Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
File: 234783E49DE711EC9E35515BC4F9AE02.roa (raw, json)
Hash identifier: khSQwSPyItbMY0pAYXW8OOLmM0wt5umiHX7zjjNw1VE=
Subject key identifier: 80:DD:00:60:98:37:CF:22:49:47:9D:A5:FB:9A:E2:F0:38:D2:CB:5E
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 2FD1
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
Signing time: Mon 07 Mar 2022 07:21:00 +0000
ROA not before: Mon 07 Mar 2022 07:21:00 +0000
ROA not after: Sat 28 May 2022 00:00:00 +0000
asID: 7029
IP address blocks: 118.188.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12241 (0x2fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 7 07:21:00 2022 GMT
Not After : May 28 00:00:00 2022 GMT
Subject: CN=6225b25b-003e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:23:d2:49:e8:db:44:cd:2d:1f:d7:f2:c4:
75:5d:cf:98:37:94:7a:59:53:f9:af:8f:5a:38:91:
12:9a:7d:cd:0b:76:de:c5:28:76:8c:06:5e:82:1b:
77:91:9a:30:2d:d4:77:13:6a:44:6c:91:fc:55:de:
e2:59:ad:0c:a3:23:93:52:54:ee:81:c8:be:94:0f:
20:e4:14:a4:b1:7d:21:72:bc:e3:e7:53:9c:2a:99:
6f:97:00:1b:6f:62:10:af:a4:4d:bf:dd:62:b3:e3:
fe:83:0e:68:98:dc:66:d5:17:03:ee:ff:45:93:35:
bc:a4:21:68:4b:21:9b:29:d4:73:bf:dd:50:5f:93:
d2:8d:a3:1f:75:34:3b:a5:c8:86:bc:45:f3:46:b6:
d8:97:d5:bb:76:43:c2:05:16:a4:24:a9:52:d5:e1:
f3:6e:ba:83:fd:85:e3:ab:e0:e2:67:a8:da:17:05:
0f:e3:cf:71:4d:7a:69:ee:50:32:45:53:e9:e8:a8:
91:35:1c:79:4d:4b:37:8d:ef:fd:a3:bc:65:a5:0a:
e1:d8:45:c9:57:0b:08:ac:3f:77:21:76:44:be:b5:
94:88:30:3e:ca:3b:06:ea:4c:f0:e5:3b:00:91:92:
46:fb:6a:19:f0:d2:3e:7b:e9:d8:b5:9b:30:a3:74:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:00:60:98:37:CF:22:49:47:9D:A5:FB:9A:E2:F0:38:D2:CB:5E
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.188.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d2:4e:89:86:39:9e:54:dd:34:b7:7b:2d:bd:6f:a1:e8:60:43:
74:2e:18:3f:86:70:3b:c3:9a:31:21:4b:bd:5d:28:ca:0a:3e:
ed:d2:f2:bc:c2:85:c0:a4:40:2c:d3:0a:32:48:e2:18:a3:f5:
77:63:42:75:96:5d:e2:16:0a:d3:29:7e:8a:dc:1b:e0:c7:83:
62:a0:75:ee:e3:48:f1:16:57:84:81:64:34:c6:76:ee:42:68:
e4:29:70:57:d1:aa:ca:69:65:99:ce:f1:df:b3:ca:4c:b1:ee:
ba:ad:b0:51:6b:9c:42:72:ee:dc:44:df:7c:be:ad:e4:f7:58:
56:0a:98:0c:28:2b:79:c9:c2:99:30:43:34:74:a0:d0:5c:70:
0e:1b:70:36:1a:51:56:1b:40:b6:52:c6:2b:56:78:34:87:36:
07:45:e4:0c:95:d6:53:08:92:52:35:3d:78:a8:5d:c9:41:b2:
b2:ee:b7:30:f7:57:19:f4:4d:ea:93:4a:00:49:91:0e:25:17:
53:b9:d5:dc:ba:5b:11:6a:f8:89:b2:c8:f6:ff:39:cc:82:b0:
fd:99:0c:73:bc:17:78:0c:59:41:f5:4c:cb:45:ec:0c:77:b4:
8d:7d:e9:aa:3e:71:8b:b5:09:f4:a0:78:7e:95:d9:43:43:67:
ba:82:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org