:ce:b1:51:13:e5:1f:
e2:49:02:ec:30:ec:10:1b:f2:e7:51:c3:53:2c:0a:5d:2e:c0:
6e:bc:b7:04:d6:0b:84:fa:7c:b2:b3:e0:c2:14:65:6a:e3:7e:
a1:cb:97:79:c3:cd:ea:b5:d3:d4:58:3a:d4:57:42:ad:ef:eb:
02:58:17:55:18:a1:d3:98:b6:cf:d7:c8:b0:ef:39:c9:1f:58:
91:ab:00:c8:7b:91:bd:d3:06:38:21:65:79:d1:28:cc:12:93:
42:c0:56:41:01:a6:bd:5b:75:52:16:56:09:34:f6:9e:bc:75:
44:e4:e1:c4:23:65:56:49:53:bb:f3:92:4f:f1:2a:09:dc:18:
5d:b3:a7:07:c1:d2:0b:13:64:59:f9:29:ae:25:d3:39:fa:f7:
e1:6c:9b:02:16:58:54:d2:8d:0e:88:3c:96:5e:39:02:33:a4:
25:ca:6f:77:24:4b:b6:ff:64:6a:c8:e6:42:37:08:45:e3:2d:
00:85:94:56:44:53:45:ac:ba:54:b1:f9:93:78:61:11:82:02:
c5:b2:6f:3d:03:09:a5:ae:fa:c7:ea:f5:3a:f2:2c:82:5b:7b:
aa:e3:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org