Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3DD912CCD5BE11ECA8BE4666C4F9AE02.roa
File: 3DD912CCD5BE11ECA8BE4666C4F9AE02.roa (raw, json)
Hash identifier: AbCIX1U3/WMh6skFzLU6j8cIXdai1h92m+K+V4/e4g0=
Subject key identifier: 9D:E1:05:02:1C:46:A6:24:4A:98:CC:E9:E0:69:B8:80:1F:C3:6D:A8
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0554
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3DD912CCD5BE11ECA8BE4666C4F9AE02.roa
Signing time: Tue 17 May 2022 08:49:20 +0000
ROA not before: Tue 17 May 2022 08:49:20 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 21859
IP address blocks: 164.90.70.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.73.0/24 maxlen: 24
164.90.75.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.112.0/24 maxlen: 24
164.90.123.0/24 maxlen: 24
164.90.124.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.168.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: May 17 08:49:20 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=62836190-59f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:2a:0a:f7:78:4c:2e:06:28:1c:8e:35:50:
e3:72:f8:0a:ff:73:58:15:17:4b:16:5a:d7:5b:4f:
dc:88:84:61:e6:99:06:d8:2a:9d:f3:73:99:6c:ab:
22:a7:f8:70:20:f4:0d:97:9a:14:7b:82:f1:a5:bf:
83:43:2e:cb:d8:cd:49:71:c2:1c:fb:11:a8:35:7d:
9b:4b:3d:86:b0:17:06:b2:3e:73:c4:aa:13:0c:1b:
d9:5b:ed:c8:8b:36:6b:40:ca:c3:19:ab:e4:38:8f:
ec:ea:25:ca:2b:ef:bd:0a:4f:f0:f9:9e:35:76:89:
3e:17:47:2d:df:ad:a2:c0:2d:c3:14:67:fe:8e:98:
05:50:b6:b8:0d:84:ce:f8:44:65:1a:bc:ea:19:f0:
89:6c:d4:a6:fe:d9:82:85:a9:f0:6a:2c:d8:49:b4:
17:4c:82:3e:a8:83:fc:5a:ac:28:84:09:3f:4f:3e:
6e:22:b4:5e:da:96:91:e8:74:da:65:87:bd:eb:e7:
a8:e8:3c:e9:1a:11:a6:15:70:6c:81:eb:e2:dd:5d:
e6:1e:e4:77:f3:f8:42:de:bf:40:c4:07:a8:10:6d:
bc:ef:f8:27:32:94:34:02:02:ad:9a:26:fe:0b:50:
b2:e1:66:5c:3e:66:f1:67:9a:40:f8:68:e3:a3:bd:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:05:02:1C:46:A6:24:4A:98:CC:E9:E0:69:B8:80:1F:C3:6D:A8
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/3DD912CCD5BE11ECA8BE4666C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.90.70.0/23
164.90.73.0/24
164.90.75.0/24
164.90.88.0/24
164.90.97.0/24
164.90.102.0-164.90.104.255
164.90.112.0/24
164.90.123.0-164.90.124.255
164.90.127.0/24
202.63.39.0-202.63.40.255
202.168.111.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4e:ec:da:43:70:76:2b:50:c9:57:bc:dc:69:49:ff:f6:8a:
61:2f:f7:dd:d7:97:24:81:89:57:ce:a9:4f:cb:51:85:d2:cb:
57:fd:18:20:4e:4b:a2:c7:90:74:0b:c0:ce:55:98:53:b3:17:
e7:7c:bb:9e:a7:43:ec:6e:e9:f4:e5:f4:18:fd:c0:fb:dc:8c:
68:01:1c:5e:06:b1:05:47:af:8c:12:31:dc:ec:69:a6:5f:0e:
d5:e1:03:e6:05:c3:31:93:08:29:04:32:33:97:20:22:e5:8e:
10:cc:ed:89:97:4d:6d:5f:9d:72:05:04:c7:45:44:cc:a9:89:
1e:f8:7f:13:1f:bc:40:21:1e:8b:7b:35:e4:12:cb:ec:c4:e2:
14:5a:06:9c:9d:af:56:8d:8e:d8:95:e9:fe:dc:bf:7a:f3:31:
b1:0f:e0:fe:57:06:f4:b3:2c:63:98:fc:60:9a:a4:d8:7d:64:
55:b7:4e:59:4c:0a:9d:26:5f:c6:8c:95:18:a8:c6:a0:7a:29:
d7:1d:78:31:9e:e7:a1:a5:9c:c4:80:8e:fe:a2:74:b8:83:ff:
64:21:ce:a9:21:88:12:6c:59:0a:32:d5:3c:4c:4f:f1:60:5d:
89:9d:5c:f4:d7:f0:47:88:55:29:69:d5:1a:60:78:63:44:c4:
ec:c0:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org