Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/455D8332F0EC11EB9D0B176AC4F9AE02.roa
File: 455D8332F0EC11EB9D0B176AC4F9AE02.roa (raw, json)
Hash identifier: WvGYrPprZ5IBLprtczAjn0WUTf6XocxbgY4UqdRn2+8=
Subject key identifier: 09:74:A3:FF:35:D2:ED:FF:26:E5:44:61:77:1F:F7:45:04:A1:3C:4C
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2917
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/455D8332F0EC11EB9D0B176AC4F9AE02.roa
Signing time: Tue 07 Jun 2022 04:22:27 +0000
ROA not before: Tue 07 Jun 2022 04:22:26 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 163.47.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10519 (0x2917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jun 7 04:22:26 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=629ed282-300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:30:58:fd:ab:0e:e1:4f:24:dd:75:45:d8:
69:fe:7b:fb:3d:03:f6:df:2b:c9:8b:1c:5a:4b:eb:
aa:31:3e:ba:43:1e:4d:a4:c9:bd:dc:4d:84:ee:6a:
45:17:c1:56:3f:f3:44:b5:6b:6d:85:a7:82:e4:2f:
a4:74:08:cb:a9:84:91:af:1d:80:41:c0:f4:5f:49:
a5:19:97:c0:fc:f6:3d:0d:61:d8:fe:18:f4:63:90:
b5:90:16:b8:62:d9:45:2b:8a:db:aa:f2:af:82:b6:
a8:5c:6d:7b:eb:db:91:01:9e:59:de:bc:10:37:ec:
19:a3:26:d2:f7:ac:03:43:2a:26:33:f0:01:e2:03:
03:1e:e3:6e:40:34:be:f6:71:11:ed:f1:25:34:21:
f7:4a:25:83:7d:d7:0a:d5:1e:77:ab:4f:21:a2:34:
11:d0:1d:b8:39:aa:0b:88:da:dc:4d:8e:b3:13:73:
dc:b7:13:ea:37:f7:c9:10:59:89:7f:73:cf:33:a9:
9a:a1:3d:14:b0:6e:4c:f5:2c:92:83:e8:d9:2b:af:
63:65:64:93:3b:c7:d5:e9:a7:ca:26:6a:de:de:71:
61:ea:d5:03:d1:61:4b:c2:f0:40:18:3f:6a:2b:b3:
da:24:6f:45:d1:74:1c:75:4f:e2:ec:b2:37:b0:3d:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:A3:FF:35:D2:ED:FF:26:E5:44:61:77:1F:F7:45:04:A1:3C:4C
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/455D8332F0EC11EB9D0B176AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.47.205.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:26:01:b3:22:3d:96:bf:22:2d:39:31:58:5d:57:9a:e3:85:
eb:dc:65:35:e4:b7:bf:bd:e7:15:1d:17:98:1e:bf:2c:55:e5:
6e:a5:5b:41:28:5f:3d:db:fb:b7:c2:66:8c:07:7d:d7:cc:92:
55:a2:fa:6b:56:a2:7a:16:66:ce:b0:79:da:e9:ae:ca:ed:0e:
34:84:b2:22:54:41:8f:d5:d7:b1:95:1a:49:2c:4b:0e:0c:b0:
1a:a7:57:87:d3:a5:9c:43:bd:ed:98:77:18:da:c2:ba:9f:26:
6e:75:bb:56:ab:13:4a:2f:ad:85:7b:a7:a2:dd:d8:10:c4:09:
69:3d:8b:5c:dc:fc:2f:a7:8f:f8:ad:1a:b5:8f:98:51:bb:b3:
bb:3e:e8:f3:a0:4f:ef:cb:42:7e:14:b1:b2:07:df:28:49:1f:
b3:7c:c7:2d:89:c7:a0:e5:4f:1a:18:f6:4c:45:f3:ed:ef:2e:
63:60:59:fc:5e:c7:d3:0f:a7:0a:ab:56:87:fa:a3:6e:a7:bd:
a7:90:f0:07:6c:2a:ed:61:4b:11:81:ec:2e:5c:51:7f:a4:b7:
a9:a2:10:34:10:cf:71:e2:56:33:c2:48:84:49:26:0c:81:51:
1b:c8:9b:98:c3:24:31:c6:af:88:9e:3b:2d:fc:ce:ee:25:5e:
e7:b1:d3:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMxMjgxMTAvBgNVBAUTKEI1NjQyNzMyMjY1RDQwQkY3NUNBOTRBOUVDODExOTIx
MUMxQjlCMzIwHhcNMjIwNjA3MDQyMjI2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjllZDI4Mi0zMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCswWP2rDuFPJN11Rdhp/nv7PQP23yvJixxaS+uqMT66Qx5NpMm93E2E7mpF
F8FWP/NEtWtthaeC5C+kdAjLqYSRrx2AQcD0X0mlGZfA/PY9DWHY/hj0Y5C1kBa4
YtlFK4rbqvKvgraoXG1769uRAZ5Z3rwQN+wZoybS96wDQyomM/AB4gMDHuNuQDS+
9nER7fElNCH3SiWDfdcK1R53q08hojQR0B24OaoLiNrcTY6zE3PctxPqN/fJEFmJ
f3PPM6maoT0UsG5M9SySg+jZK69jZWSTO8fV6afKJmre3nFh6tUD0WFLwvBAGD9q
K7PaJG9F0XQcdU/i7LI3sD1IgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAl0o/81
0u3/JuVEYXcf90UEoTxMMB8GA1UdIwQYMBaAFLVkJzImXUC/dcqUqeyBGSEcG5sy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEyOC82NjRBOUJDQUZB
NkQxMUUzQjZBQzIzNTA1OTExRUEzMi90V1FuTWlaZFFMOTF5cFNwN0lFWklSd2Jt
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RXUW5NaVpkUUw5MXlwU3A3SUVaSVJ3Ym16SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkMxMjgvNjY0QTlCQ0FGQTZEMTFFM0I2QUMyMzUwNTkxMUVBMzIvNDU1RDgzMzJG
MEVDMTFFQjlEMEIxNzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACjL80wDQYJKoZIhvcNAQELBQADggEBAJsmAbMiPZa/Ii05
MVhdV5rjhevcZTXkt7+95xUdF5gevyxV5W6lW0EoXz3b+7fCZowHfdfMklWi+mtW
onoWZs6wedrprsrtDjSEsiJUQY/V17GVGkksSw4MsBqnV4fTpZxDve2Ydxjawrqf
Jm51u1arE0ovrYV7p6Ld2BDECWk9i1zc/C+nj/itGrWPmFG7s7s+6POgT+/LQn4U
sbIH3yhJH7N8xy2Jx6DlTxoY9kxF8+3vLmNgWfxex9MPpwqrVof6o26nvaeQ8Ads
Ku1hSxGB7C5cUX+kt6miEDQQz3HiVjPCSIRJJgyBURvIm5jDJDHGr4ieOy38zu4l
Xuex0xs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org