Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/2534962495F511EBA6D31767C4F9AE02.roa
File: 2534962495F511EBA6D31767C4F9AE02.roa (raw, json)
Hash identifier: acOSAoZEEx/TdEV4hVgAEyw7HEzEQtFE+oZ9OCCveqg=
Subject key identifier: A9:7A:5D:8D:19:32:D6:C0:93:8C:0F:C2:8D:A3:BA:38:69:BC:72:7E
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 032F
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/2534962495F511EBA6D31767C4F9AE02.roa
Signing time: Tue 24 Aug 2021 11:45:53 +0000
ROA not before: Tue 24 Aug 2021 11:45:53 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 133199
IP address blocks: 45.125.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Aug 24 11:45:53 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6124dbf0-7d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:56:fc:60:46:49:a8:66:a2:08:6f:50:4b:
fc:e0:96:ba:74:b8:4e:52:15:ff:35:90:03:d2:0d:
d6:bd:8c:0d:1b:2e:44:e4:03:cd:26:75:e0:a0:f1:
49:99:83:78:1d:91:b7:05:14:28:64:74:97:02:5c:
24:ec:89:5f:24:03:38:97:a3:d6:00:d0:61:05:c0:
d5:56:71:1a:65:89:c7:5c:d9:4e:de:5a:d8:00:ed:
15:a9:fb:52:9b:9e:84:9f:4d:f5:93:c8:3f:e9:2b:
70:fc:af:64:5a:07:6c:8a:ef:2b:4a:ee:d4:97:f8:
ae:1a:cf:7b:58:ba:a3:11:09:d6:0b:61:c5:42:93:
ea:9d:f1:40:fe:f9:7b:b2:ac:dc:d3:bd:d9:68:6a:
2b:00:28:20:30:5b:8c:6e:12:8d:7a:32:2a:aa:1d:
5f:5f:5b:57:a1:1a:d0:4e:4e:fd:4b:de:1d:05:7e:
4b:68:6e:e0:5b:bf:e7:fc:08:7b:89:ba:58:2c:a5:
55:89:ae:4b:12:ce:c3:1c:c1:1d:ec:52:5d:94:cc:
56:03:3e:40:8c:83:d5:70:3c:b3:14:6f:97:27:0c:
5b:bc:26:ae:a5:da:5a:86:09:bb:2d:12:07:aa:f3:
74:e0:fd:bc:75:ad:e4:cd:01:c5:3f:96:d9:ee:fc:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:5D:8D:19:32:D6:C0:93:8C:0F:C2:8D:A3:BA:38:69:BC:72:7E
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/2534962495F511EBA6D31767C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e2:98:c4:9b:a2:2d:c5:46:db:21:eb:9c:70:b4:05:59:88:
fb:7f:78:1c:28:b2:bc:e8:03:3b:a4:d2:65:f1:8a:36:92:17:
67:a7:79:7e:00:b5:8a:24:9c:b9:66:07:45:dc:1e:bf:d8:c3:
4f:19:ac:47:29:33:17:a1:7c:f4:68:70:b8:16:e3:e0:90:87:
b7:9a:61:6b:b7:38:1e:46:67:65:f3:87:73:e4:9a:2e:91:f9:
2b:64:4a:62:30:5f:43:9b:ff:a4:c6:20:49:d6:36:a8:ba:70:
77:16:39:1c:e6:a7:4b:60:a5:a5:79:f9:e1:65:a9:e7:ae:13:
69:4b:17:db:d4:22:43:1f:e3:18:0d:06:e1:26:c0:e3:a3:35:
6e:da:ba:e2:9f:2a:3d:c4:11:be:9c:ea:8e:c9:b2:1e:6d:ce:
b0:e6:9c:19:66:de:a0:40:d7:f6:aa:83:db:8b:c5:95:9b:06:
30:1a:ed:f0:04:59:d1:d9:11:b4:8c:1a:9f:f3:34:b1:d9:9d:
3c:67:70:8b:1d:34:75:13:d2:13:d8:5a:72:d2:3b:d4:1c:29:
d8:fc:7a:e8:c4:03:9a:ca:aa:3c:f7:c7:85:4a:c4:3d:0e:6d:
b0:99:5f:32:83:dd:5b:73:ab:10:b5:d8:f3:66:f3:0e:52:0d:
b1:2a:4c:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3
MDIwRTEwODMwHhcNMjEwODI0MTE0NTUzWhcNMjIxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTI0ZGJmMC03ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5EVW/GBGSahmoghvUEv84Ja6dLhOUhX/NZAD0g3WvYwNGy5E5APNJnXgoPFJ
mYN4HZG3BRQoZHSXAlwk7IlfJAM4l6PWANBhBcDVVnEaZYnHXNlO3lrYAO0VqftS
m56En031k8g/6Stw/K9kWgdsiu8rSu7Ul/iuGs97WLqjEQnWC2HFQpPqnfFA/vl7
sqzc073ZaGorACggMFuMbhKNejIqqh1fX1tXoRrQTk79S94dBX5LaG7gW7/n/Ah7
ibpYLKVVia5LEs7DHMEd7FJdlMxWAz5AjIPVcDyzFG+XJwxbvCaupdpahgm7LRIH
qvN04P28da3kzQHFP5bZ7vxahQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKl6XY0Z
MtbAk4wPwo2jujhpvHJ+MB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND
OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQ4MzQvNTFCRURGQzRDQzhEMTFFQUFGRkVEQjM2QzRGOUFFMDIvMjUzNDk2MjQ5
NUY1MTFFQkE2RDMxNzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtfTMwDQYJKoZIhvcNAQELBQADggEBAG3imMSboi3FRtsh
65xwtAVZiPt/eBwosrzoAzuk0mXxijaSF2eneX4AtYoknLlmB0XcHr/Yw08ZrEcp
MxehfPRocLgW4+CQh7eaYWu3OB5GZ2Xzh3Pkmi6R+StkSmIwX0Ob/6TGIEnWNqi6
cHcWORzmp0tgpaV5+eFlqeeuE2lLF9vUIkMf4xgNBuEmwOOjNW7auuKfKj3EEb6c
6o7Jsh5tzrDmnBlm3qBA1/aqg9uLxZWbBjAa7fAEWdHZEbSMGp/zNLHZnTxncIsd
NHUT0hPYWnLSO9QcKdj8eujEA5rKqjz3x4VKxD0ObbCZXzKD3VtzqxC12PNm8w5S
DbEqTIU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org