Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/A60C83C01D1811EB945E1C70C4F9AE02.roa
File: A60C83C01D1811EB945E1C70C4F9AE02.roa (raw, json)
Hash identifier: 8wQIo5knEG9pPCc1p6x2fKADpRqDFTPGKZExpJ0EX5M=
Subject key identifier: BD:FA:FA:09:5A:A6:C1:79:AA:5E:89:6D:83:76:E1:19:A7:A2:2A:7B
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 04F4
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/A60C83C01D1811EB945E1C70C4F9AE02.roa
Signing time: Wed 04 May 2022 11:49:30 +0000
ROA not before: Wed 04 May 2022 11:49:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24048
IP address blocks: 203.119.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: May 4 11:49:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6272684a-5bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:b6:6e:79:df:25:85:5c:5e:a2:e5:5a:50:
20:de:9a:0d:d0:35:9a:7f:3b:f4:45:48:bb:f3:66:
81:0b:83:5e:bd:29:2f:ef:21:e6:0b:bb:1d:d0:65:
37:9c:8c:18:b7:69:c3:82:9e:6d:0e:fe:ba:7e:fa:
08:2d:6f:c1:b7:55:e4:a4:53:6e:0f:fa:49:9f:b9:
61:e5:0f:76:7f:4a:af:14:a4:ab:76:6b:44:ba:f3:
f5:f7:fb:b4:e1:21:c3:f3:fb:42:e4:6d:d5:10:61:
ee:5c:72:be:08:20:5f:8c:61:7a:07:eb:f5:a4:21:
23:3f:9f:78:26:45:2a:31:c4:fc:74:2f:a0:c0:c8:
51:d0:a1:6c:9f:12:29:61:ad:c4:36:09:1d:ec:05:
73:d2:03:84:b8:23:78:e1:a9:25:0c:b1:bf:0c:11:
8b:68:3c:31:d4:1d:a2:b2:e7:34:12:50:57:30:3a:
6c:22:9a:6b:32:95:eb:25:c6:2c:ed:26:0d:40:d7:
0b:5b:8d:ee:81:57:98:07:1b:0a:60:78:bc:d7:54:
ea:2f:f3:63:eb:f2:38:e1:4f:17:fd:cc:e6:93:46:
08:e9:e4:91:30:0a:c1:d6:14:96:f1:7c:99:64:8c:
6f:0a:15:a4:19:9f:ab:22:19:4b:16:b0:cc:25:1c:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:FA:09:5A:A6:C1:79:AA:5E:89:6D:83:76:E1:19:A7:A2:2A:7B
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/A60C83C01D1811EB945E1C70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.17.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4a:1b:33:ae:55:78:77:3f:11:bf:3e:96:63:9e:ee:fb:28:
bf:1b:99:41:59:e7:60:b7:6d:e4:c9:00:a5:28:86:ad:3a:9c:
62:d7:ad:f0:cb:9c:a8:00:94:21:c8:93:96:06:fa:68:f9:60:
20:d4:9f:c6:ca:43:4e:2a:f3:d3:f0:c2:bd:fa:1e:89:18:b4:
f1:fb:82:b7:ce:04:f7:23:07:34:30:82:bb:f6:2d:a3:2f:db:
fb:da:af:65:c2:84:16:fb:55:c9:01:ad:39:7a:28:f1:8e:20:
e6:f5:46:0b:84:fe:4d:95:b0:9f:f7:3f:12:27:0c:a6:ee:6c:
2d:42:ab:1f:f1:46:97:5d:9a:c0:61:4d:c3:bb:e5:21:d0:b3:
17:36:54:f2:fe:2a:6a:e8:7f:5d:a5:ba:8d:c9:a0:22:15:71:
94:fc:19:c4:9f:60:b8:a2:99:44:bf:31:41:1e:4a:ae:63:40:
dc:c8:72:5a:ad:17:eb:24:f2:cb:bf:2f:0f:c7:ce:be:1c:6f:
e9:05:46:1f:b9:eb:6a:3c:c0:61:40:78:63:1e:d7:69:4d:12:
a9:28:da:2c:3f:97:60:3f:7a:34:a8:64:3a:d8:82:43:90:9d:
f6:3e:91:03:8e:e7:cb:47:9f:4d:88:87:06:d0:62:6e:1b:97:
05:58:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org