Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/26FFBA2EE82011EBBEC75A6CC4F9AE02.roa
File: 26FFBA2EE82011EBBEC75A6CC4F9AE02.roa (raw, json)
Hash identifier: qaeCYHuMaKrgYqRvcZ6SgbgsjQf56UweHcT2ne0ohZ0=
Subject key identifier: 96:5F:12:25:65:20:FC:BB:7B:91:14:60:F1:02:DE:BE:4C:18:3C:34
Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial: 01BD
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/26FFBA2EE82011EBBEC75A6CC4F9AE02.roa
Signing time: Wed 09 Feb 2022 07:11:57 +0000
ROA not before: Wed 09 Feb 2022 07:11:57 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 17411
IP address blocks: 58.147.128.0/20 maxlen: 24
58.147.146.0/23 maxlen: 24
58.147.148.0/23 maxlen: 24
58.147.159.0/32 maxlen: 32
125.213.192.0/20 maxlen: 24
125.213.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Validity
Not Before: Feb 9 07:11:57 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6203693d-9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:d2:c5:ae:1d:68:e1:42:04:12:43:77:86:
7b:57:b2:94:01:c5:e9:e4:44:ff:7d:30:ba:9d:ea:
fb:82:12:42:cc:30:fe:c8:eb:be:24:9c:23:7f:10:
8d:44:50:66:61:83:98:e4:f0:17:71:8c:7b:5f:ae:
ab:77:e4:b2:b0:04:48:a3:db:73:cd:94:4c:82:19:
4d:b1:bb:6a:da:70:37:48:30:73:70:db:05:b3:70:
5d:35:53:a4:4c:8d:9c:08:64:3d:d9:ea:44:e1:30:
59:1f:1f:e1:16:98:16:f7:32:3e:76:eb:1f:c4:7d:
a7:e0:bb:7f:83:37:b3:4d:9b:b7:09:0d:50:49:2f:
19:7d:90:60:5b:e1:0a:4b:51:e8:9e:25:92:d1:3f:
48:8d:e0:44:ee:2d:c8:ee:c9:52:2c:8a:e8:ce:e5:
dd:0f:cf:75:76:a8:c9:9b:f7:13:37:71:36:bb:7c:
4c:e0:65:42:72:8e:0b:ce:a0:a0:eb:57:9e:31:81:
cb:d6:92:cb:f6:a8:0d:ac:38:f0:59:d0:a4:19:b5:
61:12:28:6f:68:26:5f:e0:b1:b2:14:ab:7c:1c:76:
0a:0c:68:4a:0b:e1:71:a9:3f:ec:cf:42:7f:7b:e5:
f1:61:3a:c9:1b:53:cf:49:e3:88:01:a5:14:c7:02:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:12:25:65:20:FC:BB:7B:91:14:60:F1:02:DE:BE:4C:18:3C:34
X509v3 Authority Key Identifier:
keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/26FFBA2EE82011EBBEC75A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.147.128.0/20
58.147.146.0-58.147.149.255
58.147.159.0/32
125.213.192.0/19
Signature Algorithm: sha256WithRSAEncryption
87:93:3e:4e:7e:2e:4a:10:9f:9f:56:20:2c:5e:c9:ba:1c:b1:
2b:38:12:2e:20:28:77:1f:e9:5a:cc:91:29:e9:3a:cb:e4:f6:
8c:f8:7f:e2:c5:58:c4:a9:2c:4f:ad:03:07:81:f5:42:77:54:
8e:de:4f:a5:65:fb:dc:1d:6a:8a:77:03:24:bf:35:4b:8a:ff:
16:1b:70:88:87:4a:c6:e3:f0:e6:09:c1:59:ee:1b:ae:f3:d2:
49:93:37:ba:d7:c6:89:89:35:ba:4f:f8:50:04:3a:e9:23:d2:
2c:62:34:99:f9:0e:69:c3:c1:66:8e:d6:b7:ac:30:f6:78:00:
b7:66:2f:e2:db:e9:bb:4b:63:dc:b4:ff:d2:0c:3e:cd:54:53:
3f:28:14:29:0f:7d:18:d6:05:d9:f1:15:6e:70:c7:cf:ce:25:
40:f7:9e:61:8e:3c:97:df:65:ec:2e:b7:bc:cb:3f:9d:a6:4f:
06:1a:e0:30:62:69:b0:83:49:63:53:1a:57:ec:b8:2c:87:ef:
82:ed:01:7d:4f:03:ab:89:9d:35:84:6b:37:18:f9:1f:d5:fd:
11:b2:73:11:43:d9:79:e2:ea:66:9f:28:86:d7:b2:c9:e7:3c:
4d:09:2d:8b:f5:02:60:68:a3:f2:79:89:c5:46:8e:a2:ad:21:
82:7a:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org