Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/93AC29B8826D11ECB767892DC4F9AE02.roa
File: 93AC29B8826D11ECB767892DC4F9AE02.roa (raw, json)
Hash identifier: PLjX5+SwQVnteURR6vQl4aosJ2KFdD+1wVNBI75u5lE=
Subject key identifier: C7:FF:6F:EA:B7:92:2D:78:97:BD:3E:14:F7:07:9F:70:C6:F2:AA:B6
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 02
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/93AC29B8826D11ECB767892DC4F9AE02.roa
Signing time: Mon 31 Jan 2022 08:12:49 +0000
ROA not before: Mon 31 Jan 2022 08:12:49 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 58701
IP address blocks: 116.204.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Jan 31 08:12:49 2022 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=61f79a00-01f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:11:dd:16:ca:82:d5:f9:06:31:d2:2c:05:
59:97:50:8e:8b:85:e2:1a:7e:f2:61:72:ae:51:54:
22:16:09:bb:9d:6f:63:3c:37:a5:29:7c:be:6c:d7:
55:10:8d:2e:66:78:ed:61:e7:16:35:a8:27:7d:67:
50:7d:2e:44:12:42:1c:cd:f0:ed:4a:af:b5:23:34:
56:19:57:fc:b4:e5:40:5a:f0:5b:66:c2:19:59:7e:
40:69:70:0b:3d:e4:2f:da:0e:d8:af:ed:fd:8c:8a:
2e:a7:17:5f:31:ee:95:0b:a7:38:b6:ae:cb:0d:b1:
51:d4:df:60:7e:96:35:03:c9:92:38:21:2f:e8:57:
fc:ab:61:a2:4c:ea:97:6f:30:e4:62:02:dd:84:4a:
d5:2a:74:57:8f:35:56:cb:18:8b:e4:8c:56:29:c4:
ed:f3:74:c5:ae:c3:77:21:76:c2:86:6a:81:db:dd:
03:d3:be:67:db:e7:38:f7:b7:d6:a9:5b:03:6f:b7:
04:67:09:ca:1d:38:05:b2:bf:67:9c:67:4e:6b:71:
a3:01:f8:4d:a5:75:f5:3b:ac:e3:fa:c8:b4:5c:f5:
7b:bc:cb:f2:24:b0:83:8c:97:28:f5:1d:9a:e6:7a:
e4:41:0e:c4:01:cc:42:0e:9d:e6:ec:26:66:5c:8d:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:6F:EA:B7:92:2D:78:97:BD:3E:14:F7:07:9F:70:C6:F2:AA:B6
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/93AC29B8826D11ECB767892DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:79:90:02:8b:9f:5d:11:ae:ff:e7:59:2f:e9:f7:0f:b3:87:
25:85:8c:f5:05:36:f6:df:7f:54:b6:44:ed:d5:6a:41:9c:6c:
8a:9c:9c:b2:60:13:ea:db:a3:34:1b:14:49:fe:99:b2:07:7c:
24:a4:28:94:3e:e9:37:99:b5:d7:12:28:fe:3f:4f:f4:1f:c7:
86:0a:03:f1:c7:9d:b2:9b:76:0e:7b:67:ac:85:6c:03:ab:d3:
1c:14:f5:7f:e8:eb:0f:b5:bf:96:a7:04:28:30:29:be:62:fd:
f0:03:43:01:07:9b:f7:37:0e:7c:b8:76:16:cb:10:fd:01:26:
ec:a8:39:0a:73:1a:4d:e3:25:70:9b:6e:76:3f:79:22:1c:5f:
39:57:7c:93:95:f2:0d:83:e8:bf:26:0e:c5:f8:6d:5b:09:a3:
44:2a:e3:4b:cf:81:72:0f:d2:26:2c:67:bb:e8:ee:0d:77:77:
ae:ce:3d:27:f0:e1:53:1d:f0:ff:9e:2e:ba:e3:7d:5b:9f:a5:
13:07:04:10:d4:5d:54:f7:a4:4c:6b:78:2b:29:64:38:cf:d8:
ff:ec:cd:90:2b:91:0c:72:4f:ee:db:32:34:ac:76:91:42:fe:
32:30:cb:4e:b3:5d:ce:58:a2:f7:df:ab:20:01:f5:6e:87:08:
75:28:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org