Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F2CC97D2C51411EB8C2F0E10C4F9AE02.roa
File: F2CC97D2C51411EB8C2F0E10C4F9AE02.roa (raw, json)
Hash identifier: CUEeXKRESWIrfSzEUKJIKO2rr//QwvnCbJDvAJmuRw8=
Subject key identifier: 1F:AB:ED:31:FB:81:2D:74:34:68:3B:05:B2:B0:9A:AC:F0:0E:47:29
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 02A8
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F2CC97D2C51411EB8C2F0E10C4F9AE02.roa
Signing time: Thu 24 Jun 2021 11:34:18 +0000
ROA not before: Thu 24 Jun 2021 11:34:18 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 58470
IP address blocks: 202.168.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Jun 24 11:34:18 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60d46db9-d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:ab:a0:83:af:84:e7:ff:04:da:43:24:72:
6b:d7:16:35:7a:97:30:21:fd:a5:de:28:ca:c0:40:
74:65:ec:c3:9e:6f:e1:77:1c:51:97:bf:2e:1a:6c:
30:9d:b2:17:00:d3:da:34:e4:d0:d2:7d:aa:b8:3f:
b8:a7:00:7e:61:b4:cc:f8:e2:b5:dc:04:36:26:10:
76:b8:25:08:b9:de:60:0f:ba:89:dc:b2:40:7e:38:
3f:96:22:1f:f4:70:11:9d:94:c6:03:8e:45:ff:07:
5b:55:c1:d5:c3:d6:08:23:64:5f:3a:32:4c:30:e7:
bb:11:bd:6b:05:8b:2f:95:78:71:ff:1a:1c:81:5d:
e9:ee:64:fd:df:b4:c7:f8:51:34:2f:d2:7b:1c:ca:
67:50:f1:a0:68:78:55:89:bb:23:6e:bc:29:ac:dd:
a0:e7:0e:ce:03:8c:80:9d:47:a1:20:9d:d6:2d:b7:
bd:18:a5:ec:b9:38:fe:04:00:4d:b7:7d:37:c9:f9:
32:b0:5e:dd:51:29:4b:59:20:f8:12:e6:89:e9:bf:
12:7e:87:b5:c5:9c:22:72:4e:dc:1c:12:b0:08:dc:
83:04:73:4a:73:8b:31:9c:2d:59:85:25:f2:13:5a:
5d:1a:ce:82:ac:8f:d2:75:7b:f1:d8:cf:36:82:bd:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:ED:31:FB:81:2D:74:34:68:3B:05:B2:B0:9A:AC:F0:0E:47:29
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F2CC97D2C51411EB8C2F0E10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:10:f7:c8:1e:a1:d1:dd:6b:23:a7:45:ad:d5:5d:08:90:
84:19:63:bf:47:bd:71:04:13:7b:2a:cf:76:0e:c2:18:83:5c:
ad:df:0b:f3:62:0f:68:a8:80:aa:80:6c:37:7d:e3:39:eb:95:
8c:6f:49:9e:a3:d4:3c:58:5b:5d:54:71:c8:4f:cf:d9:34:25:
8b:f1:39:cf:3f:0c:89:4e:06:01:68:82:8b:f8:7c:d1:78:e8:
7b:52:19:6b:15:11:0b:3e:b7:95:a9:93:11:e1:7d:b9:09:fd:
cf:19:f2:ec:8a:94:0a:b6:be:d6:7c:e3:c7:84:08:25:46:85:
4f:49:7a:2a:fb:fd:bb:02:0e:ed:57:27:ea:d0:cf:a2:68:5a:
be:27:7c:57:67:35:bb:65:5d:e2:62:46:a0:1e:ac:16:1f:df:
6b:7c:ea:c0:5b:67:a4:40:55:b5:ed:f2:e7:f9:82:2d:f9:d0:
d5:f7:95:13:59:6c:9a:9a:ce:75:8f:d9:29:3f:80:3a:76:59:
04:fe:e4:b2:26:ca:3f:26:12:12:6c:62:44:75:89:0b:94:40:
2e:e9:5e:fd:62:08:be:80:19:c6:61:ad:25:23:3f:31:e5:4a:
22:21:3a:07:d2:76:40:3c:e2:77:1f:3b:50:59:bb:fe:cc:07:
52:c0:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org