Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/B71115A2803B11EA8D7E8155C4F9AE02.roa
File: B71115A2803B11EA8D7E8155C4F9AE02.roa (raw, json)
Hash identifier: 0o6q5Z7Yt4DhnkHe4CHeZn5bb03e2Iev6XzFJ4f+GXI=
Subject key identifier: 3F:6E:98:39:F3:16:5B:CB:50:80:03:0F:07:FC:52:85:73:F1:96:A9
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 25D0
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/B71115A2803B11EA8D7E8155C4F9AE02.roa
Signing time: Sat 01 May 2021 04:11:38 +0000
ROA not before: Sat 01 May 2021 04:11:38 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 19120
IP address blocks: 163.47.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9680 (0x25d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: May 1 04:11:38 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=608cd4f9-44c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:5d:3f:96:3a:c0:fe:dd:a1:82:d9:a4:e0:
7e:c4:fd:c8:0b:13:9b:67:a2:1b:7a:2a:ec:56:c0:
50:91:83:80:b6:3e:d3:74:47:cd:6e:fb:55:ae:3b:
22:d2:ed:48:19:89:ee:20:a4:72:40:57:ba:f4:3a:
3e:24:b1:38:1b:21:87:54:0f:c1:ee:31:9b:fc:8b:
25:c9:3f:3e:9a:df:31:c3:87:f8:41:8c:33:54:6c:
80:61:65:f9:13:2a:fe:2e:1a:2f:32:62:98:d8:1b:
85:b2:fd:09:3b:5e:64:ba:55:c8:d5:20:88:4b:11:
4c:4e:4f:16:e7:cd:46:13:e6:4e:b0:4a:cf:af:84:
e9:60:bf:0e:32:d1:e1:70:2d:bb:52:69:3a:8a:80:
b5:09:83:22:97:59:01:4d:3c:dd:bc:d6:7e:ae:8b:
bd:03:86:93:39:e3:80:82:94:59:3d:42:46:04:d1:
fe:9f:9b:84:b8:59:a0:17:eb:e6:9d:a5:64:97:b9:
f0:d0:20:4c:f6:b7:51:72:b9:4b:11:65:26:1e:02:
0f:0b:0d:f3:e8:e0:12:6a:05:18:1d:21:72:55:45:
1b:c1:f6:d3:a4:54:16:08:19:fa:84:65:44:c7:db:
a5:4e:be:aa:1e:be:0a:94:41:88:6a:28:84:2d:71:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:98:39:F3:16:5B:CB:50:80:03:0F:07:FC:52:85:73:F1:96:A9
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/B71115A2803B11EA8D7E8155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.47.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f2:18:c5:0e:74:15:78:93:ae:e5:ac:0f:4d:ee:fa:49:1a:
dc:b9:f4:47:da:4e:c4:4e:9c:c0:50:29:8b:21:6f:b8:f8:2b:
a6:0e:74:8e:58:18:da:7f:0e:f2:09:7b:87:98:f6:ba:dc:52:
28:bc:d5:93:a6:5b:6a:00:cc:0f:ff:a6:39:b0:51:b6:83:ae:
8c:1b:f6:39:69:1a:47:85:aa:fc:9f:a8:83:e4:be:9a:a6:c8:
b4:37:56:f7:44:59:16:9d:63:f9:37:b7:4b:bc:41:a2:46:73:
4c:ff:24:b3:ca:8d:60:16:e3:24:77:82:28:10:f4:5c:18:ee:
ee:c5:8b:73:6f:a9:01:2c:a6:4c:b6:b9:a6:32:6a:7c:56:aa:
85:60:00:85:21:ce:39:ab:96:f8:a6:01:dd:8b:71:19:52:60:
9a:38:75:39:25:d1:40:1a:4a:28:72:af:1a:fa:87:b5:c2:15:
c0:fc:8d:f0:c1:e2:cd:51:2d:71:bb:df:5e:6b:fa:aa:80:1c:
fa:d7:ce:1c:63:db:77:78:a7:9e:1b:2a:cf:bf:3a:1a:e6:92:
4d:27:5c:85:5e:d3:67:5a:1b:72:27:aa:56:41:58:0e:28:e7:
68:1a:27:c1:07:dd:37:49:db:3d:d3:7f:5d:9d:14:1b:83:48:
da:01:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org