Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/9829A0E453F011EBA4B1AE16C4F9AE02.roa
File: 9829A0E453F011EBA4B1AE16C4F9AE02.roa (raw, json)
Hash identifier: BGgQidmaTRW+g9prOeBB/Qz0YB1KgVZQqEoUdB9pgEk=
Subject key identifier: CE:E8:27:F9:3B:0B:85:15:4B:62:B6:DA:E2:CB:FE:D7:48:0F:68:74
Certificate issuer: /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial: 03CC
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/9829A0E453F011EBA4B1AE16C4F9AE02.roa
Signing time: Tue 10 May 2022 01:11:41 +0000
ROA not before: Tue 10 May 2022 01:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9931
IP address blocks: 202.122.40.0/24 maxlen: 24
202.122.41.0/24 maxlen: 24
202.122.42.0/24 maxlen: 24
202.122.43.0/24 maxlen: 24
202.122.44.0/24 maxlen: 24
202.122.45.0/24 maxlen: 24
202.122.46.0/24 maxlen: 24
202.122.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Validity
Not Before: May 10 01:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6279bbcd-2729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:5b:49:59:e6:f6:b2:ee:55:fa:d3:c6:87:
f8:7f:50:ac:26:bd:c8:f4:ed:f8:46:d9:f2:a0:73:
ae:24:54:0d:f3:13:ec:f1:2c:c2:f3:6e:60:df:5d:
7a:06:18:bf:66:b5:de:13:39:41:13:96:43:ae:97:
28:e7:80:e9:dd:b5:74:e3:13:ed:c4:21:3e:ce:66:
79:8f:b0:26:08:16:1e:98:04:04:c3:b4:9e:70:43:
ce:c6:c8:ee:12:2a:95:d9:98:65:b0:8b:a1:55:e2:
fc:d0:dc:fa:6a:2b:43:1a:c8:9f:5f:90:ae:3a:15:
7e:63:20:6b:9d:f2:5e:be:bd:79:cb:f9:5e:51:0a:
70:2f:ce:6f:eb:8e:e8:aa:0a:b8:f0:50:61:24:af:
64:38:83:49:dd:d9:5d:1f:6a:a9:97:39:1a:3a:da:
f2:c1:9a:f2:4b:22:01:cd:af:5b:14:7a:d8:71:f8:
46:26:45:06:9f:69:41:7e:c2:79:8b:58:74:40:ee:
cd:94:71:f2:f5:69:86:fe:33:d1:db:d7:12:00:f9:
f4:6c:9f:8e:f9:56:ed:62:66:7f:e4:f5:39:6e:b6:
1e:fe:9d:68:0b:ef:58:e1:4d:b1:1c:1c:0d:a1:a3:
a1:a8:1a:37:c4:44:e7:a2:a0:e2:9c:6b:c0:cb:7d:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:27:F9:3B:0B:85:15:4B:62:B6:DA:E2:CB:FE:D7:48:0F:68:74
X509v3 Authority Key Identifier:
keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/9829A0E453F011EBA4B1AE16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.122.40.0/21
Signature Algorithm: sha256WithRSAEncryption
26:58:7a:13:9f:7c:23:a1:89:21:d9:d2:02:7f:ad:1a:12:78:
83:02:c3:ef:59:ba:d3:42:3d:e5:82:9b:bc:dd:27:ff:59:b8:
7d:15:82:68:43:03:d5:e9:47:a7:0b:58:5b:ef:8a:c9:72:49:
42:93:a2:8b:c1:b6:bb:3d:1d:78:9c:0c:08:da:a3:b5:d6:43:
93:01:8b:28:0f:e3:32:5c:9c:ca:f6:18:1f:02:1d:17:5c:1e:
bf:d9:88:06:a0:5f:e5:c3:99:7e:2c:db:99:41:56:fa:dc:6b:
c6:84:ab:de:d4:0f:3c:6e:71:79:82:be:a6:5c:1f:05:6a:38:
a2:9e:22:0d:65:66:a2:08:4f:9e:bb:6f:99:38:77:45:fb:92:
17:03:c4:c0:97:ed:da:7e:ec:84:3d:cc:29:bd:57:bc:79:a1:
c2:79:ea:c9:8a:80:a0:d8:38:08:dd:9c:e8:8e:4e:43:db:04:
ab:e0:9c:2b:79:e1:4f:61:c5:96:5b:b9:2f:a3:96:62:0c:20:
c5:8c:fc:ea:a9:c7:15:68:46:33:78:a1:11:31:46:37:a9:fb:
ef:8e:33:99:0e:c5:d8:b4:f4:40:b5:17:0c:d9:9c:27:fc:a1:
0e:47:c6:3e:fe:19:6e:0c:29:e4:33:ab:a8:cf:9d:42:09:43:
73:8d:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org