Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FE7C12B6743B11ECB2525D75C4F9AE02.roa
File: FE7C12B6743B11ECB2525D75C4F9AE02.roa (raw, json)
Hash identifier: Zy702E2TzRI1VoxXft9Uac4h1K9s9rdugcHEVczXuhg=
Subject key identifier: BD:24:9C:09:F9:E9:AC:B1:3C:C5:DA:30:18:FC:02:38:7C:56:91:07
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 03
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FE7C12B6743B11ECB2525D75C4F9AE02.roa
Signing time: Thu 13 Jan 2022 06:42:36 +0000
ROA not before: Thu 13 Jan 2022 06:42:36 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 134134
IP address blocks: 116.204.242.0/24 maxlen: 24
116.204.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Jan 13 06:42:36 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61dfc9dc-4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:ba:74:f2:61:bc:2d:f5:39:ec:17:57:f6:
69:64:4f:91:67:04:5e:b4:53:71:26:72:cc:68:7a:
ec:80:05:52:4b:7e:73:7f:7f:c7:9e:91:e0:d4:6c:
68:7f:37:45:a5:f6:3f:08:98:f2:b7:0e:ba:51:36:
0c:07:be:25:5c:66:7e:5f:2f:fc:d4:5e:e3:a2:1b:
f9:b7:1e:fb:f4:62:3f:80:82:2e:2f:b4:44:83:6d:
40:18:97:b5:18:5b:8e:45:80:e0:94:bb:7c:23:0c:
13:5d:96:b0:6a:56:36:1e:69:ed:d0:44:f2:da:cb:
5a:04:f8:a2:72:6b:78:c6:6c:44:da:5a:8e:71:43:
57:6d:9d:3b:0a:26:28:fd:49:80:e0:6a:8a:d8:d5:
3a:84:89:83:74:af:fa:fe:91:9a:87:f9:da:eb:78:
46:b3:a5:52:04:7c:cc:6e:f1:5a:4c:e2:93:4f:82:
57:d6:ab:0a:1f:97:ef:82:d1:80:ff:13:3a:c1:75:
eb:f4:53:fa:4f:a4:12:f1:a4:33:14:af:89:d7:b9:
7f:bd:8e:d0:23:55:8a:f6:9f:4b:cd:2f:43:35:a8:
aa:23:61:a0:32:5c:ed:7d:fd:8f:07:21:45:c4:0a:
95:fc:cb:44:86:02:93:53:48:5d:53:12:90:a9:be:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:9C:09:F9:E9:AC:B1:3C:C5:DA:30:18:FC:02:38:7C:56:91:07
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/FE7C12B6743B11ECB2525D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8f:f1:01:3e:49:09:e1:d8:22:45:43:8a:0f:e1:e6:e3:05:
c8:60:1e:7c:f1:4d:44:11:83:31:07:b3:4c:26:66:f8:13:ff:
57:3d:30:c8:2a:3a:69:4b:4b:ad:d2:93:d1:f8:4d:65:16:62:
87:1b:28:de:62:ce:ec:81:70:7c:b6:06:58:84:c2:25:81:3a:
21:58:05:e0:cc:62:ed:89:30:78:5e:06:06:53:18:d6:86:9e:
6f:40:00:b2:84:f2:cc:22:04:c8:ba:4d:37:b8:d1:c0:88:a1:
44:f0:2e:94:da:0a:41:0a:60:55:06:e8:e8:6a:43:b9:4d:9f:
ed:54:ec:90:3a:51:6f:5b:d0:19:b1:82:a5:bb:93:8b:9c:f0:
b1:52:c1:80:68:66:f8:d7:1d:bb:fa:ca:4d:79:2c:36:de:77:
58:5d:43:46:be:96:98:a0:45:ce:34:24:bb:77:8f:40:33:05:
19:0d:e1:75:d8:87:24:b8:e4:ee:39:24:d5:0c:25:c5:e4:e3:
fc:02:94:94:aa:e7:21:02:bf:3f:bc:d5:82:76:27:2b:f2:3e:
f4:52:96:b7:d8:b7:39:27:08:d2:2b:39:9d:70:38:ed:9c:2f:
ee:a7:75:cb:5c:0b:fc:dd:f1:ce:83:96:8e:d6:11:2e:c5:ec:
a4:2c:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org