Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/0D59080AC2A011EB98F9A37FC4F9AE02.roa
File: 0D59080AC2A011EB98F9A37FC4F9AE02.roa (raw, json)
Hash identifier: gyRwKdHKwbMrNrck+9kywAgLlS6qsB+pne8a1orIak0=
Subject key identifier: 38:D8:F9:FF:26:BB:D5:66:2C:6A:F2:88:70:CB:90:69:B1:1E:33:A7
Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Certificate serial: 3069
Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/0D59080AC2A011EB98F9A37FC4F9AE02.roa
Signing time: Mon 11 Oct 2021 02:30:20 +0000
ROA not before: Mon 11 Oct 2021 02:30:20 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 131597
IP address blocks: 61.71.112.0/20 maxlen: 24
182.233.0.0/18 maxlen: 18
182.233.0.0/19 maxlen: 19
182.233.0.0/20 maxlen: 20
182.233.0.0/21 maxlen: 24
182.233.8.0/21 maxlen: 24
182.233.16.0/20 maxlen: 20
182.233.16.0/21 maxlen: 24
182.233.24.0/21 maxlen: 24
182.233.32.0/19 maxlen: 19
182.233.32.0/20 maxlen: 20
182.233.32.0/21 maxlen: 24
182.233.40.0/21 maxlen: 24
182.233.48.0/20 maxlen: 20
182.233.48.0/21 maxlen: 24
182.233.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12393 (0x3069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Validity
Not Before: Oct 11 02:30:20 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6163a1bb-76cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:d2:ee:ca:f7:97:83:fc:ac:1f:44:80:15:
48:8d:91:45:d0:13:14:fb:09:ee:a7:05:b7:82:9c:
42:1d:d4:ca:3a:e5:03:56:46:ed:dd:d2:83:dc:7d:
41:c2:9b:d6:74:64:e0:ef:84:b5:e4:09:ab:99:3f:
f5:63:0d:f0:9b:b2:45:4b:3e:63:f8:3d:ad:e1:a6:
70:86:d4:58:13:d0:95:6f:f9:33:b7:34:10:f3:bb:
fc:49:31:be:20:a7:ba:f4:5f:c6:f9:1c:16:62:4d:
e2:6c:ce:a1:fa:70:1f:4c:29:aa:23:be:9e:07:7c:
6a:1c:d2:87:e3:ec:5e:1d:d0:0c:47:3b:c9:88:34:
8d:ba:82:60:48:fb:40:70:30:41:76:d4:c1:d1:2f:
8b:a3:00:26:7f:9c:f5:42:83:b7:d5:d7:59:7f:4d:
47:5f:9f:27:dc:56:ba:6c:ac:55:3a:dd:79:53:dd:
6c:98:72:d0:64:44:f1:f4:c8:f1:55:7b:28:c6:1f:
58:e3:59:87:9f:9a:a8:f4:37:01:6b:06:41:b3:59:
95:0b:f3:db:67:1d:14:c5:e1:5e:bf:c7:7d:89:72:
af:2a:f7:33:e2:8c:36:49:38:d7:77:d0:35:0c:d9:
ec:95:cc:6c:08:77:c7:12:f6:7c:30:8a:57:40:e0:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:F9:FF:26:BB:D5:66:2C:6A:F2:88:70:CB:90:69:B1:1E:33:A7
X509v3 Authority Key Identifier:
keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/0D59080AC2A011EB98F9A37FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.71.112.0/20
182.233.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:25:70:d5:5c:98:8e:ea:df:d0:31:50:9e:c0:34:0b:59:b6:
e2:68:84:b8:d2:72:7f:3d:e0:e9:3d:f6:7e:59:5c:8b:3c:a1:
81:3d:81:a1:f5:ab:50:88:f7:1b:47:f4:ed:9b:b2:77:0b:06:
9a:49:a2:28:fe:b6:cc:41:64:51:0e:4b:0f:06:26:e9:6f:5b:
29:fb:91:48:f5:d7:f2:a2:8b:c0:78:64:1f:87:50:0b:85:cc:
2f:e6:3d:97:4e:8f:ca:0c:b4:99:2a:74:a7:f4:7b:c1:03:16:
f5:07:91:59:1e:fa:e8:21:8c:18:4d:45:a0:37:9f:b9:9b:61:
0b:20:58:30:9f:00:38:8d:62:42:0d:73:54:7c:6a:b6:d5:27:
c2:00:dc:9e:d7:df:50:6d:9b:f9:cc:1e:55:33:b2:84:12:c1:
16:e1:ef:86:b4:65:0e:4d:63:d4:32:36:d9:e4:15:71:15:8e:
9a:c3:90:53:61:97:8a:4b:dd:01:de:7d:dc:4e:91:0b:96:7c:
ab:07:50:8f:ea:03:6b:ca:1d:97:9f:ad:e4:e1:8a:90:2d:49:
ec:52:0b:a3:98:f1:a7:2d:f7:ac:e5:7c:08:b7:1b:cc:14:e3:
94:ed:45:66:04:8e:da:61:40:26:d9:b6:c7:0b:67:c3:2a:99:
e1:3d:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org