Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/E1FF7552B50D11ECA297F383C4F9AE02.roa
File: E1FF7552B50D11ECA297F383C4F9AE02.roa (raw, json)
Hash identifier: IEkuCjvdGZWOwRtY6mkuGbPyXEJZgvsMOwC4CYuVs40=
Subject key identifier: BC:B7:0C:C7:50:2D:F1:C4:B2:79:35:C9:78:2F:48:E9:21:A2:AE:19
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0B32
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/E1FF7552B50D11ECA297F383C4F9AE02.roa
Signing time: Thu 18 May 2023 20:00:16 +0000
ROA not before: Thu 18 May 2023 20:00:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137453
IP address blocks: 160.238.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2866 (0xb32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2
Validity
Not Before: May 18 20:00:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646683cf-b5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:b4:a8:3d:ce:46:fc:f6:64:61:15:fc:20:
fb:51:f0:a6:e4:4e:b6:89:e9:46:aa:30:28:c9:38:
53:a1:bb:80:49:50:6f:ee:90:2a:63:c2:9f:a0:15:
12:a2:91:1a:2f:47:85:1e:8f:d4:51:cd:6a:07:58:
70:65:60:2c:02:1b:36:c9:c7:0b:a7:4b:9f:d7:a8:
aa:85:b9:28:98:fa:5d:2f:cb:f1:05:de:8e:73:17:
e3:d2:c5:dc:39:e4:e7:37:36:13:68:27:d7:4e:b5:
03:2e:ff:c3:b9:18:e2:d8:2b:d7:3f:e5:28:19:47:
34:d0:24:c1:19:6e:2a:19:5d:64:37:0a:64:89:f7:
a7:31:64:56:3e:b4:6a:91:75:35:9e:1c:07:64:7b:
a4:a9:42:82:33:18:09:6e:48:67:64:d0:c9:82:56:
20:f9:4f:f4:f6:2f:52:d7:01:3f:d4:fd:0f:8b:ec:
cd:ce:27:85:02:28:d8:9b:6e:50:5f:70:57:f7:55:
7b:35:5e:3f:22:81:81:40:ff:35:0c:d1:63:90:3b:
26:0e:01:e9:f5:99:db:a0:88:f4:58:ea:45:ad:64:
61:b1:f7:aa:24:92:93:50:cd:0c:2e:e5:06:5d:79:
e3:4d:19:02:b3:e6:95:3f:fc:43:0a:98:48:a5:63:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:0C:C7:50:2D:F1:C4:B2:79:35:C9:78:2F:48:E9:21:A2:AE:19
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/E1FF7552B50D11ECA297F383C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.238.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e2:13:08:8a:8f:49:80:79:ce:ed:6f:a6:2b:d7:fa:c2:5a:
f5:ed:ff:ac:5e:dc:d9:ea:49:3a:3e:48:ec:6f:a4:e9:ac:23:
ec:ee:7d:a1:56:02:8a:3f:37:45:c4:b8:e2:77:f7:3f:c2:e9:
73:86:f3:a5:37:e9:44:8d:4b:58:6a:4c:e7:c7:ca:14:60:dd:
c8:c0:61:16:7c:0f:d3:a9:31:a7:fe:c9:2a:bc:50:ac:97:07:
9a:23:e4:08:92:81:94:14:1c:84:93:0e:59:6d:71:ed:7d:ab:
a0:01:dc:24:ad:2c:fe:cf:a6:37:d0:f7:ac:06:bc:2d:61:be:
a4:5e:eb:b0:45:3a:79:cd:41:ce:a3:74:63:2a:6e:3f:ed:81:
86:88:dd:b6:06:61:8b:6a:be:bc:bd:00:46:e7:dc:f0:47:e3:
e8:aa:2e:82:f6:8b:cf:2b:de:e0:47:e3:bc:14:75:b9:11:c2:
39:04:45:67:b2:8f:6f:51:b4:da:5d:cc:4c:26:fa:9c:5f:e6:
0f:a7:79:54:95:6f:90:04:59:3e:d8:64:e5:5a:66:19:09:5c:
d0:e7:5c:f3:8c:97:a1:4a:0e:32:fd:fd:db:c5:b9:2d:37:67:
ca:39:ac:2a:7b:45:a6:1e:68:30:0e:82:ce:99:94:7c:64:cb:
bb:e7:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:02 2025 by rpki-client