Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6C1A6C6C8FDC11ECA640AE11C4F9AE02.roa
File: 6C1A6C6C8FDC11ECA640AE11C4F9AE02.roa (raw, json)
Hash identifier: vmz8AYa7CSjDbe+hX3CE/ORNptbP5nMdjRWcrLjiuFM=
Subject key identifier: 88:2A:04:73:12:06:9F:FC:56:F5:57:DF:12:92:F9:10:DC:34:78:66
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 064E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6C1A6C6C8FDC11ECA640AE11C4F9AE02.roa
Signing time: Thu 17 Feb 2022 10:29:01 +0000
ROA not before: Thu 17 Feb 2022 10:29:01 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 211252
IP address blocks: 115.167.0.0/22 maxlen: 23
115.167.0.0/23 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 17 10:29:01 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=620e236d-b313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:ab:07:a8:29:3a:0f:9f:ca:88:71:8e:c7:
df:fe:f4:a8:c5:3e:25:c4:08:9b:73:35:62:02:54:
69:62:3a:9a:01:2b:b8:3a:73:a9:56:98:16:79:9c:
0d:ba:46:bf:0b:6b:6e:a7:a2:55:42:dc:b6:39:af:
ff:97:ee:85:ef:5d:4a:35:f0:b2:e8:b6:55:46:40:
b2:f9:89:85:67:e2:c6:0b:93:16:42:e7:79:58:44:
ff:59:56:d9:16:b5:1d:11:05:0f:e1:f2:9f:b3:89:
ad:fa:50:fd:1e:39:d4:9e:26:a6:b1:bf:b6:55:a5:
81:24:f5:d5:af:78:9c:97:b6:5e:cc:85:c4:d7:0c:
b2:ac:9d:7f:30:da:91:d9:d2:52:dd:3d:ad:b4:c0:
b2:e1:c2:31:d0:86:d1:4a:51:94:2c:b3:d6:db:79:
cd:0d:fc:da:ae:44:57:5a:0a:d0:7c:7f:cd:7b:d2:
3b:c5:2d:44:38:f1:6b:0b:54:0b:a6:15:d8:e8:94:
7f:b1:1a:e9:85:b4:76:1b:02:ca:5f:58:75:af:5c:
a9:d8:e6:db:91:a6:8a:6a:17:b3:c3:52:31:a2:08:
12:7f:f3:f5:35:15:53:67:d1:d9:e9:e0:d3:5d:8e:
7f:82:23:a4:7b:8b:17:00:09:ab:78:97:0e:c1:76:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:04:73:12:06:9F:FC:56:F5:57:DF:12:92:F9:10:DC:34:78:66
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6C1A6C6C8FDC11ECA640AE11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.4.255
115.167.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:37:95:1e:2a:7a:fa:98:2f:02:db:57:4d:a5:50:56:39:2e:
50:60:58:ca:99:4e:c4:03:ee:22:1b:f6:26:27:f3:66:dc:aa:
b0:b7:ad:cb:22:7e:ca:1a:c0:e4:4d:28:2f:34:04:40:22:f5:
76:52:53:d7:f7:85:9a:92:6f:4e:cb:ae:c2:96:a0:46:af:e3:
b7:06:ef:ea:62:a6:68:9d:f4:38:7b:4d:61:ef:43:a8:2d:6d:
ec:b4:66:6d:a6:9a:a2:bf:78:2b:a8:04:16:68:f1:3b:36:62:
9b:4e:9c:7a:e9:6a:bf:75:51:b5:8a:e7:0a:06:ff:c1:36:ef:
c6:b0:c6:ed:69:ea:d8:d4:cb:f2:3e:ca:1f:8d:88:87:0e:a1:
40:81:a7:62:f1:05:30:10:c6:7c:8f:16:47:51:4f:a0:83:fb:
12:65:f4:76:ff:9a:a1:bd:20:09:b7:e0:9e:09:54:7d:a9:6b:
3f:1d:f5:16:41:4e:ae:b1:6d:05:e7:78:bf:40:37:86:81:1c:
73:cc:fe:ff:c3:0b:84:f3:18:de:37:fc:ab:fd:29:d4:c6:d9:
bc:a5:a0:13:e6:da:a6:8a:66:ba:08:ff:27:5c:c0:d4:70:41:
fb:09:de:29:0a:83:c3:d5:fd:cd:97:65:97:be:7d:aa:0c:34:
20:ef:36:3f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwMjE3MTAyOTAxWhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjBlMjM2ZC1iMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9irB6gpOg+fyohxjsff/vSoxT4lxAibczViAlRpYjqaASu4OnOpVpgWeZwN
uka/C2tup6JVQty2Oa//l+6F711KNfCy6LZVRkCy+YmFZ+LGC5MWQud5WET/WVbZ
FrUdEQUP4fKfs4mt+lD9HjnUniamsb+2VaWBJPXVr3icl7ZezIXE1wyyrJ1/MNqR
2dJS3T2ttMCy4cIx0IbRSlGULLPW23nNDfzarkRXWgrQfH/Ne9I7xS1EOPFrC1QL
phXY6JR/sRrphbR2GwLKX1h1r1yp2ObbkaaKahezw1IxoggSf/P1NRVTZ9HZ6eDT
XY5/giOke4sXAAmreJcOwXZhuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIgqBHMS
Bp/8VvVX3xKS+RDcNHhmMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkMxQTZDNkM4
RkRDMTFFQ0E2NDBBRTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E
HTAbMBkEAgABMBMwCwMDAHOnAwQAc6cEAwQAc6cGMA0GCSqGSIb3DQEBCwUAA4IB
AQChN5UeKnr6mC8C21dNpVBWOS5QYFjKmU7EA+4iG/YmJ/Nm3Kqwt63LIn7KGsDk
TSgvNARAIvV2UlPX94Wakm9Oy67ClqBGr+O3Bu/qYqZonfQ4e01h70OoLW3stGZt
ppqiv3grqAQWaPE7NmKbTpx66Wq/dVG1iucKBv/BNu/GsMbtaerY1MvyPsofjYiH
DqFAgadi8QUwEMZ8jxZHUU+gg/sSZfR2/5qhvSAJt+CeCVR9qWs/HfUWQU6usW0F
53i/QDeGgRxzzP7/wwuE8xjeN/yr/SnUxtm8paAT5tqmima6CP8nXMDUcEH7Cd4p
CoPD1f3Nl2WXvn2qDDQg7zY/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org