Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/5B38850C05A911EEAAC9A54DC4F9AE02.roa
File: 5B38850C05A911EEAAC9A54DC4F9AE02.roa (raw, json)
Hash identifier: sw+zYlrJpkYAWMBVubkHqCNz2HQSVjgqetvZH8H+y8o=
Subject key identifier: 32:4A:A6:15:5E:42:5C:83:9D:A8:96:8C:2E:E8:09:40:D3:24:BC:26
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1992
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/5B38850C05A911EEAAC9A54DC4F9AE02.roa
Signing time: Thu 08 Jun 2023 03:05:43 +0000
ROA not before: Thu 08 Jun 2023 03:05:43 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 9929
IP address blocks: 218.24.22.0/24 maxlen: 24
218.24.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6546 (0x1992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Jun 8 03:05:43 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64814587-7142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:23:41:21:4d:b6:d1:03:87:a2:4a:2b:47:
af:2c:19:db:c9:bc:fd:52:e1:59:9e:b4:80:fa:c3:
f5:b6:ce:ba:cb:53:13:4f:05:b1:00:84:30:d4:86:
bb:09:15:9e:6f:2f:59:cb:48:6e:92:c1:38:28:89:
da:20:3c:04:41:14:c3:7b:64:a7:44:e3:9a:07:e3:
96:58:8b:99:00:1e:10:a8:c4:3b:f2:f1:95:36:25:
ef:c7:ba:e3:a6:f6:29:8e:1c:ad:56:c4:54:0e:4b:
8f:d6:fa:05:ca:96:12:85:c0:cf:a0:5f:ad:77:f9:
40:4c:4d:6b:89:d7:03:c8:85:e7:d7:d8:29:df:e8:
ad:df:d9:65:6e:5d:e1:90:c0:08:39:ec:15:dd:3b:
de:e4:7e:0c:a7:03:e6:83:d6:09:7d:52:6d:37:cd:
d1:7e:31:0f:2d:f4:6b:6a:b6:5e:4e:7e:d6:f6:4a:
b4:ec:65:29:dd:c8:5d:6f:4d:7a:06:71:2c:ca:8f:
65:28:3b:73:70:28:f8:86:26:d7:b6:83:1a:46:48:
4d:a7:e2:7e:eb:20:9e:79:c4:a1:a7:6f:1e:d5:64:
a3:ac:cb:cb:0d:07:dd:e9:1a:f9:76:e3:7a:6d:2d:
75:cc:c4:89:5f:da:ed:5a:96:7f:fc:e3:9b:c7:5e:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:A6:15:5E:42:5C:83:9D:A8:96:8C:2E:E8:09:40:D3:24:BC:26
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/5B38850C05A911EEAAC9A54DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.24.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:9c:5a:24:ca:ee:af:9f:f7:62:eb:7a:5e:f5:a3:9d:2e:1e:
c4:45:62:af:91:ef:73:8c:0f:61:86:2e:66:bd:36:3d:e1:4e:
09:10:23:6f:ab:4a:1a:df:eb:4c:46:53:b5:6b:e1:e9:b8:ea:
be:62:8d:b7:10:fa:d2:fe:b0:8d:e8:3b:9c:6f:de:aa:47:37:
cd:6f:ce:96:14:21:5c:50:4e:62:ae:b5:53:a5:b4:91:70:9f:
77:38:22:3d:47:a8:4a:1b:31:da:03:bd:a6:ca:a2:af:0e:38:
d5:f3:64:a0:01:b3:b9:24:e2:60:77:65:85:9c:f4:cd:14:87:
9f:79:69:35:76:95:21:bc:24:7b:c2:ee:f6:f0:6a:00:c1:b3:
7e:f1:f7:ec:42:66:45:31:e0:52:19:a0:78:98:69:73:61:db:
83:02:1e:c0:7c:d8:73:40:01:c4:dd:3f:6c:11:03:b4:77:83:
68:4f:96:51:e9:dc:6d:34:01:c7:c3:5f:54:38:eb:cb:0d:eb:
26:69:72:1c:86:a8:2f:07:be:5f:c5:6c:31:ef:ad:fd:00:9b:
6c:cb:a3:f7:16:23:56:ae:b9:00:00:d3:4d:6b:24:27:a4:93:
c3:36:d7:62:fa:c5:a1:20:d3:99:70:ad:28:bb:0b:43:4c:8b:
4d:d9:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org