Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BA1D632874AC11ED81EF297EC4F9AE02.roa
File: BA1D632874AC11ED81EF297EC4F9AE02.roa (raw, json)
Hash identifier: FNHTYWbFKHTlDia+UDCSxkPGBvhu2YPK/ko1d/ZZNgI=
Subject key identifier: 39:CA:71:03:5B:04:5E:F1:84:B3:ED:5E:1F:E7:99:6F:45:39:E0:0E
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 07
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BA1D632874AC11ED81EF297EC4F9AE02.roa
Signing time: Mon 05 Dec 2022 14:54:33 +0000
ROA not before: Mon 05 Dec 2022 14:54:32 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 137409
IP address blocks: 110.44.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Dec 5 14:54:32 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=638e0628-6e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:11:7c:1d:8c:cb:b2:6a:71:31:e7:ca:9d:
dd:03:ea:0c:cc:d8:00:49:f7:94:b0:6c:7e:18:4c:
02:89:2f:ac:04:95:89:bd:a8:11:da:d0:06:46:bd:
76:9c:15:94:c6:41:a7:8a:d0:be:69:45:8e:7c:07:
a4:2e:c3:09:fe:9b:e5:b3:7d:3f:3e:98:ab:7d:47:
da:9b:57:ee:78:3b:f6:8d:d3:41:03:48:e6:58:28:
7b:df:5d:e8:83:8a:33:93:90:56:2a:a2:ec:73:aa:
40:1f:ea:61:3e:94:be:02:a6:f1:b3:2f:03:b7:43:
0f:78:5c:cb:0a:aa:1e:ea:4c:df:3e:12:69:61:15:
9f:35:5d:dd:98:54:eb:e7:36:76:50:8c:67:6b:6f:
6a:45:cd:fd:9f:94:cb:d6:9b:3d:1e:87:7c:71:45:
6f:10:25:f1:5d:1a:c7:4e:5d:e9:87:de:58:87:b7:
5b:7b:fd:ab:4b:bf:11:7b:0e:94:4d:88:96:ab:b0:
fe:b4:3b:a2:2c:45:90:1d:1d:17:64:99:5a:d4:1c:
04:a2:7d:c9:bf:b2:12:41:fd:f3:72:b0:15:df:55:
8a:02:21:b4:cc:d2:79:f3:49:ff:7d:64:6f:dc:63:
24:e8:f7:2c:ca:87:22:fa:b5:7a:fb:ae:e0:5f:b5:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:71:03:5B:04:5E:F1:84:B3:ED:5E:1F:E7:99:6F:45:39:E0:0E
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BA1D632874AC11ED81EF297EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.44.110.0/23
Signature Algorithm: sha256WithRSAEncryption
44:e9:44:18:54:11:43:0e:87:a1:4b:ea:ff:77:65:63:ad:ab:
6e:8b:9e:78:95:60:56:0a:c1:7e:63:91:c8:a2:90:1a:47:6a:
f9:54:ae:ed:cb:c6:dc:80:ca:7f:2a:46:9f:85:8a:7b:eb:0a:
2d:f1:8b:ae:52:8c:a7:ea:2b:a3:cd:59:eb:b3:00:37:83:89:
a8:5b:f3:f0:4e:9f:dd:87:ff:77:8f:e9:b3:e9:94:4b:8b:6e:
61:a7:d7:a7:2f:3e:72:4b:f5:f7:0a:83:3b:ad:dd:8b:e2:e6:
af:71:e3:b9:2a:a0:52:96:36:13:a1:68:26:e5:49:59:4c:09:
41:3f:80:cb:87:90:97:32:28:36:12:c3:70:6b:93:76:ca:bb:
31:14:d9:2c:48:56:85:8c:44:25:78:07:da:5c:48:b8:40:a8:
9f:e5:9f:46:75:2a:7c:d5:fc:63:e9:14:f8:c1:dd:c2:49:82:
1c:05:af:6b:fb:f8:00:f3:e1:3a:89:b3:f6:9a:01:f4:e1:33:
4b:91:89:8c:61:cd:2b:39:b0:d2:44:2d:c6:16:ab:f9:38:a0:
be:16:f9:ab:ba:de:99:32:76:d0:5d:16:d5:38:82:95:27:93:
59:19:07:11:07:73:3b:69:73:d6:dc:4e:f9:a3:2f:3b:a5:42:
12:ca:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org