Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/F792C4EC1A6711EBA666224CC4F9AE02.roa
File: F792C4EC1A6711EBA666224CC4F9AE02.roa (raw, json)
Hash identifier: JERWHBGkNOUg77VMkw7iH3bDFzFxFkgGG27GEgE2Q04=
Subject key identifier: D0:35:D0:D7:2C:D1:7B:D9:5C:9E:44:F0:8E:91:21:7A:09:E2:DD:22
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 02E2
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/F792C4EC1A6711EBA666224CC4F9AE02.roa
Signing time: Fri 05 Nov 2021 12:48:42 +0000
ROA not before: Fri 05 Nov 2021 12:48:42 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 10143
IP address blocks: 203.6.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Nov 5 12:48:42 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=6185282a-081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:00:41:6f:cc:e2:46:0c:53:46:ff:04:9c:
8d:0f:a4:38:a8:7d:79:31:0b:5d:67:23:e0:9f:14:
a5:99:6b:4d:08:b7:6a:ab:04:ad:da:45:fa:f8:bc:
85:13:8c:2a:ed:fd:87:1d:98:97:2a:ec:5c:77:a6:
6b:cb:2f:bc:94:09:3d:4a:af:0c:11:e3:ec:33:75:
60:b2:8d:1b:c5:cf:1f:a2:c7:7e:1a:f0:33:9e:33:
da:22:bd:f9:14:41:c4:a1:33:15:99:6d:e5:bc:bc:
e4:e7:df:38:3b:1b:8f:5a:d7:03:9e:e9:78:f4:86:
d6:8e:06:c3:a4:06:e0:76:0e:0a:48:f0:0e:47:5c:
0c:a2:23:04:af:23:14:43:97:e1:46:24:64:84:0e:
a0:9e:85:8d:cf:2c:c2:0f:be:5f:59:65:ce:f4:47:
f7:a1:b9:ce:00:75:ae:42:9f:8f:88:23:c4:83:31:
4c:45:c9:34:87:06:f1:f9:29:05:e8:36:e1:1e:53:
d0:a4:7a:5b:2d:89:6d:ee:3b:a4:cf:c1:8e:1b:73:
be:a7:8a:a4:df:52:b7:3d:a2:fa:96:59:59:31:59:
24:1f:97:5d:13:2d:a9:4e:d7:ec:ff:36:c2:bc:4b:
e8:6d:ca:ff:df:39:5d:a4:02:c0:31:90:ec:d5:0a:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:D0:D7:2C:D1:7B:D9:5C:9E:44:F0:8E:91:21:7A:09:E2:DD:22
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/F792C4EC1A6711EBA666224CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:51:3e:94:3e:1e:87:1c:ca:30:ee:01:d3:47:30:a3:c3:16:
26:88:68:db:8b:76:2f:2c:24:c7:dc:23:fc:5b:c3:8d:7d:9e:
61:37:1e:1a:3c:ba:0e:fd:01:0c:44:db:9d:f5:07:b9:8e:a5:
a6:7b:a9:85:f4:bd:39:7d:06:6f:f4:a6:26:a5:69:25:ef:5c:
0f:3d:98:24:59:dc:f0:69:bc:a7:49:64:0b:45:2f:46:dd:7c:
bb:fa:86:37:84:ba:f1:4a:f1:98:4a:38:31:24:43:a7:0f:dd:
41:91:a0:7f:85:54:a5:03:a9:cc:ef:7e:9b:f5:4a:c0:b7:3b:
39:fe:32:02:7b:f4:6f:e3:19:be:ef:07:db:56:92:70:11:53:
13:0f:33:85:53:a6:f8:9e:10:7a:30:a6:10:d3:81:6f:16:73:
3f:da:89:13:40:f6:93:94:34:ce:d0:ae:bf:ef:7d:37:e1:57:
09:bf:44:ce:09:14:3f:bd:aa:02:28:d0:da:74:97:5b:1a:eb:
c7:d9:73:9f:fb:10:ec:be:f5:17:e5:f4:8d:af:93:38:f4:e9:
1d:5c:fe:eb:b5:b1:0e:84:c0:a3:79:ed:07:e0:31:4d:3f:40:
00:4f:6c:6e:47:71:3f:ac:ce:fa:23:15:22:fe:88:19:f9:95:
97:7c:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org