Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7019714643B611EB9FB8597CC4F9AE02.roa
File: 7019714643B611EB9FB8597CC4F9AE02.roa (raw, json)
Hash identifier: dbcxreWfaDKrG/CviPksshf2c0i3LcA0DM2Shr0wYZU=
Subject key identifier: AA:F6:54:C3:31:54:55:96:8F:B3:AC:7E:E1:44:47:B0:54:BC:69:55
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 30F2
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7019714643B611EB9FB8597CC4F9AE02.roa
Signing time: Mon 31 Jan 2022 14:40:29 +0000
ROA not before: Mon 31 Jan 2022 14:40:29 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 141431
IP address blocks: 202.69.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12530 (0x30f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 31 14:40:29 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61f7f4dd-01e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:5e:7e:ff:0a:8c:d9:ff:d5:63:8b:79:73:
07:0c:63:57:93:74:cc:93:df:5c:0e:7c:5c:6e:ba:
92:e5:96:38:d8:ff:b8:7e:3c:52:38:3c:40:ec:b5:
2e:f9:94:b2:e2:64:20:c7:6b:5e:b7:53:de:13:46:
80:33:dd:bc:f1:9a:04:88:aa:79:17:e8:46:b8:57:
d8:9c:75:09:aa:e0:f7:7c:b6:d1:63:58:e1:52:c3:
df:0e:0d:49:3d:2c:ab:89:31:7b:b0:3d:18:63:82:
76:dc:42:3c:08:7d:49:a9:ba:bc:c7:eb:0a:fb:a4:
b3:f7:75:03:31:c7:b9:21:dc:6b:90:af:81:83:bc:
7f:52:01:8f:d4:0e:4c:3b:01:4d:b9:d9:58:69:a7:
05:96:a7:7c:af:80:6a:de:62:3e:45:0b:a1:4d:31:
d8:0e:44:2c:e3:79:64:34:2e:b7:a3:7b:62:77:6a:
66:08:c4:0e:c8:40:ab:3d:63:bb:57:83:d9:cd:95:
b2:17:6b:55:df:cd:32:0b:5c:14:ee:6c:aa:2c:06:
bb:6c:b8:af:29:ca:c3:65:0e:fe:f1:c4:50:3a:bc:
00:3f:dc:03:fd:58:9f:b2:32:41:ca:50:07:09:c9:
69:5c:86:7c:95:dd:5f:57:78:93:c1:5e:56:28:2b:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:54:C3:31:54:55:96:8F:B3:AC:7E:E1:44:47:B0:54:BC:69:55
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7019714643B611EB9FB8597CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.69.43.0/24
Signature Algorithm: sha256WithRSAEncryption
61:76:46:56:f4:84:30:2d:de:c0:27:90:1e:a4:9e:36:20:8f:
60:6f:d6:60:d8:6a:d9:3a:9b:45:fb:3a:cf:db:56:63:0b:c7:
40:da:e9:73:9f:9f:ee:8c:24:0a:74:e4:3b:02:5b:35:75:34:
1c:64:40:f3:e3:27:0b:4c:9d:e4:d7:66:f1:df:00:76:e5:82:
ca:c4:f1:2e:1e:07:d3:c4:f8:36:50:a2:31:af:98:a2:94:ad:
d2:22:24:30:50:bd:ed:7d:3b:f3:3d:42:87:19:d7:5a:64:a8:
74:c3:0c:d8:c3:c3:8f:4f:70:45:66:e0:dd:a0:c6:dd:11:09:
41:56:bf:2f:53:fb:ff:6a:f0:d1:a5:12:16:d8:c7:90:61:0f:
9e:f3:ca:8d:51:af:05:cb:ae:7a:77:45:a4:b2:02:1a:43:82:
12:a4:0d:07:16:4d:b7:a4:17:ea:d3:a0:ee:2c:97:8f:28:35:
36:57:82:c6:fe:c0:ff:5e:1c:06:77:3c:2e:97:89:0f:a0:74:
8f:23:97:45:d1:34:4f:e0:3b:97:b0:58:4b:be:48:75:8c:08:
a7:19:dc:3d:65:ba:04:1c:23:30:af:0a:ac:b6:db:a5:05:99:
62:64:fb:d8:e2:63:69:97:48:ac:6e:0e:8c:19:0a:f7:85:11:
e0:6a:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org