Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5E7381744EE211EC97AD174DC4F9AE02.roa
File: 5E7381744EE211EC97AD174DC4F9AE02.roa (raw, json)
Hash identifier: M9qwVzxIWOIXYZB6c6IXIymrNI1JqSCflGiwy/DS6Jc=
Subject key identifier: 19:55:C1:13:64:2A:7C:0A:62:6D:C0:EC:E9:76:1B:3D:A1:4E:9E:45
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 056B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5E7381744EE211EC97AD174DC4F9AE02.roa
Signing time: Fri 26 Nov 2021 17:57:50 +0000
ROA not before: Fri 26 Nov 2021 17:57:50 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 30823
IP address blocks: 115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 26 17:57:50 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61a1201d-80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:c4:88:79:0c:7d:58:62:22:cd:b2:f9:28:
ca:10:d4:99:db:9e:1f:eb:1e:e0:c8:f6:04:e2:38:
2d:d0:76:27:4c:e8:78:57:c6:8d:7a:6b:95:1e:5a:
86:05:e2:dd:d5:c6:29:95:84:db:ff:54:d8:3c:c7:
74:12:27:13:0a:ca:f3:b9:53:81:b7:0a:43:22:7c:
6d:fd:e8:8a:46:99:70:58:7f:32:56:7f:63:e7:db:
c9:c7:68:27:aa:2c:ee:c7:a8:87:f3:24:55:4d:e7:
62:45:6d:3d:32:07:a8:28:17:73:8c:13:2d:e0:66:
40:39:f8:25:b6:cd:ac:e2:32:c1:af:7a:30:17:4d:
97:6e:46:8a:21:8d:45:d5:10:88:a0:63:08:92:8b:
9c:9a:96:55:f3:9c:eb:77:66:6f:8a:75:1d:bb:dd:
2f:9b:6f:05:f1:9b:51:9e:45:02:e7:e5:f9:67:b4:
1c:a4:ea:05:0a:5e:f4:a3:b7:f8:fa:07:09:3a:1a:
62:dc:4b:0d:b5:50:57:a8:dc:1d:9c:c5:29:0c:57:
6b:2e:b6:4c:d2:ac:18:06:96:1a:8d:41:aa:be:86:
ce:20:04:aa:97:cf:2c:cd:9a:ed:8b:84:57:99:98:
9c:13:49:a2:7c:06:65:12:eb:08:ec:3d:52:f6:f3:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:C1:13:64:2A:7C:0A:62:6D:C0:EC:E9:76:1B:3D:A1:4E:9E:45
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5E7381744EE211EC97AD174DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.104.0/21
175.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c6:fa:d5:4b:08:3a:71:84:92:a0:04:aa:db:4d:16:61:f1:
75:fe:bc:8f:e4:04:be:c7:9f:64:b2:60:eb:ab:57:c8:38:cb:
c7:49:8f:f2:7c:06:86:57:90:9d:48:29:a0:15:09:4b:fe:13:
46:41:ae:48:19:bd:df:0a:6c:7b:97:ed:a0:c7:64:db:55:aa:
0d:95:d1:9e:87:42:76:ca:1d:42:8f:08:41:88:81:e3:8f:d0:
b0:a9:62:69:3a:39:cb:f9:5b:74:4c:13:88:b8:f8:e8:f7:43:
4e:ce:a5:01:3a:65:52:33:f4:11:44:77:71:77:08:80:5f:3b:
ec:fd:0a:ba:09:cf:36:d6:12:49:8f:c2:e6:1c:42:a7:fe:43:
e3:aa:89:76:c0:8a:c3:04:ba:d4:90:bd:43:13:b7:a3:f9:09:
5e:c2:bf:61:ed:0e:6f:7e:ab:4c:63:79:7a:da:f7:5d:7b:3b:
84:da:70:a8:4f:4d:39:47:ba:88:cd:f9:e5:49:56:84:df:49:
a3:d6:dc:83:23:f0:0d:fb:c9:d8:a2:0b:c6:44:f3:7b:a0:91:
64:a6:f6:b0:bb:89:17:ad:82:b3:ab:5c:31:e1:e1:3d:3c:ae:
cd:60:e0:6c:07:5e:28:3a:e5:ca:9c:a5:a5:6e:ae:3e:e5:7a:
d8:79:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org