Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FDF98666743B11ECB2525D75C4F9AE02.roa
File: FDF98666743B11ECB2525D75C4F9AE02.roa (raw, json)
Hash identifier: 31c6Hb9KVA4CoPil2IJwJetSEQM7PeJ4CT0Xuwi/7mQ=
Subject key identifier: 30:8F:9B:74:5F:E6:46:D0:3C:1C:B7:B1:42:D7:86:90:4E:19:8C:D2
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 010F
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FDF98666743B11ECB2525D75C4F9AE02.roa
Signing time: Tue 24 May 2022 16:03:20 +0000
ROA not before: Tue 24 May 2022 16:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132471
IP address blocks: 116.204.242.0/24 maxlen: 24
116.204.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: May 24 16:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628d01c7-59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:fd:e4:c1:20:91:26:ff:d2:cf:0e:57:6d:
ff:55:f8:e3:2a:c9:21:28:f1:fd:bd:41:eb:01:ec:
6e:2d:32:ae:3b:36:49:e8:ca:db:9d:18:a3:82:29:
29:9b:d7:f4:77:7d:fb:d8:2b:d5:40:77:c1:cf:a3:
ac:0f:b3:b6:fc:9b:dd:7a:b0:14:ad:df:a9:3e:05:
fe:b3:38:ab:5d:ef:43:86:4d:59:02:c1:6b:c3:0b:
4e:64:17:6a:9c:6c:f1:36:fe:42:2a:a2:4d:52:99:
c9:63:be:25:2a:67:6d:f6:e2:c2:81:2e:03:04:dc:
79:4c:e0:00:a2:1c:4d:60:fd:75:04:ea:bb:4f:a8:
62:e1:e3:db:e1:13:cc:25:76:99:dc:b6:ac:51:d5:
32:b6:bc:61:35:83:78:95:e2:4d:2c:62:44:aa:17:
65:35:2e:1e:26:35:7f:11:a5:02:0d:e7:f8:d0:1b:
3e:33:20:cc:83:a9:ab:b3:8c:ce:a7:d8:2c:02:96:
fc:23:9a:62:b9:10:5c:51:3a:fc:a6:79:16:36:2b:
c6:94:58:0b:a9:d4:ba:b0:39:cc:ae:a9:f2:3a:c5:
b6:b8:88:14:0c:cb:b6:3a:aa:d3:bd:bd:fe:de:dc:
52:85:56:3e:e6:cc:e1:26:af:87:fe:5e:f6:a9:0f:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:9B:74:5F:E6:46:D0:3C:1C:B7:B1:42:D7:86:90:4E:19:8C:D2
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FDF98666743B11ECB2525D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d6:bf:c7:f2:ca:d4:e9:39:2e:5c:15:31:69:c3:0d:9f:ba:
03:7f:64:08:be:4f:ed:84:60:98:41:5c:bd:ad:8b:5a:61:7b:
bd:dc:04:d6:28:52:cc:63:4a:e3:cf:36:40:af:a7:be:43:1f:
52:c2:3d:7b:1c:78:73:37:2c:9d:c4:03:c5:9d:2b:ba:29:77:
9a:6c:09:f3:3e:83:94:92:18:bd:68:31:b6:ba:f2:7c:c7:a5:
ed:44:ea:54:aa:a6:fa:3c:0c:67:4d:bb:5e:be:36:f4:2a:93:
f0:a6:b0:66:00:2e:23:d0:a3:db:9e:d6:23:c4:f4:80:91:09:
12:87:f6:a3:5c:16:26:05:89:0e:54:b1:25:4f:bc:00:92:39:
06:6f:f7:8c:07:db:f5:9d:b6:de:28:c3:fa:73:af:b8:d1:b0:
a6:67:aa:af:e1:3b:e4:47:80:bc:e1:7e:0e:5a:97:a6:06:ae:
5f:a5:a3:32:8a:84:18:34:ce:61:83:e5:3c:70:54:a8:97:6a:
72:40:25:1f:8d:f3:c5:2b:31:0b:37:f3:27:b9:20:2c:71:ef:
29:3e:5f:a9:e2:f3:79:61:f3:c6:cf:e9:10:3f:c9:71:d9:c5:
e3:7d:5b:05:d5:9e:8d:16:1a:8f:ce:07:ad:5b:76:87:41:c1:
4b:34:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org