Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BAB8063A74AC11ED81EF297EC4F9AE02.roa
File: BAB8063A74AC11ED81EF297EC4F9AE02.roa (raw, json)
Hash identifier: vpAR/YRc0zMU07bnvTtpOmBitbe6ralmvoLfsW0GBPQ=
Subject key identifier: F0:9E:87:E7:58:03:07:6E:D5:56:71:F4:D1:E8:F2:90:C2:2F:63:F6
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 08
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BAB8063A74AC11ED81EF297EC4F9AE02.roa
Signing time: Mon 05 Dec 2022 14:54:34 +0000
ROA not before: Mon 05 Dec 2022 14:54:34 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 7018
IP address blocks: 110.44.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Dec 5 14:54:34 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=638e0629-e0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:c6:67:b8:d9:e9:42:a7:12:7f:12:ca:7a:
f0:be:9c:24:7b:63:bf:71:8e:70:0e:eb:80:21:2d:
9b:2c:ce:bb:73:a7:80:f4:9e:86:d6:fa:04:c3:e3:
47:f5:de:3e:90:84:c8:79:3d:a4:13:f9:b1:d0:10:
6e:0a:88:a0:c0:12:1a:86:48:e3:46:27:02:7e:c7:
ab:e8:68:20:8c:5f:29:08:ad:17:98:6e:9b:1b:d3:
5a:92:4f:f5:8d:19:66:ba:06:66:fe:c7:79:57:5c:
80:df:31:be:37:72:3f:44:e6:bb:af:ba:b7:c0:0b:
96:a3:cc:d2:46:ea:f8:a6:35:fd:02:c1:4d:5c:31:
e1:3d:70:4e:9b:a5:91:c1:1b:ad:f9:7c:f3:46:cd:
b9:c0:1e:f1:e3:7f:4f:83:c4:7a:cf:cb:ea:93:26:
95:bc:30:ff:6b:81:8f:50:c5:91:f9:2e:cd:57:67:
89:55:82:01:7e:4f:c7:0d:c3:9a:6d:b6:70:01:21:
02:61:b9:78:d8:2b:b7:b6:86:81:33:77:33:ec:d2:
cf:5b:33:9e:26:8f:65:4b:7c:42:70:49:e8:85:da:
69:ae:62:79:91:27:67:5e:9a:44:0c:f6:dc:d2:76:
f8:82:66:ba:51:1e:87:80:9f:56:dd:7e:8f:80:95:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9E:87:E7:58:03:07:6E:D5:56:71:F4:D1:E8:F2:90:C2:2F:63:F6
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/BAB8063A74AC11ED81EF297EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.44.108.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:bf:3b:d2:0a:96:30:83:fe:7d:25:6c:06:a1:e4:c8:b9:15:
e8:1d:23:d9:5a:a6:b8:74:be:a8:6a:55:b0:79:dc:f7:b3:bb:
59:6e:21:65:14:f8:2d:ab:11:32:15:79:e9:dc:be:cc:a7:5a:
fa:c2:09:ce:61:6f:68:7c:e7:49:e2:92:c3:8e:ff:7f:bb:56:
6f:24:fd:7e:b2:f3:3e:0a:30:be:27:97:bd:3a:25:c1:5f:f4:
79:e1:2c:c9:34:8d:6c:b0:30:9b:81:8b:49:e7:00:99:d8:31:
55:bf:88:bc:d8:36:5d:75:07:98:84:c4:c2:ab:04:82:58:4f:
ba:15:11:f6:99:87:b5:40:1e:93:11:32:c5:2d:32:ca:ee:a8:
ec:ce:92:ae:a1:9c:c0:0c:e3:0a:47:08:74:d6:e0:ba:5b:38:
12:5f:ff:47:37:90:13:ab:05:25:04:02:a4:16:9c:c7:67:e9:
a8:88:16:ee:76:db:a4:4f:e2:47:cd:93:3d:eb:21:8e:e6:10:
ea:11:94:b4:dc:3e:35:6c:d9:2c:a4:2d:df:1d:bb:d1:f3:6a:
53:6c:b8:4c:98:61:e6:c5:ed:c8:94:4c:c2:c1:34:5d:8d:d8:
43:9a:3b:0c:30:9e:d2:d6:3d:e9:0a:f9:06:21:d6:9e:28:43:
01:e3:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org