Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
File: 362A6268EC2411EA8B0DDA2CC4F9AE02.roa (raw, json)
Hash identifier: 15otegqJXdL+zG24Lw3gvreLhIcbPXoYOuIbH2PbHW0=
Subject key identifier: E1:CF:EF:D4:CA:7B:54:6D:02:EE:53:8C:1B:74:56:40:14:D5:D6:DF
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 04F2
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
Signing time: Wed 04 May 2022 11:49:29 +0000
ROA not before: Wed 04 May 2022 11:49:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23712
IP address blocks: 202.41.146.0/24 maxlen: 24
2001:dd8:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: May 4 11:49:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62726848-462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4d:bd:bf:09:cd:10:07:3d:3f:66:73:78:61:
df:a9:55:84:b8:4e:b7:49:fe:70:43:3e:bb:b0:30:
76:ee:ac:33:a8:11:04:f4:af:94:fe:6c:b9:2c:25:
55:cc:ec:b9:48:96:84:92:62:7a:cc:92:e7:74:9f:
36:e1:40:17:a6:d4:56:1e:cb:30:92:d4:0e:36:7d:
19:65:b8:63:b1:40:a5:c3:51:e5:97:9d:e4:85:d6:
d2:be:23:91:7b:87:4c:cd:2b:94:41:2d:4b:13:a6:
29:b4:c4:3e:bd:19:ff:bb:72:06:99:18:5b:f3:f9:
87:0d:1d:b9:78:a6:83:3d:db:2f:83:f0:48:bf:51:
5a:57:14:02:03:df:8d:ab:8a:4a:8a:43:a2:c8:e8:
a3:45:61:7d:e3:b9:db:0a:b8:70:65:09:25:e7:6d:
c1:94:80:e3:8b:5f:4f:94:1a:29:22:65:67:14:de:
e6:76:56:dd:29:58:67:ab:ad:e8:77:9b:d0:25:6a:
33:81:a5:b9:d6:86:6c:ec:53:07:09:9e:8d:91:78:
53:27:b7:d6:93:4a:ba:c9:fa:6e:cd:5c:28:b8:18:
37:22:9c:52:46:6b:96:3a:ca:91:c1:2c:d4:88:42:
05:a4:9b:ca:02:40:3b:6a:89:79:59:83:84:95:df:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:EF:D4:CA:7B:54:6D:02:EE:53:8C:1B:74:56:40:14:D5:D6:DF
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.41.146.0/24
IPv6:
2001:dd8:22::/48
Signature Algorithm: sha256WithRSAEncryption
3b:65:a8:82:ae:1d:23:1c:6c:0b:8d:81:13:f7:e0:df:84:82:
d9:74:b0:6d:22:2c:ab:75:5c:cb:86:f7:8d:24:b2:36:b1:4d:
dc:70:69:69:df:72:95:03:21:87:64:32:2b:f9:a9:25:0e:dc:
b9:e1:2f:b7:01:c4:37:9c:eb:cb:11:32:15:5c:0e:27:6e:5b:
b6:42:3a:43:b9:a1:e4:ab:16:54:1a:e4:97:75:f4:c0:1b:ff:
93:1b:28:6a:0d:cd:79:81:d4:b2:24:75:fd:bf:3c:23:f6:02:
b8:b8:ab:39:b4:8d:68:58:35:da:dd:d3:4b:6c:b8:f5:ee:e5:
ab:e8:dc:a5:26:23:93:89:e4:a9:3c:f8:ad:b5:6d:10:89:0a:
11:1a:72:4e:54:5c:0c:f1:2c:db:9e:4b:d7:68:fe:a0:31:c5:
27:d9:7a:06:c4:95:f7:21:a5:2e:6b:5d:56:24:d1:41:8a:39:
20:0c:19:05:fc:9f:f0:66:6c:d0:2a:c0:ec:9f:97:0b:60:7c:
73:87:ec:2b:bd:f8:d1:67:02:0c:f8:b6:9d:65:ea:29:c6:cf:
86:2b:41:bf:46:9b:7c:dd:e9:64:34:9b:8a:fc:3e:be:c2:0e:
d3:49:67:1d:ff:3d:bc:dd:28:06:e5:93:62:d3:ec:be:16:fd:
00:c0:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org