Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/FA22AB2A05AF11ED94EE8166C4F9AE02.roa
File: FA22AB2A05AF11ED94EE8166C4F9AE02.roa (raw, json)
Hash identifier: O4F9svvQO+niEEiJMN/WpyO2Y/R71KHnh+V9/KINahc=
Subject key identifier: C6:1B:4E:8E:B8:B9:9D:E8:15:C4:76:D2:D4:67:EA:0B:59:6B:61:8F
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 0629
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/FA22AB2A05AF11ED94EE8166C4F9AE02.roa
Signing time: Sun 17 Jul 2022 09:08:10 +0000
ROA not before: Sun 17 Jul 2022 09:08:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134806
IP address blocks: 114.129.12.0/22 maxlen: 22
114.129.12.0/24 maxlen: 24
114.129.13.0/24 maxlen: 24
114.129.14.0/24 maxlen: 24
114.129.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Validity
Not Before: Jul 17 09:08:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d3d179-28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:7e:f1:cc:0f:73:5a:69:31:20:12:0b:e0:
ad:c4:1a:99:58:4b:a1:c0:96:65:d5:88:09:93:9b:
ef:33:17:e0:10:14:88:8b:b0:44:37:11:91:ba:83:
6a:46:44:95:f3:c7:89:c7:92:96:a5:05:9e:18:9f:
9b:4d:98:a5:56:bd:93:fd:13:11:d1:7e:5f:f2:a8:
54:f1:0e:45:0f:74:b9:17:24:16:bc:62:a2:f1:99:
24:8c:50:fa:95:ab:f4:1a:2a:bb:4e:2f:da:17:8f:
66:ad:b4:8d:12:52:45:92:91:f6:5b:d2:27:25:3b:
92:e9:59:ab:64:7e:1f:b3:9a:d0:64:e1:09:df:87:
90:7a:ab:b6:f4:97:6a:53:09:1d:6c:78:76:ed:d2:
77:bc:c2:c1:16:99:18:1a:52:18:d6:ea:c6:d3:f7:
cd:cd:b0:3d:f7:b4:fc:b5:54:6e:ed:fb:a3:9d:85:
2b:25:5a:4d:a7:e6:f9:d4:ca:a5:50:ca:77:47:71:
9c:3d:5b:d9:df:17:02:fe:93:ec:17:f1:bf:cc:e4:
7f:c0:c8:21:7e:33:90:8d:86:11:88:db:e2:e6:15:
d4:e7:41:ba:05:65:9a:27:e7:08:0f:12:74:af:b4:
5a:87:97:8a:4b:d2:eb:86:c9:3c:e4:95:53:e2:cb:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:4E:8E:B8:B9:9D:E8:15:C4:76:D2:D4:67:EA:0B:59:6B:61:8F
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/FA22AB2A05AF11ED94EE8166C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:eb:69:ad:df:7e:3c:bb:45:87:56:6c:69:4c:ee:22:3c:c2:
f5:43:b4:39:5c:2b:02:b7:e0:33:98:e3:4a:99:a3:15:0c:5f:
a6:df:14:a8:11:17:35:04:f1:fa:a2:53:5e:37:b1:ba:60:9d:
0f:a3:2f:01:72:c0:04:59:d6:39:94:c5:9d:85:15:0c:1d:94:
a6:c0:bd:2e:69:99:aa:e2:f9:88:77:4c:e9:1a:11:a5:43:7c:
c6:93:35:88:6b:1f:6b:01:c8:21:ff:c5:20:3f:b4:fe:29:36:
cb:80:2a:e0:b7:03:1c:9c:44:fa:a9:4f:49:b3:ed:61:87:62:
a3:fa:d4:c5:2f:1f:ef:b8:5b:78:b1:15:0e:b2:34:94:b9:e4:
2f:6f:2f:cc:d9:45:bd:6c:5f:9e:8a:85:41:f7:5a:e7:92:b5:
54:e0:0c:6f:9c:e6:40:1a:7a:c2:0b:3e:55:53:63:b2:b5:80:
13:21:99:e5:b4:de:98:16:12:60:49:a5:24:56:4a:5a:67:1c:
79:fc:60:8e:bc:90:73:86:59:91:2c:c0:49:50:e2:05:6e:91:
04:6d:56:e1:28:3e:15:36:10:1d:12:0b:8b:f5:61:32:13:a4:
3e:dd:9c:c4:20:9d:2c:09:7a:98:02:9a:ae:1a:04:d0:19:d1:
82:5e:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org