Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/AC6763542B2F11EC99451376C4F9AE02.roa
File: AC6763542B2F11EC99451376C4F9AE02.roa (raw, json)
Hash identifier: pOSmgBzdZlxH0PKlXCeEVAv6wAnA1M2sXg4bWyzFumY=
Subject key identifier: 85:68:D5:86:2E:2E:31:51:BB:38:AB:CB:A4:1D:49:44:41:8D:F7:88
Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial: 0327
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/AC6763542B2F11EC99451376C4F9AE02.roa
Signing time: Sat 11 Mar 2023 03:13:04 +0000
ROA not before: Sat 11 Mar 2023 03:13:04 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 14618
IP address blocks: 202.45.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Validity
Not Before: Mar 11 03:13:04 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640bf1c0-98e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:ab:64:3d:38:be:b1:30:4a:ca:27:f5:c2:
df:72:ae:2d:8c:48:9d:80:12:f3:a5:3a:0e:e0:84:
8a:87:a1:6c:3e:ed:fc:39:c8:59:aa:2b:39:85:56:
39:a5:3e:23:5f:17:6c:9e:db:15:14:f1:c6:bc:52:
24:57:e5:e5:01:29:db:68:8a:24:73:46:9d:d0:14:
78:02:3f:2e:16:a1:f6:b7:b3:2f:43:ba:f3:01:ad:
74:7f:5b:e5:41:fb:45:3f:52:e8:ba:fd:5b:75:19:
87:59:6f:20:2b:58:56:90:06:16:e1:7f:95:a1:c3:
82:26:97:47:87:eb:a8:9f:a7:3b:e9:45:90:35:8c:
65:ef:12:a0:83:42:a7:c2:fa:dd:be:73:69:57:56:
bc:25:a4:d2:03:c7:ed:04:82:bb:11:35:cf:b4:eb:
7f:36:53:ca:52:f9:46:60:00:b6:c1:ef:5d:31:0b:
1f:5f:8d:68:28:84:5d:cf:e4:a1:b2:d9:9c:05:f7:
eb:6f:f6:fe:98:6f:75:b0:6d:9b:ef:12:e1:69:94:
cf:34:58:a1:38:de:a3:e4:fe:8b:f2:d3:2a:d4:55:
15:07:d3:af:35:ee:9c:59:6c:05:22:92:6c:67:2e:
eb:71:19:00:8e:d1:a8:a6:00:4d:f6:39:f6:3f:69:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:D5:86:2E:2E:31:51:BB:38:AB:CB:A4:1D:49:44:41:8D:F7:88
X509v3 Authority Key Identifier:
keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/AC6763542B2F11EC99451376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.45.131.0/24
Signature Algorithm: sha256WithRSAEncryption
07:00:33:e2:77:2c:11:e9:b1:45:53:ce:19:4e:a6:1d:a4:68:
7d:1c:bf:45:e8:55:8d:60:9f:e1:15:eb:98:39:38:0f:6d:a6:
ac:a1:1e:b0:90:50:59:04:30:ff:2c:3f:f2:42:50:92:3d:a0:
04:7b:64:23:20:54:c5:c8:42:9e:88:60:d7:94:34:5d:b2:f1:
43:41:b5:d1:b0:06:f6:03:66:cf:90:73:a1:cd:44:5d:cb:b5:
0d:93:2d:0e:6d:8d:70:ca:c6:78:74:9f:6f:89:67:52:8f:2c:
b3:ab:5c:cf:cd:39:73:ba:8c:45:6d:1d:20:c6:68:c3:68:73:
6f:b2:ff:7f:77:f0:37:31:8f:bf:09:db:b3:34:12:6b:21:54:
53:5d:00:b5:30:49:3a:84:d9:89:67:1a:ad:4f:43:53:f7:a9:
33:f7:40:e3:d6:71:cd:8b:11:72:2f:b6:c8:f4:8d:1e:9f:88:
7e:1c:9b:c4:7c:ca:70:f1:64:a3:58:6c:43:59:d9:36:cf:4d:
9d:17:25:4e:04:50:02:56:73:45:98:c1:b1:39:2f:be:62:47:
17:72:84:98:f1:a5:50:70:63:0b:fa:15:07:32:53:d8:ce:47:
1b:11:c0:56:a2:b3:d2:ee:94:6a:a7:8e:a6:91:52:4d:b3:8c:
45:34:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org