Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/E34DDB4C752411ED87944C44C4F9AE02.roa
File: E34DDB4C752411ED87944C44C4F9AE02.roa (raw, json)
Hash identifier: XtmbsZOlh1FSq/AAxn151eGOBi4b6Sfbc/hIvF59/bg=
Subject key identifier: FC:55:10:40:18:CB:4E:D8:18:C1:88:C7:0E:35:29:E9:ED:B2:EF:AB
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 0B
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/E34DDB4C752411ED87944C44C4F9AE02.roa
Signing time: Tue 06 Dec 2022 05:14:41 +0000
ROA not before: Tue 06 Dec 2022 05:14:41 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 137409
IP address blocks: 110.44.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Dec 6 05:14:41 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=638ecfc1-1407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:74:3b:e3:4b:58:9f:a8:a1:1b:27:ad:23:
4d:c0:16:07:ed:01:65:d3:21:cb:44:7c:11:d3:cb:
87:18:b6:91:1e:ba:6a:97:5c:da:7b:36:f6:a1:db:
aa:48:c7:7b:56:1a:fc:1c:03:84:36:48:5f:41:43:
44:42:e0:eb:cd:59:87:b3:e0:8b:7b:60:e1:32:47:
14:21:20:82:d3:01:b0:55:17:57:a2:39:62:9f:06:
d2:5b:38:0e:1a:9d:99:e2:e2:66:12:31:02:3d:43:
3b:bf:a4:9b:cc:07:db:29:8a:51:d1:4f:17:23:ea:
7e:8c:0e:c5:32:d4:3b:a7:f7:6b:8b:8f:c1:09:2c:
ff:76:fe:e8:f3:85:0b:2a:f5:ce:97:6b:e8:e1:2a:
72:fa:7e:62:36:fb:32:0c:6b:6d:bf:88:c9:b7:60:
21:2b:aa:3e:e5:88:ef:bd:cf:d3:13:47:7c:3c:1f:
58:a8:5f:a4:73:94:70:23:9b:ab:be:8b:a5:a7:a7:
fd:b7:47:ea:5d:fb:d3:07:57:a2:10:bc:9e:26:a1:
be:ec:38:07:2c:34:2b:92:8e:aa:73:96:9e:d7:6c:
b4:e8:f9:51:e4:b5:45:17:2c:0a:10:fe:25:af:09:
8d:c2:17:d9:a6:98:4e:64:1b:b8:50:82:2a:99:b2:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:10:40:18:CB:4E:D8:18:C1:88:C7:0E:35:29:E9:ED:B2:EF:AB
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/E34DDB4C752411ED87944C44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.44.110.0/23
Signature Algorithm: sha256WithRSAEncryption
69:2a:89:92:98:41:86:cb:47:e7:82:36:c8:3e:6b:b1:28:c8:
df:21:ce:5e:f4:5b:ac:38:c7:05:6c:b7:85:08:ea:3d:bd:6a:
a1:4e:4a:1c:41:73:09:06:d7:22:f9:f6:d6:f1:ab:93:a9:17:
c1:78:51:6d:cc:dc:f3:44:78:c9:97:88:5b:fc:13:e7:a9:c2:
17:59:81:bd:52:77:81:4c:dd:16:cb:59:8b:80:51:e3:08:53:
2f:d6:b8:15:26:42:70:3b:f1:fd:db:f4:f0:e2:1f:b7:01:e3:
f6:72:da:ea:1b:c6:fe:a1:0d:7d:7f:d6:db:3e:56:cb:b6:8c:
b4:ff:ec:7f:d3:8b:cc:df:11:d1:a1:d8:45:f2:90:3a:0a:8f:
2f:29:c4:91:3a:96:a0:31:59:cb:47:d6:ed:df:e6:62:ba:e3:
de:11:96:ab:13:65:3e:24:e7:13:ef:1c:c3:34:a9:a8:08:ae:
56:fb:1e:93:d2:09:c7:d5:a1:23:10:03:36:d8:75:8b:05:d8:
40:58:13:ba:33:3e:48:d9:8e:17:d5:d7:6c:d4:8c:8a:62:90:
bc:89:61:1b:4b:d5:b2:01:7a:0d:91:91:a4:ed:8c:c2:c1:2b:
23:d6:2c:eb:ff:9f:02:7f:98:2c:51:c1:e3:0f:c7:9a:12:4a:
05:06:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org