Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
File: BB1C2F88B1AD11ECA2E52046C4F9AE02.roa (raw, json)
Hash identifier: vQGFcuuZWnT5PncffxIEZ6UrmgDtN8Q7EwUjBxDR1RE=
Subject key identifier: 9A:10:6A:50:64:75:31:18:5C:7A:70:80:4F:84:1A:10:53:11:D4:E2
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3173
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
Signing time: Fri 01 Apr 2022 11:20:27 +0000
ROA not before: Fri 01 Apr 2022 11:20:27 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 17557
IP address blocks: 202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12659 (0x3173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Apr 1 11:20:27 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6246dffb-6bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:b7:f8:ff:1c:3e:1f:6a:3a:4f:5f:d1:bc:
6a:3b:8d:01:19:c6:8a:0a:66:da:5b:88:07:5e:16:
65:c3:94:a0:8c:66:0f:28:1e:9b:99:03:c6:11:da:
b9:41:55:73:9c:bb:d7:fe:04:45:4f:fd:18:0f:6e:
61:31:38:7c:a9:94:a0:86:02:2f:df:87:1d:ba:9a:
76:2e:02:ba:fa:50:7c:2b:75:12:c6:18:b5:4f:9c:
da:9d:96:17:61:b4:a7:4c:fd:30:8d:2d:02:14:46:
2d:6c:a6:c3:bf:d7:23:95:1b:19:17:ad:af:6d:a6:
d3:8b:a2:20:b3:0b:6b:a0:78:b8:e8:8f:29:6c:19:
51:95:24:c0:90:6b:e2:c2:13:8d:fe:6e:ee:6a:aa:
a6:b9:71:dd:ca:08:b0:a0:7f:a9:a5:43:64:b7:0c:
6b:33:c2:7a:b4:7e:3b:01:63:c7:d4:b1:13:bc:e4:
b7:de:ea:f2:5e:1c:80:1b:57:89:85:c1:80:fe:0d:
16:82:e2:74:b2:01:07:a5:ab:51:de:45:42:fc:7a:
1a:14:6f:a0:d1:d2:0a:82:3c:36:71:7d:7d:a7:00:
06:d0:11:b4:45:5b:8b:27:16:4a:0c:b6:4d:c7:c1:
89:3d:e8:e0:09:1f:5d:42:e6:09:64:b8:f1:fa:74:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:10:6A:50:64:75:31:18:5C:7A:70:80:4F:84:1A:10:53:11:D4:E2
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.69.33.0-202.69.34.255
202.69.36.0/24
202.69.40.0/22
202.69.45.0-202.69.47.255
Signature Algorithm: sha256WithRSAEncryption
68:4a:5c:1f:af:32:75:8e:bb:16:ad:1a:8c:df:ff:4c:a9:7d:
79:88:19:6b:8b:48:30:f3:96:71:36:7d:91:41:4b:30:e8:68:
71:03:fc:42:1c:bf:6e:a6:15:b7:80:a7:b7:8e:d2:09:03:36:
98:3d:8a:c5:5e:80:1c:c2:0f:9b:14:ed:97:fb:48:be:7c:df:
42:4a:43:08:2f:17:89:1e:87:0f:59:42:a7:8e:9d:83:56:1d:
51:3f:0b:95:21:c2:fe:4e:7a:3d:64:ee:ad:93:6b:2d:d9:b7:
95:c9:96:2a:6c:cd:61:e5:0e:a0:94:a4:2b:29:ef:ac:67:7d:
93:da:f0:de:3c:1f:3a:41:9c:bd:18:14:2c:1b:81:22:31:73:
03:e0:eb:1f:49:65:19:bc:5d:bb:9f:16:59:c9:55:dd:a1:b2:
42:25:15:41:ff:ee:59:d5:a8:09:b8:b8:c8:38:79:0d:90:62:
6d:85:80:34:bf:e2:58:1c:97:d2:c5:5c:c7:99:1b:2a:7a:8d:
9c:63:5e:ad:84:86:88:7a:4d:03:e4:dd:74:0c:b3:fa:37:54:
51:bd:1c:95:e1:f0:2b:ed:a9:70:7c:8c:75:fb:d4:2c:13:03:
34:44:d0:9c:de:e1:ed:7c:86:98:98:77:34:37:cd:de:ac:06:
53:09:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org