Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/698643ACE10F11ECA7A2127AC4F9AE02.roa
File: 698643ACE10F11ECA7A2127AC4F9AE02.roa (raw, json)
Hash identifier: w1XluBwP+oBdX50EmIx6Z5aCoXd5r8Mb5IzT6mR+c+U=
Subject key identifier: AD:41:97:87:3E:72:4C:8A:A5:AB:16:91:F9:E1:05:59:B7:87:12:D6
Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial: 029C
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/698643ACE10F11ECA7A2127AC4F9AE02.roa
Signing time: Tue 31 May 2022 18:28:06 +0000
ROA not before: Tue 31 May 2022 18:28:06 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 55933
IP address blocks: 43.248.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Validity
Not Before: May 31 18:28:06 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62965e35-a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:ad:7e:86:94:dc:5e:eb:03:2e:b7:9f:53:
7f:b8:25:80:54:91:83:2d:42:e1:b4:47:f3:6b:ce:
ae:66:2e:12:c0:bc:5a:a5:98:ad:76:22:b1:61:4c:
c4:f2:4f:03:64:f5:71:50:8e:1b:c9:97:94:61:d4:
e2:fd:5d:e4:ba:b8:2b:64:92:3a:81:cb:2e:f3:9d:
8a:33:0f:93:4c:5a:59:ad:84:fc:16:e3:5b:4f:43:
0b:1a:06:7c:20:b7:81:ce:4d:1c:fc:d6:9d:1f:a7:
0d:b0:ea:94:bc:e8:33:42:b5:41:ba:88:77:5c:5d:
ae:76:cc:67:d0:e6:8d:72:34:82:d1:9e:0f:28:f9:
50:f1:48:78:40:d4:9e:d4:d6:c5:86:2c:72:5c:fd:
53:c8:27:4c:53:04:a6:0a:ff:6a:da:d2:18:99:3d:
3d:07:c8:a8:d5:e5:e0:04:55:32:73:f1:71:82:73:
02:ec:57:77:e2:bc:86:06:8e:33:08:28:8c:0c:df:
4a:bd:f7:dd:1d:11:5f:91:17:00:d0:6f:2b:7c:99:
e6:1d:92:90:64:7e:ab:c7:f1:38:2c:23:66:2e:89:
b6:bf:c5:5f:40:ae:a7:bb:bb:05:c4:9b:61:e4:19:
97:d2:bd:8e:a4:44:31:d2:b2:fa:2c:12:a9:bd:7f:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:97:87:3E:72:4C:8A:A5:AB:16:91:F9:E1:05:59:B7:87:12:D6
X509v3 Authority Key Identifier:
keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/698643ACE10F11ECA7A2127AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.8.0/23
Signature Algorithm: sha256WithRSAEncryption
30:86:a9:2c:d3:87:30:60:0b:47:1c:f7:a9:2b:77:65:3b:b2:
26:02:f5:06:4c:83:3f:71:85:25:cd:50:f6:8e:79:f3:b5:fc:
74:c5:19:3c:85:ad:3a:40:09:71:31:2c:70:56:df:d2:06:8d:
13:2f:de:29:79:b4:84:68:82:52:c9:72:e0:b9:99:d7:f6:d3:
c1:e9:0d:c2:48:96:d0:36:cf:fb:03:54:4d:5e:53:d5:a4:99:
4f:72:4c:01:47:77:5c:95:33:13:92:77:e4:d5:49:e4:ed:20:
1f:96:e7:36:40:b4:92:74:70:b5:1d:5d:66:f9:d3:1a:83:bd:
e2:06:1e:b7:75:3d:77:b4:7d:45:9f:3e:31:6c:4a:74:a3:57:
61:37:10:39:62:5b:27:11:4f:10:d2:66:54:a5:c0:80:21:30:
e7:57:21:b5:76:a3:28:0f:af:87:fb:e5:87:bb:bf:39:c9:42:
f1:e1:5c:40:a1:16:5b:70:57:6a:d8:35:df:44:cd:e4:84:66:
14:58:57:30:0c:b6:34:72:67:a1:db:a3:06:ca:1d:1b:fa:62:
eb:5d:15:55:bc:53:a4:95:8b:c8:58:4b:e8:f0:7f:ee:10:99:
05:b0:39:bf:51:68:6d:16:69:f3:63:68:92:1a:39:dd:b8:27:
d6:7e:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org