Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6D79DC18BDE811EA81B6D070C4F9AE02.roa
File: 6D79DC18BDE811EA81B6D070C4F9AE02.roa (raw, json)
Hash identifier: j4CVivdxHxYkdySnWXT1iKahP1PqrSzc2p2ezQJvbDc=
Subject key identifier: B4:73:65:DE:4B:80:69:DB:19:1B:70:B6:DF:2F:AE:28:F2:F7:30:8F
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1646
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6D79DC18BDE811EA81B6D070C4F9AE02.roa
Signing time: Mon 16 May 2022 04:01:53 +0000
ROA not before: Mon 16 May 2022 04:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7633
IP address blocks: 164.164.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 16 04:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281ccb1-55b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:51:af:eb:36:0f:7b:b3:fe:06:a3:79:b5:
9b:e9:6b:82:cd:23:d7:5c:9e:b5:9b:68:69:d0:25:
d3:14:f1:44:c7:f5:6d:86:10:60:82:35:18:86:7c:
ff:7b:43:7a:26:57:04:8f:76:1b:bb:2a:77:2c:84:
a6:52:aa:29:df:70:ed:5e:f2:0c:38:3b:0b:cb:e6:
fd:f4:89:b3:ab:b3:f7:c5:5c:15:b4:3b:a1:9b:a8:
0e:ba:b0:9a:52:a8:8e:52:55:e6:1c:0a:2c:76:24:
d4:ab:14:56:4d:66:64:a8:11:0f:a8:6d:82:b8:c8:
e7:9d:57:64:57:1d:e8:9b:73:cd:67:45:82:ee:b0:
f8:9c:fa:34:8e:1e:96:00:08:b5:a4:bb:e1:6e:56:
63:47:33:f9:da:a0:eb:89:f9:31:c8:37:78:34:19:
58:5e:2c:f0:d2:31:2b:33:56:dd:eb:3c:a3:24:6a:
54:f6:41:a3:da:b1:5e:c0:b5:fe:66:cc:54:cc:01:
c0:4e:9c:3b:0d:3b:86:14:fd:e7:4c:a5:80:8b:08:
47:e9:45:97:d0:23:c8:a8:f4:41:ea:c4:96:4f:bb:
ea:a9:5c:79:46:d1:3e:85:12:6f:b4:30:ef:2d:a6:
f7:4a:ec:b0:5d:b6:fa:75:b2:19:3c:a8:ae:9a:89:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:65:DE:4B:80:69:DB:19:1B:70:B6:DF:2F:AE:28:F2:F7:30:8F
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6D79DC18BDE811EA81B6D070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:06:d6:b6:e8:b9:3a:c7:5e:d5:60:8d:44:3e:fc:b1:5a:ab:
ac:74:78:ba:e6:73:9f:0d:55:fa:44:90:8c:fc:f6:5a:15:d3:
23:04:9d:9b:f3:ad:83:89:c5:53:b0:8e:29:c7:c3:d0:56:7f:
5c:66:07:d4:24:f3:68:bc:c9:f1:0b:29:1c:27:89:86:d0:d8:
98:45:13:22:65:ae:db:f3:82:70:da:42:4f:19:ac:5e:60:2f:
d3:34:3e:31:e8:8a:8d:41:85:f2:b5:94:12:13:d9:e4:c2:85:
13:b1:0c:ec:7f:8f:f1:a1:26:93:94:c0:68:2b:3e:6d:ea:51:
dd:77:16:24:2a:27:db:b8:3f:ab:d3:90:61:ce:05:cc:71:80:
73:a5:1e:d9:ae:3e:66:4d:5a:cc:59:f6:e9:b2:7a:e2:c0:e5:
0f:3e:70:b5:39:25:4e:ed:2b:e7:ea:98:c3:1b:28:ec:df:20:
d7:79:4c:21:3f:6c:86:32:39:19:9c:87:7a:4e:ed:c8:63:60:
7b:43:27:2a:b1:0a:3f:45:d6:67:63:8c:b9:7d:14:96:6a:37:
cc:c0:e8:6b:fd:63:2b:d8:fb:64:c8:71:12:0c:91:9a:83:1b:
00:d8:a7:eb:1d:7d:c3:6d:d7:5f:14:8c:b0:64:8b:17:fd:16:
4d:49:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:50 2023 by rpki-client on console-fra.rpki-client.org