Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BD873C6E2D211EB9F3CCE85C4F9AE02.roa
File: 3BD873C6E2D211EB9F3CCE85C4F9AE02.roa (raw, json)
Hash identifier: gZuDs1XBe1KFSK5l5ja8yz/5QmvU3fdFoYy0Ivz+/n0=
Subject key identifier: D5:CB:20:1D:EA:1E:CA:26:E5:9E:B4:DD:23:D7:37:E3:D5:02:3A:88
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3374
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BD873C6E2D211EB9F3CCE85C4F9AE02.roa
Signing time: Fri 02 Sep 2022 00:50:14 +0000
ROA not before: Fri 02 Sep 2022 00:50:14 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 209242
IP address blocks: 119.59.0.0/18 maxlen: 18
210.126.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13172 (0x3374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Sep 2 00:50:14 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=63115346-c145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:40:aa:f8:7e:d8:02:2e:34:cf:16:bb:73:f7:
c6:48:35:4c:bc:db:0f:0f:3e:34:19:2e:1d:2b:07:
81:dc:bc:08:36:da:8e:3f:53:9b:d4:f5:2f:75:18:
55:e6:37:95:27:90:e6:9a:ef:d1:76:21:83:5c:3c:
3d:63:1e:b7:91:8e:ed:7a:68:17:94:83:45:f3:5b:
63:a2:2a:18:1b:68:78:f7:e5:e1:00:2b:f4:9d:52:
14:74:6d:15:08:93:0d:c8:8a:da:27:9c:3b:51:a9:
1f:36:73:13:52:23:05:b8:2e:fc:52:00:41:b2:b6:
07:55:7e:cf:23:d4:b0:4f:f6:08:45:3e:c5:00:8e:
6c:63:11:88:db:a2:cb:c5:da:a3:7a:55:80:74:1b:
dd:3d:76:04:64:29:71:18:6f:59:f4:9c:4f:a9:97:
85:c0:4a:64:07:c3:06:35:52:20:d9:d5:b0:48:a5:
b6:56:75:03:5d:cb:88:8a:9a:67:03:a3:c7:78:c5:
fa:63:a3:24:cb:df:36:d9:d8:67:5d:cf:eb:49:cc:
5c:d4:a5:9d:c2:c9:72:9d:4d:ad:75:18:61:34:97:
b1:1c:11:ef:b2:f4:61:60:b0:89:7b:26:77:c3:46:
38:e2:82:bd:f2:c4:c9:ee:fa:fe:8b:12:a1:6f:21:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:20:1D:EA:1E:CA:26:E5:9E:B4:DD:23:D7:37:E3:D5:02:3A:88
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BD873C6E2D211EB9F3CCE85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.0.0/18
210.126.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:60:3c:ca:9c:be:8f:63:d4:f3:48:c9:70:c1:01:24:94:f9:
f2:4b:f8:56:7b:89:0c:71:cb:0f:cf:9c:c7:51:2a:66:99:ac:
9c:13:c7:e0:a4:bf:d1:81:a6:e7:18:bf:64:78:f8:13:2b:4b:
b2:a9:72:0f:91:cf:3f:2d:77:1f:dc:3b:7a:84:b9:18:aa:96:
83:4d:a7:bb:1d:8c:6b:9d:f4:10:11:bf:b0:cf:6c:07:71:3f:
d3:ea:80:2f:0e:8b:ad:81:d0:e9:39:92:35:89:70:17:d5:0f:
3d:46:e3:c9:54:6e:12:49:b3:f6:c2:4a:b1:a0:27:04:ed:f2:
aa:49:99:e3:be:df:cb:ec:57:18:4f:72:cc:60:35:36:a5:e7:
1a:58:9d:12:88:11:49:dd:c2:b2:6c:03:c6:f2:d8:6d:3b:46:
89:94:84:82:18:c5:ca:ef:b3:44:9b:60:29:05:c4:3b:1d:6b:
2a:0c:5a:ed:57:0b:d2:d4:6b:c9:56:ae:30:ff:72:38:dd:ce:
1a:99:8e:ce:a1:a6:ec:d7:fd:a3:c0:b8:f8:51:71:79:a4:58:
c9:ec:d8:1e:c8:a4:36:48:f2:4c:42:b9:51:30:e9:33:fe:09:
cb:ad:4b:45:1a:76:98:0a:c7:39:b3:ae:57:7a:7d:5b:98:2c:
60:3b:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org