Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4FD3182430B911EC974C3830C4F9AE02.roa
File: 4FD3182430B911EC974C3830C4F9AE02.roa (raw, json)
Hash identifier: CaBOCBM+Ui+TwW7EJRLXupY+6py2FRAQHQpHP9+BmuY=
Subject key identifier: 80:F7:3F:45:AE:C0:82:7D:07:6D:64:10:33:C1:48:1A:40:AA:FE:29
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 037C
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4FD3182430B911EC974C3830C4F9AE02.roa
Signing time: Tue 19 Oct 2021 08:48:21 +0000
ROA not before: Tue 19 Oct 2021 08:48:21 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 36131
IP address blocks: 169.136.64.0/24 maxlen: 24
169.136.65.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.69.0/24 maxlen: 24
169.136.70.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.72.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.129.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.132.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Oct 19 08:48:21 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=616e8655-2e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:94:7c:d4:1a:40:0e:b4:6f:79:e3:22:e0:
f4:d4:44:73:bc:bc:70:57:eb:0d:86:67:b7:23:bb:
af:ad:6a:5b:cf:4d:4a:8c:b9:01:84:1a:c6:f8:06:
ba:f2:6a:3f:fd:d2:a7:30:69:1f:29:5c:a7:e6:ce:
d5:3a:03:d8:43:97:c3:06:c8:22:d1:34:81:2f:62:
6a:63:cc:93:84:62:1c:d5:ab:d3:ea:07:97:b6:e8:
3d:57:10:96:fe:97:ba:8c:a2:36:c6:d4:f2:b7:6a:
aa:d3:c1:ab:aa:11:46:41:51:b1:87:95:42:c7:17:
0f:69:9b:3f:cf:5d:91:f8:39:7a:a0:94:e6:64:a8:
c0:78:97:68:c5:0b:88:b4:5d:d9:ac:e3:59:c7:7e:
75:be:cb:46:1b:ad:6f:2c:9a:d9:a3:72:50:84:d0:
af:21:a4:0a:f4:6c:a5:27:ba:3f:de:82:f5:6f:e8:
41:5a:43:cf:ce:b0:ae:7f:23:9c:e1:a3:8d:44:5d:
2b:28:e7:e6:04:9e:06:67:ea:b3:37:6b:ec:85:f3:
cc:59:22:72:59:34:f7:bb:71:20:70:46:40:e4:d8:
be:02:13:c9:59:e7:76:f0:a6:7f:f5:26:f1:5e:12:
b2:4c:38:b3:23:9f:65:a8:c9:d5:bc:e6:2d:b2:f9:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:3F:45:AE:C0:82:7D:07:6D:64:10:33:C1:48:1A:40:AA:FE:29
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4FD3182430B911EC974C3830C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.64.0/23
169.136.68.0-169.136.75.255
169.136.128.0-169.136.130.255
169.136.132.0/24
169.136.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:52:bf:6a:19:2e:9f:91:73:24:e3:dd:95:82:41:c6:fd:3b:
d1:8b:fd:5e:97:47:0f:21:64:02:9b:73:cb:8f:49:16:61:b6:
24:a1:6d:76:e0:b3:85:fd:01:29:68:ab:a9:8f:fd:d3:aa:36:
78:e2:e3:9a:e5:dc:2c:dc:10:e3:f9:6d:99:10:3b:7d:75:17:
a3:66:ee:cf:49:8f:8b:40:35:f3:55:ff:87:cc:54:17:25:01:
5a:61:79:fd:8e:78:ca:3e:90:b5:9d:17:5e:26:f3:04:2b:f7:
20:20:c5:ee:8b:9c:73:de:f2:84:91:ae:6e:9a:56:d3:ae:68:
1b:62:9f:f5:a0:25:53:1c:75:49:60:db:27:e1:35:dc:4a:03:
0b:61:91:34:e2:06:ff:b3:0a:54:7b:01:98:c1:7d:a0:1e:2a:
aa:31:91:45:6b:8d:1a:6f:90:df:c9:bd:3b:4f:3a:3b:85:0a:
22:07:0b:36:65:8e:34:d0:b2:87:45:d6:16:20:e5:32:1a:35:
af:e0:24:eb:d0:b3:bf:b3:fc:7a:59:79:08:ad:6c:35:a8:3e:
a5:bc:7c:71:01:fa:62:25:1e:60:dd:27:20:1d:3d:9d:53:d5:
1e:28:a8:6b:0b:a9:8c:b8:2e:84:f1:b9:85:a9:b3:6b:a7:b2:
f3:8c:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org