Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
File: B073886292D811ED9EA79F13C4F9AE02.roa (raw, json)
Hash identifier: ZOObWlGfzL/wxBordpEMfAMUAdpgjHRC8ARZp8mh8Mk=
Subject key identifier: ED:32:29:DA:83:EB:38:72:C8:1E:CE:E7:BB:D6:3D:FD:F0:33:46:99
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 78
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
Signing time: Sun 26 Feb 2023 23:55:10 +0000
ROA not before: Sun 26 Feb 2023 23:55:10 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.64.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.104.0/22 maxlen: 24
218.33.108.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 26 23:55:10 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63fbf15e-5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:48:77:29:02:60:c5:8b:42:89:f3:68:f1:
9e:6a:bc:87:fb:a4:92:91:b8:bf:6d:0f:c7:19:f7:
30:99:4e:ff:7f:c0:80:9c:e6:da:0b:f4:44:32:6a:
26:bb:13:88:ee:f2:bb:e4:dc:19:bd:32:21:85:df:
43:f2:0a:c0:48:59:fd:c5:14:ef:21:2e:38:27:cb:
53:e1:70:f9:44:5d:fe:11:67:ae:ad:f7:04:6c:10:
26:83:fa:80:69:1a:02:63:c8:bc:b5:2e:af:7d:53:
fa:88:40:91:d0:a2:35:b3:e7:71:ee:48:25:07:bd:
f6:17:5d:c6:01:e2:9c:dc:1d:df:59:d1:d7:91:e6:
26:46:90:db:ff:d5:3c:54:db:94:88:3d:90:6f:c8:
a3:7e:58:97:7b:9a:e4:6c:83:86:04:f2:5a:15:cf:
f5:6f:ed:ea:ce:f9:aa:40:b6:1e:db:3d:ee:99:4c:
7a:dc:8b:c3:d1:6d:89:90:ff:b9:67:5a:a8:d4:4b:
ef:c8:b1:6b:bc:f7:22:54:e2:f4:d5:69:c1:59:19:
e5:a2:07:cb:2d:43:f1:cb:3c:21:68:aa:71:eb:2a:
55:bf:1d:cc:2f:57:65:76:64:da:87:99:ea:63:31:
02:24:6e:e0:ec:7c:dd:e2:12:8e:c5:f1:73:6a:d7:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:29:DA:83:EB:38:72:C8:1E:CE:E7:BB:D6:3D:FD:F0:33:46:99
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.64.0/22
218.33.100.0-218.33.115.255
Signature Algorithm: sha256WithRSAEncryption
19:1b:ff:a8:99:5d:55:5a:72:e6:1b:cc:5d:5e:38:25:82:d6:
00:f6:98:bb:36:89:07:81:69:cf:6a:21:d0:7e:11:50:3f:94:
99:e1:88:ea:4c:0a:b4:66:52:5d:ab:33:a4:48:4c:d5:25:f9:
5a:42:c8:d3:4e:95:b8:1e:fe:88:6f:b7:c9:fb:68:53:a9:a3:
e5:d9:20:c0:7f:88:a0:60:64:ad:37:db:dd:f3:9e:e8:e7:87:
4d:46:18:24:14:03:bf:db:b9:c4:db:98:dd:14:50:95:29:90:
99:bc:21:93:64:c6:48:fa:f4:04:0a:26:30:9e:4f:58:28:e8:
4d:1f:5e:d5:d3:71:68:b1:65:f3:ed:62:dd:8c:86:c0:c7:d2:
b0:eb:a2:fd:98:58:67:75:cd:c9:9d:b9:b0:d2:cc:dc:7e:11:
8c:64:73:69:4b:05:5c:b2:42:f6:af:29:bb:91:b4:cb:2b:e9:
23:a2:e5:e3:fe:0b:8b:07:6e:eb:b3:ed:24:c9:10:c4:23:a9:
03:b7:71:7b:19:99:17:08:32:c0:e7:98:9c:6b:89:a9:f4:82:
03:24:68:36:1b:50:66:b8:01:57:72:d3:b3:e0:06:e3:d7:6f:
5a:6d:eb:5b:19:bc:17:e6:d9:ee:63:71:c3:16:06:2c:0d:2a:
26:0d:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org