Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6519A0E100411ED9A461882C4F9AE02.roa
File: C6519A0E100411ED9A461882C4F9AE02.roa (raw, json)
Hash identifier: QANF+XPWKRYkOsDwrI3qx+Wv+ovbMojm0bsyO5lXsh8=
Subject key identifier: 57:3A:6A:D4:09:FB:4A:9C:B0:1A:50:AF:9D:EC:77:A3:4C:72:02:05
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 325F
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6519A0E100411ED9A461882C4F9AE02.roa
Signing time: Sat 30 Jul 2022 12:40:22 +0000
ROA not before: Sat 30 Jul 2022 12:40:22 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 36421
IP address blocks: 202.3.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12895 (0x325f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Jul 30 12:40:22 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=62e526b5-42b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:80:5e:3a:6a:22:d8:48:9d:cd:f1:73:85:
0b:87:3b:07:d2:ef:80:02:ac:b0:29:9a:0c:1e:d2:
e8:45:03:0c:95:66:f3:ee:e0:8c:cc:e3:df:de:37:
37:6e:2b:04:32:92:f2:55:b2:21:e7:58:e4:b5:da:
18:07:18:0d:b2:5b:b3:9b:df:ff:40:a6:80:e9:d7:
1f:ca:5d:5f:33:66:99:0f:c1:20:b5:e3:27:10:91:
6b:37:ce:f4:ea:04:d4:c3:53:d3:1c:be:d5:bc:fe:
8b:3f:80:b3:a3:80:4b:48:1e:ad:2e:5f:d2:9c:5a:
09:94:0e:ca:a1:e5:b6:a0:86:5c:b7:a1:e6:78:a0:
a5:cd:a6:b3:4f:e0:29:f4:92:10:61:a7:62:fc:c0:
31:5b:1a:75:ff:9f:33:87:8b:f4:02:68:d0:0e:ca:
91:0e:6f:bb:01:4e:e1:03:1d:50:94:31:09:20:b4:
94:19:8c:03:b9:53:e4:05:03:10:22:ee:03:74:97:
c8:5c:49:41:ba:0b:15:77:7c:b6:fb:aa:50:48:3e:
f7:8b:45:d4:19:45:31:67:cb:6a:45:54:9d:9a:85:
f9:f6:fd:93:c1:48:e8:1e:94:e0:23:7c:b0:e2:03:
5c:d5:4a:83:8d:6a:8e:e5:43:a7:f2:02:7c:79:0d:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:6A:D4:09:FB:4A:9C:B0:1A:50:AF:9D:EC:77:A3:4C:72:02:05
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6519A0E100411ED9A461882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.3.185.0/24
Signature Algorithm: sha256WithRSAEncryption
10:72:47:96:b1:91:0f:d5:e7:0d:fb:9e:14:22:ea:ca:3d:12:
1c:0b:25:a2:26:0e:eb:14:d3:f9:ae:20:8a:d8:0c:3e:28:e8:
8a:a2:3a:71:90:85:2d:09:f4:ec:11:ef:3f:1b:d6:21:b3:39:
e5:cb:c5:57:fd:cf:7f:c4:78:da:6a:a6:fb:51:68:80:34:b1:
7c:9b:d8:ce:38:17:11:7b:ee:45:7b:c7:c4:a0:43:89:06:1d:
d0:d6:02:c7:3b:d1:3d:b6:e4:d8:3d:bb:09:8e:4e:0f:5b:69:
82:ff:fe:e2:ac:c9:44:d4:eb:98:e8:73:66:99:85:b6:60:eb:
9d:24:d2:6c:46:1b:bd:a1:ce:e3:55:ed:a5:34:72:f6:42:ab:
71:7b:b8:60:db:6d:ec:ec:0d:e0:88:42:c1:00:6c:83:4c:2a:
de:55:8b:95:1d:76:18:74:28:78:2d:64:a3:f0:64:69:05:03:
01:68:5e:25:75:ce:c5:c1:f5:8f:0c:39:b7:96:a2:a3:82:5a:
38:a8:2b:ad:cf:53:87:61:9d:40:2e:e2:ed:0b:fc:36:7d:32:
14:04:e8:83:c4:4c:d4:fd:44:e2:01:fd:d9:65:ef:fa:9e:79:
f0:be:45:c5:4c:62:2f:df:9d:b4:76:61:d6:2d:05:d6:a1:82:
98:c8:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org