Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0B9962B0EA0211EBB3DB1251C4F9AE02.roa
File: 0B9962B0EA0211EBB3DB1251C4F9AE02.roa (raw, json)
Hash identifier: XBrAy5npRkrQ3yC16kYPtxvlNk+uGM1CBC5pDS22PPo=
Subject key identifier: 13:D5:76:4A:E3:8C:C6:1C:AD:DA:BF:2E:C7:43:0C:02:79:75:51:CE
Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial: 01E9
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0B9962B0EA0211EBB3DB1251C4F9AE02.roa
Signing time: Mon 21 Mar 2022 13:51:04 +0000
ROA not before: Mon 21 Mar 2022 13:51:04 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 9723
IP address blocks: 192.69.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Validity
Not Before: Mar 21 13:51:04 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623882c7-e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:c1:db:a7:6f:8b:cd:94:b3:1c:de:a5:bb:
6c:f4:90:dc:49:69:b5:9a:4f:92:63:23:1d:a0:3a:
f4:9f:e3:19:7a:f0:b6:45:56:07:65:0d:1c:3b:fc:
ff:fa:67:eb:71:04:ab:f8:02:fd:f1:9d:91:14:55:
f8:58:f6:69:2d:16:2f:20:e4:a7:c6:28:c3:f9:26:
f7:85:84:30:77:e3:90:84:01:22:c0:0c:5a:77:08:
92:22:01:d3:6c:d0:8a:98:fa:c5:4e:e6:25:60:3c:
25:56:1b:51:d0:02:0c:e0:24:5b:70:50:f0:45:15:
40:67:1e:11:50:00:25:be:36:6f:1b:8b:77:05:f1:
08:bb:80:98:6a:d2:6a:41:ec:25:61:6a:45:e4:d1:
54:8a:ad:88:2f:8b:60:b1:89:de:e2:ae:ff:34:0e:
46:6e:a3:6e:c2:61:b5:50:34:60:fc:91:5b:1c:25:
a1:a5:a4:8b:58:13:77:5e:e5:91:63:b4:d7:c7:e9:
7c:c2:63:dd:c4:c1:17:3f:6c:b3:0d:23:a6:b7:5f:
27:72:94:61:d7:68:23:5e:bc:37:93:16:c7:8f:39:
1d:29:37:18:63:ed:60:65:25:65:f9:ad:f9:c6:5b:
70:c5:a5:0f:69:e3:e6:73:30:e0:ef:76:2a:09:cd:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:76:4A:E3:8C:C6:1C:AD:DA:BF:2E:C7:43:0C:02:79:75:51:CE
X509v3 Authority Key Identifier:
keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0B9962B0EA0211EBB3DB1251C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.69.116.0/24
Signature Algorithm: sha256WithRSAEncryption
84:10:49:f1:97:44:4b:78:87:ca:5e:4c:db:36:72:d5:33:ca:
bd:a7:12:fc:b4:89:28:bd:e5:61:5f:a1:49:fe:a6:b3:c4:25:
33:71:71:d2:0d:58:d3:26:51:7a:86:41:55:87:8c:02:1f:99:
63:e0:e3:b6:db:d3:21:9c:f5:b2:71:32:bb:14:2e:de:98:8c:
9e:82:f7:9b:e9:4f:7b:fe:e2:26:52:6c:b0:9c:31:14:a4:fb:
f2:a8:80:00:03:50:54:74:fd:df:4f:95:6c:ed:5b:13:70:2c:
db:ca:77:b4:1a:41:a1:32:79:da:14:47:64:23:ff:4c:5f:b2:
db:8e:09:82:79:9c:f6:ed:c1:47:d6:e0:89:f4:27:63:b0:48:
43:57:d6:8c:03:e2:31:a6:df:53:bc:c4:e9:fe:61:d9:8d:ae:
f5:15:69:ab:41:34:ab:0a:ed:3e:43:12:54:94:e2:b6:61:20:
6f:92:19:75:0d:f3:6a:9a:df:7c:10:9b:f4:8e:5c:d8:8f:30:
07:20:80:e5:3c:b8:17:e0:d6:41:88:60:3e:9d:9b:72:3a:f5:
7f:a7:2c:33:bb:58:a1:72:7e:67:8d:4d:b6:a9:8f:19:b1:85:
be:70:b0:af:7d:6f:d1:ef:bc:15:7a:1f:57:82:b7:c3:8a:20:
ac:8b:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org