Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B9F3F30293AD11ECB2A58A52C4F9AE02.roa
File: B9F3F30293AD11ECB2A58A52C4F9AE02.roa (raw, json)
Hash identifier: Y9ACGgZv8CFnmRWBdPoxTfhrnS3znzrAU99OyCdWkkA=
Subject key identifier: 4F:64:52:36:3F:F5:28:62:F5:14:81:2A:CA:FD:66:00:54:67:01:EF
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 10F6
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B9F3F30293AD11ECB2A58A52C4F9AE02.roa
Signing time: Tue 22 Feb 2022 07:04:51 +0000
ROA not before: Tue 22 Feb 2022 07:04:51 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 45474
IP address blocks: 119.13.168.0/24 maxlen: 24
119.13.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4342 (0x10f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Feb 22 07:04:51 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62148b12-a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:71:ca:27:2f:74:3a:d7:6e:bc:cd:c2:ca:
68:94:63:86:3a:72:a6:b1:dd:59:21:57:25:d7:22:
0e:ac:5d:e7:3f:28:d6:54:0b:ba:49:23:1c:71:f2:
25:bc:ae:8e:93:29:38:4c:d4:89:d3:ee:e8:38:10:
f0:3d:d6:16:cf:d2:22:20:3b:01:b3:44:d2:41:a5:
6b:ec:93:28:06:b7:f4:e8:9a:5b:d2:52:d5:24:d9:
d8:d9:7b:a8:f9:74:ca:df:1c:18:62:ab:df:ab:f1:
2c:be:42:f3:b6:68:da:5e:79:34:58:e3:a4:77:ca:
2c:b3:43:4b:a2:1e:a2:0b:bf:85:8b:17:3f:b9:e4:
1b:08:fb:06:9c:9e:d3:17:89:1b:63:d0:dc:68:d4:
c1:3d:c5:32:f3:e6:db:a4:5b:6f:ad:36:d8:53:0d:
ff:75:04:eb:49:1d:da:e6:05:9e:ea:71:c3:d2:04:
a9:41:92:12:2a:ba:f8:e9:0c:09:64:b3:7d:d7:2f:
1a:0b:b5:81:e9:22:ba:29:b1:6d:97:15:77:8c:0d:
43:28:85:80:c1:33:8e:d7:d3:67:b9:87:c6:f5:2d:
70:e3:1b:37:b0:2a:3b:b7:09:7b:c7:8e:c0:a4:a0:
96:d8:27:72:97:ff:1b:2b:d3:25:98:8f:ef:fa:c5:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:52:36:3F:F5:28:62:F5:14:81:2A:CA:FD:66:00:54:67:01:EF
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B9F3F30293AD11ECB2A58A52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.13.168.0/23
Signature Algorithm: sha256WithRSAEncryption
59:f6:99:e2:f5:ea:b3:9a:e0:c1:c3:9f:02:c4:60:46:0b:a9:
ac:13:29:3f:7f:c9:9d:c3:ae:e4:46:54:56:c2:c2:73:af:07:
6a:42:85:ba:db:9c:cf:4a:85:29:bc:17:23:ae:6e:f2:d1:f2:
f6:72:7e:f5:65:c5:d4:86:6a:00:48:63:4a:bb:47:0b:64:bc:
bb:29:c9:9c:4e:87:ae:13:74:8e:b0:6a:27:8b:53:48:61:ca:
dd:97:ae:e4:33:e9:65:3b:e4:be:f8:3b:c6:c6:a9:eb:61:59:
e2:1a:e1:f9:6f:e4:ce:cc:db:0c:a2:76:da:a0:bb:81:1c:71:
1c:9b:c9:a0:61:d5:4f:3b:19:b1:77:94:02:b6:e1:66:97:5b:
10:f7:18:b9:a6:55:39:66:2b:8e:28:37:04:d0:83:4c:f8:09:
ac:3c:1f:55:35:f5:43:f9:93:0a:b5:aa:22:15:2a:62:8c:04:
fe:7c:ef:d1:2c:fb:03:b4:9c:92:3c:db:d9:90:82:d9:b6:30:
ab:5f:81:db:ac:2f:8b:1e:77:79:36:0b:c5:0d:c9:b9:48:4b:
dc:28:90:e0:62:78:e1:d9:af:88:5b:c4:ec:11:5e:26:1a:73:
7f:fb:8a:2c:5a:4f:12:8e:18:b9:11:b7:66:ab:51:de:e2:75:
fc:f3:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org