Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/09C8D0E0B45011EE8CDBB61BC4F9AE02.roa
File: 09C8D0E0B45011EE8CDBB61BC4F9AE02.roa (raw, json)
Hash identifier: 7im10Y3N/XqAFeRMKuEEqDnVD349XLyiCRq9LIIilLw=
Subject key identifier: C9:E4:4E:52:55:80:AF:06:F5:B8:0A:77:0F:48:56:76:06:40:A6:B9
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 32E7
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/09C8D0E0B45011EE8CDBB61BC4F9AE02.roa
Signing time: Tue 16 Jan 2024 09:17:15 +0000
ROA not before: Tue 16 Jan 2024 09:17:15 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 1239
IP address blocks: 122.8.16.0/22 maxlen: 22
122.8.32.0/22 maxlen: 22
122.8.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13031 (0x32e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jan 16 09:17:15 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65a6499b-9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:70:c6:4a:91:6a:5b:7a:d0:86:3b:7d:61:
31:57:c7:42:0d:d9:64:29:2c:bd:be:fe:be:3f:3d:
b0:26:ba:45:a4:5e:12:16:08:d8:a2:be:b7:ca:74:
59:53:d4:81:28:31:65:6e:2c:44:68:4e:6b:cb:4e:
9d:4a:04:00:ab:64:a6:e7:53:a0:77:1e:46:0a:7f:
fa:d5:3e:ca:b6:20:f4:16:16:d1:ba:f9:3d:a2:1d:
63:5e:f7:08:79:aa:6c:3b:36:c7:80:75:00:6f:1c:
f1:c7:9b:0f:5f:7c:69:3a:41:40:65:a8:1c:b6:0a:
c1:bf:3d:8c:1e:18:16:e1:1d:cb:ca:43:3b:68:e8:
8e:20:f9:b8:4f:df:db:f7:23:4c:81:30:1d:02:18:
8f:0c:6f:e5:5d:00:58:0b:14:7e:59:a7:11:ec:da:
0c:cd:35:90:db:1e:2b:a2:bf:49:f1:c7:23:1b:a4:
11:a1:18:88:ec:26:12:5c:a5:5e:a1:10:4d:b6:c2:
ab:f6:42:56:b7:16:e0:52:95:cc:5d:69:a8:5b:36:
dd:1a:39:55:7b:d6:1b:ed:0a:2d:5b:32:cb:7c:2d:
63:77:cb:b3:b1:c0:9a:45:cb:fc:19:fb:6c:c8:98:
72:95:0b:44:3b:e2:4b:cd:a9:b1:e3:63:27:20:b0:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E4:4E:52:55:80:AF:06:F5:B8:0A:77:0F:48:56:76:06:40:A6:B9
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/09C8D0E0B45011EE8CDBB61BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.16.0/22
122.8.32.0/22
122.8.116.0/22
Signature Algorithm: sha256WithRSAEncryption
79:37:75:bb:d8:a3:29:38:c1:1a:32:71:92:82:28:e2:dc:92:
47:ff:6e:9d:ba:cd:63:18:77:4c:12:92:c2:d9:17:ee:55:fd:
bc:9f:49:ff:48:e2:3c:f2:6a:0c:36:72:7c:ac:b5:77:38:12:
cf:ca:ae:46:26:27:69:c1:b0:f3:d5:39:03:6f:52:f6:33:f3:
bd:b0:52:93:6b:64:ea:0b:ee:f4:b0:07:00:2b:5a:c2:c6:4c:
ad:25:8a:9c:0b:0c:2f:fc:1f:f1:31:3b:d5:35:c3:74:80:14:
07:24:14:62:ee:bd:87:e6:df:20:e1:3d:f9:fc:3e:d0:b1:69:
45:38:f0:8f:15:79:02:e9:83:cc:d7:c6:d8:0a:46:e7:a2:e4:
87:94:83:7a:74:9c:95:85:10:72:d2:ed:f8:08:53:0b:80:6f:
ab:a8:9d:62:34:df:c2:42:ef:ae:97:07:6e:cd:e5:a6:17:ed:
cc:23:9c:71:7e:d5:7a:bf:a9:14:fa:ea:60:03:ba:75:8c:0f:
06:d4:06:17:27:40:b3:27:e8:71:20:2c:6f:4e:08:a5:e8:ee:
a4:5b:e5:a6:05:89:1d:ec:4d:e8:34:5e:0a:1e:e2:d7:e9:03:
fb:12:de:6f:db:35:d8:d5:3d:51:28:f8:46:3b:99:df:25:14:
f9:b8:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org