Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/3093261C41D911ECBA62C976C4F9AE02.roa
File: 3093261C41D911ECBA62C976C4F9AE02.roa (raw, json)
Hash identifier: dtezp1350fGq3+krwKBWd66YXTuOUMxI9Mnp+vGbMSM=
Subject key identifier: E8:8C:6D:D8:D3:28:26:33:25:AC:CF:B2:88:60:4F:7D:FB:05:93:D9
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 03BC
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/3093261C41D911ECBA62C976C4F9AE02.roa
Signing time: Mon 24 Jan 2022 12:19:14 +0000
ROA not before: Mon 24 Jan 2022 12:19:14 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 18000
IP address blocks: 118.107.144.0/21 maxlen: 24
175.184.192.0/21 maxlen: 22
175.184.216.0/21 maxlen: 24
202.146.6.0/23 maxlen: 24
203.148.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: Jan 24 12:19:14 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61ee9942-13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:2b:20:71:58:c8:57:99:a5:56:a9:cd:84:
ed:0f:dc:fe:09:49:2d:4c:0a:5c:31:c7:a0:69:e2:
49:9e:af:aa:6b:34:ed:14:a0:d7:e4:87:6d:9c:ee:
e0:9d:88:a9:6b:f0:50:ac:01:ec:86:fd:9c:5b:c4:
61:52:b4:36:f4:b1:57:2f:45:7f:0b:fb:4e:63:1b:
b6:e6:c9:e7:74:ec:8a:fc:47:ed:ef:3e:39:02:c8:
d3:58:3a:ee:49:97:fe:0c:a3:4f:39:31:ca:8d:cb:
43:bf:22:56:9f:bb:af:9f:59:ee:5b:03:5a:5a:b8:
7d:fb:cf:c0:53:63:9a:fb:ba:6c:93:64:85:5f:0d:
ac:c0:b9:87:c3:d3:92:c7:99:de:78:8f:0f:be:9c:
6f:f5:65:eb:09:b4:36:a7:a7:46:3a:35:8b:8e:8a:
ec:48:5b:3a:16:37:8b:0b:a0:2e:28:d0:54:eb:2e:
4d:88:74:0d:47:fc:7d:4f:58:99:1a:62:fc:ee:51:
58:4a:1d:65:48:1e:2b:30:b1:6e:00:df:ff:e4:5e:
e2:b9:f0:a5:ca:fe:a6:96:d2:1a:3e:80:5d:5c:04:
25:58:ed:e8:61:da:f3:34:61:f3:46:19:c1:bb:53:
25:d4:4a:e9:03:77:86:08:f5:c6:fb:d9:df:fa:55:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8C:6D:D8:D3:28:26:33:25:AC:CF:B2:88:60:4F:7D:FB:05:93:D9
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/3093261C41D911ECBA62C976C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.107.144.0/21
175.184.192.0/21
175.184.216.0/21
202.146.6.0/23
203.148.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:1b:b3:28:09:09:bc:ff:52:36:6e:7a:d5:40:ea:9b:55:71:
c3:9f:b4:3d:ce:b4:35:dd:52:da:3d:92:9f:88:bb:e3:16:6f:
f1:b8:5c:20:fb:a4:90:30:42:61:c1:fc:dd:cc:8c:8b:a5:b9:
32:f8:1e:78:3d:53:55:05:b4:2e:89:a8:45:35:c5:08:2f:a8:
09:9f:c4:f4:51:c5:0e:16:9e:2c:43:95:de:99:18:d7:5d:8b:
c9:62:91:07:20:18:ca:24:89:97:6d:e6:52:79:8a:cf:86:70:
b8:90:63:77:ff:59:12:af:00:78:87:a2:3a:77:6a:3b:9e:22:
19:47:c8:6b:01:b0:7b:52:94:79:c8:e3:d8:09:24:77:65:0d:
ea:84:d8:fa:b2:4f:fd:6f:15:9e:3e:f8:8b:56:92:94:72:c2:
2a:6f:2a:76:74:b2:f4:a5:a8:01:2c:a2:9c:2c:7a:9c:16:ba:
86:5b:ad:29:87:d0:22:e9:5d:8c:8d:b9:12:df:58:d2:6b:c3:
fa:1f:9a:7b:d2:ee:83:68:72:af:ad:f7:32:28:01:a9:29:f1:
9b:ce:d2:e4:bf:68:65:05:6a:88:d4:6e:48:bd:91:2a:9f:0f:
88:bc:44:d3:a5:43:de:e4:fd:45:4b:ec:b1:ca:08:51:fe:69:
b5:7b:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org