Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/76EC231E7F9B11EE9E6F9B26C4F9AE02.roa
File: 76EC231E7F9B11EE9E6F9B26C4F9AE02.roa (raw, json)
Hash identifier: DZlhO6i7oQg+TnwK6aBT66vOF0S+FA4Sura7xpxVQNs=
Subject key identifier: 59:44:E4:E3:74:5E:A6:D1:47:F5:5B:28:B3:DC:34:57:1A:8E:45:E6
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3408
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/76EC231E7F9B11EE9E6F9B26C4F9AE02.roa
Signing time: Fri 10 Nov 2023 07:33:39 +0000
ROA not before: Fri 10 Nov 2023 07:33:39 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 141212
IP address blocks: 116.90.96.0/24 maxlen: 24
116.90.97.0/24 maxlen: 24
116.90.98.0/24 maxlen: 24
116.90.99.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.102.0/24 maxlen: 24
116.90.103.0/24 maxlen: 24
116.90.104.0/24 maxlen: 24
116.90.105.0/24 maxlen: 24
116.90.113.0/24 maxlen: 24
116.90.114.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13320 (0x3408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Nov 10 07:33:39 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=654ddcd2-48de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:ff:97:1f:d5:11:1b:78:a9:49:82:09:5b:
38:06:80:08:eb:4b:80:a1:61:0f:ee:2a:72:90:0d:
a2:f8:81:5e:55:8c:62:bf:5d:43:7a:e2:de:e1:49:
30:82:1c:91:d5:7c:0f:52:c3:e4:64:57:71:6b:11:
64:71:b1:36:c8:e0:5a:e3:0e:48:cf:23:9d:11:70:
78:e1:97:b7:1e:dd:dd:79:af:91:d8:c3:6a:8d:e8:
06:95:b7:5f:16:19:1d:d9:96:44:4a:d9:75:85:80:
bd:1b:be:1f:c1:3f:3c:82:6f:bc:dd:87:b8:3b:be:
04:d3:83:7e:a2:64:55:50:7a:9d:bc:d2:d0:62:90:
1c:f4:93:59:bb:87:e0:d1:fb:a1:38:03:06:bc:7e:
86:4a:7e:b4:41:7f:11:46:a2:08:93:5e:53:4d:0b:
7b:de:6a:5b:b2:3c:f9:bf:68:24:83:46:f9:3c:ff:
2a:8c:2c:b9:96:56:3c:58:00:9b:5d:f3:46:3f:31:
90:43:71:d0:3d:0e:71:1e:d1:dc:75:cf:ad:0f:fd:
78:0c:4e:62:48:27:64:df:85:5f:4b:48:1e:14:f9:
1e:dd:e6:9f:46:1b:df:e7:07:fb:2b:31:9f:cf:d5:
14:dc:1d:38:96:87:d9:c1:e4:b6:e7:b8:f5:89:5f:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:E4:E3:74:5E:A6:D1:47:F5:5B:28:B3:DC:34:57:1A:8E:45:E6
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/76EC231E7F9B11EE9E6F9B26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.96.0-116.90.100.255
116.90.102.0-116.90.105.255
116.90.113.0-116.90.115.255
Signature Algorithm: sha256WithRSAEncryption
5c:bc:cb:b8:2d:30:dc:c0:fc:33:27:73:87:f0:38:5f:46:94:
34:7e:28:a8:62:c7:21:05:ba:3e:1b:32:da:4f:78:92:a9:1a:
65:c3:fe:57:e0:96:38:41:3f:17:7b:cc:f6:91:a6:43:42:40:
52:d6:4e:d4:42:df:48:fc:67:c1:31:c6:00:af:1f:2c:4e:40:
6c:e9:9f:62:59:fe:69:8e:c1:6c:0c:bf:3c:66:32:15:74:4a:
70:75:85:b4:59:1f:54:8b:5f:64:63:90:c8:d9:54:4a:25:10:
68:41:aa:5c:73:da:a4:ad:11:d1:fa:e1:32:6b:ee:b7:3f:30:
89:86:e5:8b:05:0a:de:5f:34:cc:33:44:5f:58:cc:ed:8d:6c:
fa:af:c3:9b:d9:9e:e1:5c:aa:c0:af:e9:49:8f:24:c3:8e:4d:
ce:37:3c:ed:72:5d:02:39:05:5e:cf:80:1d:5c:58:7e:d3:52:
28:ae:93:1d:e0:d0:0a:49:49:b7:83:4f:61:2d:2e:08:23:c2:
9a:f0:95:44:c1:28:54:09:5b:41:6e:92:e2:82:11:c6:69:e8:
83:b4:94:8f:f0:eb:ab:71:18:72:c0:02:05:a1:f8:5f:bc:04:
8c:a1:25:7a:bf:40:50:66:cb:a7:69:56:35:6a:f9:59:2b:f7:
4d:09:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org