Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5102100AE7BC11ECAB300D18C4F9AE02.roa
File: 5102100AE7BC11ECAB300D18C4F9AE02.roa (raw, json)
Hash identifier: 4ZL4baYB2z1mRNBLHtg87XgVGtTI1khUxYtL9cglvaQ=
Subject key identifier: 55:18:2A:FA:0A:E5:A8:42:46:09:3C:1E:B3:60:B3:D5:1B:78:B3:56
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 30D3
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5102100AE7BC11ECAB300D18C4F9AE02.roa
Signing time: Thu 07 Jul 2022 02:41:02 +0000
ROA not before: Thu 07 Jul 2022 02:41:01 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 21700
IP address blocks: 122.8.16.0/22 maxlen: 22
122.8.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12499 (0x30d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Jul 7 02:41:01 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62c647bd-e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:92:37:f7:ca:0e:cd:54:a8:f0:1d:d2:65:
a4:dd:61:37:fc:79:5c:b9:cf:89:4e:5e:2b:16:61:
e4:39:b9:3e:e0:a3:98:cc:eb:ec:4a:e0:bf:a4:e3:
a7:19:a8:ee:da:65:3a:f4:d1:7b:03:59:51:a3:be:
59:5c:11:9e:5d:99:a1:9b:90:05:cf:26:92:68:d0:
62:db:69:e2:27:af:ea:c9:63:97:a2:3b:a4:40:e9:
22:80:e3:5e:f5:e5:9f:00:c7:cf:4c:f6:b2:2e:c5:
e2:20:ea:22:3e:78:d5:56:cd:d8:45:e1:3d:8b:14:
80:4d:28:62:97:a9:f6:72:17:d7:7d:46:ed:b2:ee:
3c:ac:99:bc:53:a5:95:f2:fa:dc:73:c7:4f:61:61:
83:e0:80:8b:16:97:e8:9e:85:2f:6f:5c:a2:97:66:
46:1f:ff:88:2b:64:6a:a3:c2:c2:be:9b:4e:3e:04:
f8:6f:1d:07:55:8d:89:89:bd:92:c3:9e:91:b4:5b:
86:e3:96:99:ad:c4:99:e6:5e:8e:fe:81:0c:23:3c:
1e:a1:0b:bc:80:5a:30:41:02:7e:dd:a7:3a:15:05:
6d:4f:37:76:2b:35:97:e7:87:bb:c8:72:40:a4:9b:
ab:68:ba:7a:b4:d4:b0:c9:b4:25:e8:e6:06:19:c8:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:2A:FA:0A:E5:A8:42:46:09:3C:1E:B3:60:B3:D5:1B:78:B3:56
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/5102100AE7BC11ECAB300D18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.16.0/22
122.8.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:00:89:bb:7e:5c:2d:c9:9b:c5:81:86:b7:2e:1e:c3:96:da:
9b:af:da:c7:b0:10:29:7e:f6:26:b4:ef:f5:fd:e4:dc:0e:c2:
b5:f7:41:b6:a4:05:e6:59:f3:b8:63:41:7b:23:e8:cc:4d:dc:
0c:e4:f5:d3:64:25:3f:66:c1:ef:65:49:b9:34:ed:8c:62:40:
16:80:a9:0c:7f:3b:3b:51:4b:b6:93:ef:f6:cd:57:27:4c:38:
4f:af:6d:a0:4f:48:e4:91:84:f3:8f:4e:2b:35:3d:9e:7b:cf:
04:f3:8f:99:9d:e4:ee:42:32:f7:a9:e3:ef:59:b7:8f:90:ab:
97:d4:2d:2e:45:1d:58:ff:6f:bc:bb:1c:6a:62:ae:6e:84:c6:
f1:57:03:52:8b:0f:7b:38:f0:16:aa:49:fa:24:df:c3:bb:1e:
f0:b8:f1:6d:ff:44:12:d9:47:00:1d:e5:5c:c4:5c:c5:c9:a8:
ea:7a:15:0f:19:e4:14:42:b2:e1:c3:d8:48:1a:a7:76:75:e8:
ab:77:d8:84:71:73:f2:da:e4:d8:0b:d9:1c:b9:04:f6:35:c7:
86:76:a4:a9:a1:2f:c2:c0:d6:56:53:c1:d4:ae:58:84:59:8f:
63:88:69:bb:49:ab:ac:66:c0:d8:33:6e:d3:03:86:7c:37:a9:
69:22:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org