Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/5262BE88617A11EA93D43031C4F9AE02.roa
File: 5262BE88617A11EA93D43031C4F9AE02.roa (raw, json)
Hash identifier: bYUi1rxGrHo72uV9sYQnX4PsXwBM/1Vs6c7lMNMTA58=
Subject key identifier: C0:95:8A:4F:B3:01:DB:41:CF:16:19:74:F9:95:CA:54:01:5D:45:86
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 25CF
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/5262BE88617A11EA93D43031C4F9AE02.roa
Signing time: Sat 01 May 2021 04:11:37 +0000
ROA not before: Sat 01 May 2021 04:11:37 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 133878
IP address blocks: 120.136.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9679 (0x25cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: May 1 04:11:37 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=608cd4f8-2a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:5e:ad:a6:ad:00:c5:98:e9:7c:7c:2c:39:
5c:c0:02:87:35:1e:6b:5c:c1:b7:4b:1b:2c:18:eb:
b8:8a:6e:5c:76:b2:66:8a:06:58:25:c5:c2:57:c8:
5f:3d:4c:2e:23:59:89:6c:75:71:19:91:dc:38:88:
0f:33:d0:da:b8:88:57:8c:7e:1d:71:38:4a:00:56:
fa:02:99:46:38:58:b1:1e:50:fc:eb:55:d4:8c:79:
b4:4b:b6:21:7f:1b:d3:79:55:9d:3c:99:19:4a:e2:
ca:30:46:20:68:2e:58:d6:d5:9e:1f:3c:d7:ba:5f:
e9:a7:dd:c2:e3:4c:cb:47:76:21:ff:4b:10:a9:71:
1d:d1:64:83:dc:d1:03:11:0d:af:82:57:8e:60:12:
0e:e9:a5:4b:84:6c:20:c3:c3:67:e1:32:6a:f0:9f:
53:dd:66:46:0c:de:8b:4c:db:2d:04:b1:94:e1:f0:
9f:92:cd:d2:c7:10:60:c4:5a:5f:f1:c6:38:7b:4b:
83:c9:7b:35:f5:49:35:60:46:f1:01:9f:14:30:54:
0b:0c:7b:01:15:be:1c:69:75:7f:d5:f8:49:ba:16:
ee:53:90:5d:84:8e:a7:6f:01:d5:4b:69:eb:32:c4:
0f:6a:4a:89:8c:42:bc:29:1a:07:78:2b:ba:03:d0:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:8A:4F:B3:01:DB:41:CF:16:19:74:F9:95:CA:54:01:5D:45:86
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/5262BE88617A11EA93D43031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.136.6.0/24
Signature Algorithm: sha256WithRSAEncryption
94:81:f8:17:17:ac:55:e8:3c:7a:7b:02:bf:81:ed:ef:0e:d5:
27:4e:87:ba:53:dc:a5:49:0b:cd:2a:d4:31:74:fc:de:c8:89:
f6:24:5a:7a:53:3e:00:7c:20:e0:14:21:9f:ba:4f:85:47:70:
1a:27:d3:d0:7f:c1:33:52:5b:83:d0:f3:fa:4c:df:89:fc:9a:
3a:fd:24:02:52:41:7c:e9:f1:16:cb:f3:ef:79:dd:74:a8:39:
88:86:98:aa:4a:c1:ad:b2:c5:86:f0:0c:eb:7f:64:16:e9:56:
b3:7e:3a:57:91:b6:fc:21:4a:b4:fe:89:7d:d7:a3:61:c2:53:
9f:ff:56:cb:2a:dc:d6:78:be:46:16:37:9e:55:bd:3b:bb:ea:
9c:2a:f2:13:64:f7:f7:10:3f:b5:ad:5d:3c:66:34:67:20:2f:
68:56:5b:30:08:c1:cd:fc:12:1e:70:6c:fd:a2:5b:82:3c:0e:
95:ab:43:14:7c:d2:67:a8:26:db:46:e0:de:34:ed:ec:7c:5d:
cb:1e:5f:00:27:f3:3f:2e:06:56:7f:bb:ad:71:02:f9:3d:4f:
d0:d6:50:73:ef:c1:3e:5b:d3:5c:8e:aa:fa:fb:d5:b4:4b:dc:
bc:52:46:50:42:e3:0e:78:5b:1b:8b:a3:db:8b:ae:83:a8:0f:
13:22:35:6e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMxMjgxMTAvBgNVBAUTKEI1NjQyNzMyMjY1RDQwQkY3NUNBOTRBOUVDODExOTIx
MUMxQjlCMzIwHhcNMjEwNTAxMDQxMTM3WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MDhjZDRmOC0yYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5BeraatAMWY6Xx8LDlcwAKHNR5rXMG3SxssGOu4im5cdrJmigZYJcXCV8hf
PUwuI1mJbHVxGZHcOIgPM9DauIhXjH4dcThKAFb6AplGOFixHlD861XUjHm0S7Yh
fxvTeVWdPJkZSuLKMEYgaC5Y1tWeHzzXul/pp93C40zLR3Yh/0sQqXEd0WSD3NED
EQ2vgleOYBIO6aVLhGwgw8Nn4TJq8J9T3WZGDN6LTNstBLGU4fCfks3SxxBgxFpf
8cY4e0uDyXs19Uk1YEbxAZ8UMFQLDHsBFb4caXV/1fhJuhbuU5BdhI6nbwHVS2nr
MsQPakqJjEK8KRoHeCu6A9Ay0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMCVik+z
AdtBzxYZdPmVylQBXUWGMB8GA1UdIwQYMBaAFLVkJzImXUC/dcqUqeyBGSEcG5sy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEyOC82NjRBOUJDQUZB
NkQxMUUzQjZBQzIzNTA1OTExRUEzMi90V1FuTWlaZFFMOTF5cFNwN0lFWklSd2Jt
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RXUW5NaVpkUUw5MXlwU3A3SUVaSVJ3Ym16SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkMxMjgvNjY0QTlCQ0FGQTZEMTFFM0I2QUMyMzUwNTkxMUVBMzIvNTI2MkJFODg2
MTdBMTFFQTkzRDQzMDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB4iAYwDQYJKoZIhvcNAQELBQADggEBAJSB+BcXrFXoPHp7
Ar+B7e8O1SdOh7pT3KVJC80q1DF0/N7IifYkWnpTPgB8IOAUIZ+6T4VHcBon09B/
wTNSW4PQ8/pM34n8mjr9JAJSQXzp8RbL8+953XSoOYiGmKpKwa2yxYbwDOt/ZBbp
VrN+OleRtvwhSrT+iX3Xo2HCU5//Vssq3NZ4vkYWN55VvTu76pwq8hNk9/cQP7Wt
XTxmNGcgL2hWWzAIwc38Eh5wbP2iW4I8DpWrQxR80meoJttG4N407ex8XcseXwAn
8z8uBlZ/u61xAvk9T9DWUHPvwT5b01yOqvr71bRL3LxSRlBC4w54WxuLo9uLroOo
DxMiNW4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org