Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D41F3D2AAA211ECAAC77536C4F9AE02.roa
File: 0D41F3D2AAA211ECAAC77536C4F9AE02.roa (raw, json)
Hash identifier: OoKZ9Ywo30FvKiBoasorq4EkdoQnWGKczfyXIJJxkK8=
Subject key identifier: 4B:3F:E5:47:6B:96:EB:31:59:B7:DD:CD:7A:78:F6:70:C8:16:9D:0B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 073E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D41F3D2AAA211ECAAC77536C4F9AE02.roa
Signing time: Mon 09 May 2022 11:50:47 +0000
ROA not before: Mon 09 May 2022 11:50:47 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.16.0/22 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.76.0/22 maxlen: 22
175.110.92.0/22 maxlen: 22
175.110.96.0/24 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 9 11:50:47 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62790017-4eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:80:ee:57:c1:6a:13:01:91:1e:a7:66:35:
d4:73:f5:9d:35:5e:8e:b1:76:8a:05:e9:bc:1d:1a:
e9:55:f3:96:0c:6b:71:31:20:b6:73:29:38:06:c7:
96:c2:02:13:17:0e:e1:09:5d:8b:55:ab:d2:72:20:
fb:37:0f:0e:d0:40:0d:53:a1:fb:28:9e:ff:30:46:
3b:2d:82:11:89:cf:bd:6c:ef:a3:68:88:97:40:aa:
00:87:e8:88:67:12:51:35:e8:29:c6:32:da:d6:1a:
40:78:02:c2:d4:29:63:10:64:f5:3b:84:01:86:2a:
f8:b1:3f:ac:5d:3b:9e:08:2e:19:e7:b6:b6:67:61:
c2:a2:da:b4:80:e6:7e:76:7b:1c:27:bc:91:05:24:
f3:19:cd:89:aa:39:d0:f5:3b:9f:a4:08:e8:e6:d8:
49:44:de:b8:7b:57:c6:6d:36:d9:87:b5:35:85:a2:
4a:72:a0:ee:a4:7a:d4:05:6d:23:8d:10:76:7c:f4:
02:43:a6:1b:a2:f2:54:48:f3:0b:f1:93:9f:bd:66:
94:3d:f7:dc:1c:3c:d2:d5:69:dc:7d:c7:6c:5a:56:
eb:5a:0e:e2:4f:76:a3:bf:e8:c1:df:95:d2:4e:3b:
bf:be:0f:1f:89:5a:35:f3:7e:0f:52:e4:48:e1:0e:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:E5:47:6B:96:EB:31:59:B7:DD:CD:7A:78:F6:70:C8:16:9D:0B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D41F3D2AAA211ECAAC77536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.16.0/22
115.167.96.0/22
115.167.120.0/22
175.110.76.0/22
175.110.92.0-175.110.96.255
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:82:33:33:98:c2:04:2e:37:17:e3:d6:b2:ea:19:0b:e2:5c:
2f:2a:a6:e2:7b:87:f1:f0:60:e7:35:44:aa:7a:77:a4:9a:bb:
1d:d4:77:0b:4e:2e:db:f8:ae:5f:62:fd:c3:ed:41:24:57:a0:
8a:1c:19:8e:9e:ba:ff:24:df:15:57:e2:6b:f1:90:ab:57:3b:
21:59:2c:c0:48:ca:a0:f7:7b:f4:38:a6:51:49:12:8d:c5:ff:
4d:43:b9:51:e5:25:a7:15:a7:66:83:1c:13:9a:d4:08:81:e4:
fe:d5:a6:1d:dd:2f:27:a1:2a:ad:1c:9a:f8:62:4a:45:53:36:
66:2b:88:10:89:ac:9f:d9:03:0d:50:c6:4d:7a:7b:f4:35:c7:
03:be:cc:5f:df:a1:b6:07:c1:84:d9:f2:63:9e:e6:78:32:9b:
0a:67:a6:16:0f:39:76:08:70:29:01:24:7b:86:d9:7f:a6:4a:
6b:b8:47:be:f3:64:77:0c:4a:bc:b3:c0:00:ff:91:94:6c:77:
e2:c8:c8:f6:02:0f:48:14:3e:0b:3b:a0:65:36:7f:b4:60:14:
38:b9:b4:5c:ad:3e:5e:f2:4c:94:58:2c:97:51:9a:85:7c:b9:
df:68:2e:65:df:38:43:ad:c3:c9:4a:b2:12:1e:33:32:13:be:
b6:25:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org