Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/13286EB0C68C11ECA5C5F675C4F9AE02.roa
File: 13286EB0C68C11ECA5C5F675C4F9AE02.roa (raw, json)
Hash identifier: zwLvty65RJK8maNMxdMX+BjHj2NdWkgObnwf64DjuhI=
Subject key identifier: 24:51:B5:DB:7B:04:B0:E7:86:E2:68:24:E0:6B:87:AC:C5:A9:B3:05
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 02E5
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/13286EB0C68C11ECA5C5F675C4F9AE02.roa
Signing time: Thu 28 Apr 2022 00:42:26 +0000
ROA not before: Thu 28 Apr 2022 00:42:26 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 397373
IP address blocks: 115.126.24.0/24 maxlen: 24
115.126.25.0/24 maxlen: 24
115.126.27.0/24 maxlen: 24
115.126.73.0/24 maxlen: 24
115.126.87.0/24 maxlen: 24
115.126.112.0/24 maxlen: 24
116.212.114.0/24 maxlen: 24
118.99.2.0/24 maxlen: 24
118.99.7.0/24 maxlen: 24
118.99.10.0/24 maxlen: 24
118.102.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Apr 28 00:42:26 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6269e2f2-4b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:69:7c:f7:5f:f1:b9:97:93:f8:e0:78:02:
17:03:c8:7b:ad:8a:b7:49:a0:c9:cc:8f:d7:85:e7:
9b:84:e4:4d:82:57:6c:2e:80:00:71:2d:95:cc:9e:
78:8a:8e:9d:bb:87:2d:a7:24:5e:f1:05:e0:29:88:
9b:d1:2b:8c:fe:88:04:c9:95:03:e7:65:1f:af:a2:
be:87:bf:61:62:74:01:01:22:9a:ce:7d:6c:3f:1a:
ff:df:96:88:dd:ee:09:66:c7:2d:aa:4a:ca:7e:82:
bd:06:41:d4:37:7a:ec:09:80:36:17:4e:3a:0e:ce:
43:d7:68:8f:3c:cf:84:49:3e:9f:77:20:01:2c:19:
18:ff:f1:5e:9d:74:95:31:b6:14:90:ad:f9:3a:91:
93:ca:18:e4:10:fb:d6:5a:b8:95:75:38:67:2f:c9:
03:02:a7:f4:b0:92:e8:aa:75:37:a3:26:e3:02:de:
5e:75:b2:48:0d:38:e8:2d:36:5c:28:e6:bf:85:99:
e0:d7:fb:4b:5a:62:00:31:af:f6:0c:27:1b:7d:f0:
ea:0b:ef:2c:93:20:6c:71:c3:db:4c:68:95:b5:9c:
c1:9c:3c:1b:be:01:56:06:a4:e1:35:05:a7:7c:a8:
81:08:1e:d6:9f:9e:e2:6c:31:7f:9c:05:03:db:a7:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:B5:DB:7B:04:B0:E7:86:E2:68:24:E0:6B:87:AC:C5:A9:B3:05
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/13286EB0C68C11ECA5C5F675C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.126.24.0/23
115.126.27.0/24
115.126.73.0/24
115.126.87.0/24
115.126.112.0/24
116.212.114.0/24
118.99.2.0/24
118.99.7.0/24
118.99.10.0/24
118.102.14.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:c3:2c:b1:45:64:3d:37:a0:24:69:c6:14:2d:d4:bf:71:
46:00:02:7b:f8:a1:5f:dd:98:3b:8f:86:84:8a:2a:d9:2a:e8:
2f:13:50:98:65:b3:13:d0:31:5c:1d:48:3e:a3:09:ef:11:09:
db:25:1d:2e:3f:7d:37:c5:83:b6:b6:c3:ff:d0:85:12:44:60:
d2:ff:94:10:f4:ae:09:d8:d7:66:02:f7:df:3e:b6:6c:2f:f7:
11:22:10:d7:4e:77:e6:59:3c:eb:2e:cd:27:03:9e:b5:57:f8:
7e:e2:19:cf:64:0a:c7:4b:70:3e:0e:e3:63:06:86:4b:f0:54:
ed:bf:1b:84:17:95:ee:c4:c5:78:b1:47:da:6b:81:b8:1c:f2:
ef:ae:e0:89:09:98:d6:6a:b0:16:96:ba:eb:16:da:9f:c8:e6:
c2:6f:c2:87:07:44:99:fa:9c:ea:bd:9c:34:98:d5:6e:00:35:
69:32:ac:bc:0e:15:d9:9a:67:db:9d:16:36:6d:f5:70:fd:56:
3d:f0:dd:12:9a:d9:0b:64:cf:c4:8f:38:bb:0b:16:f4:e9:30:
f2:70:0b:5f:ac:fa:9c:be:aa:e8:67:3b:de:17:5b:bf:67:6b:
22:03:e0:04:1d:cc:e7:e6:fc:e0:57:0b:d9:aa:b4:66:4f:1b:
11:a2:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org