Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
File: 9CBB9546C2BB11EC8174106FC4F9AE02.roa (raw, json)
Hash identifier: eLfW7poLqFOnJuHqaXlUhvtyFCsqdqA7JFx7jARu1iM=
Subject key identifier: F4:1C:09:93:9C:37:CF:22:80:34:FE:37:C7:25:B7:E1:2A:D0:20:F6
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 026F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
Signing time: Sat 23 Apr 2022 04:12:39 +0000
ROA not before: Sat 23 Apr 2022 04:12:39 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 9331
IP address blocks: 150.107.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Apr 23 04:12:39 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62637cb6-7eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:b2:40:cd:84:78:a0:2d:f2:1d:d0:93:39:
14:88:e0:0a:15:a0:ae:f0:18:0d:f6:68:ee:6a:4f:
c4:7c:d7:6c:c5:3c:32:95:28:55:67:a9:7a:df:29:
a3:4f:f7:e1:32:59:49:17:01:5a:35:12:19:23:e0:
74:d0:55:c5:02:63:d9:a3:bf:5e:42:cf:3d:3a:06:
dc:4e:e3:56:79:af:48:aa:bb:ea:a4:b6:6f:d4:b5:
c9:9c:26:b0:07:f1:07:57:7e:53:e5:67:71:00:51:
b4:0c:7a:6c:d0:b4:e7:98:a2:3e:76:51:58:c9:0d:
aa:65:d5:6d:2a:8e:2f:b4:8e:61:15:bb:7e:47:31:
9b:c1:46:40:f5:3f:83:f4:85:a5:c7:da:e1:1c:40:
41:68:0f:84:08:5a:de:bf:f1:a2:6c:b6:04:5e:69:
5b:c4:bd:4e:28:f6:e8:4d:2b:98:77:58:be:bf:4e:
68:16:10:d8:d0:1b:eb:7c:a4:5f:53:7d:58:25:ba:
69:32:8c:71:35:ae:66:cd:09:a0:c2:57:8c:a9:12:
f4:e3:d7:b0:84:1f:a1:47:9e:ae:cb:cf:f8:f3:01:
0e:ec:71:72:ec:b4:e7:ae:a6:b3:76:cc:39:a1:93:
80:8c:14:2a:a4:cd:e1:8a:56:d8:ec:00:f8:a8:f3:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:09:93:9C:37:CF:22:80:34:FE:37:C7:25:B7:E1:2A:D0:20:F6
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:18:c0:00:71:65:75:ca:7f:ea:80:ce:ce:53:b6:2e:3e:8b:
fd:ef:6c:8e:62:dc:81:39:35:17:3a:21:4c:d4:f2:27:83:c9:
8f:a5:38:ec:54:9a:64:07:11:24:9c:7d:a1:ae:80:ed:2c:45:
dd:67:26:e0:02:66:6f:09:6c:01:74:75:9c:9b:62:02:ae:e6:
a7:00:e6:6a:f4:bc:04:bd:fd:10:91:db:c7:4e:e2:0b:64:30:
56:6d:72:c1:af:a3:e4:3b:85:25:e3:cf:e2:49:a9:19:cb:c5:
5c:17:70:4d:f4:08:3e:92:76:c5:75:0a:ca:36:61:3b:e7:87:
c1:5a:6b:54:3f:9a:26:7e:8a:b6:2c:4a:a5:99:55:9c:74:d9:
ae:ed:24:8d:bd:fa:69:fb:80:33:5c:63:52:2c:26:44:d7:49:
8f:c4:7e:a6:4e:9e:98:ae:0e:6b:8f:cb:7d:da:05:71:dd:6d:
04:75:eb:93:5a:84:b1:e3:f4:56:51:20:2c:42:c7:98:2c:15:
a3:a6:73:d3:3b:bf:6a:f5:5c:5c:57:35:7a:83:22:b3:b1:58:
74:15:cf:77:0a:4b:43:fe:7c:7e:16:ca:fe:05:8b:a4:81:e1:
0f:c0:e2:de:c6:c6:65:fb:6e:6c:2c:0f:a5:7d:1c:63:1c:fd:
0d:05:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org