Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9FEBA1F0A13911EC992FF474C4F9AE02.roa
File: 9FEBA1F0A13911EC992FF474C4F9AE02.roa (raw, json)
Hash identifier: fyz/pyo4vCv4rMoK0atqBjjVjBP/uJV9QgAajsErxsQ=
Subject key identifier: 27:CD:55:17:D4:6F:01:1C:72:87:59:FC:26:7F:CC:75:BB:30:E6:E0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0683
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9FEBA1F0A13911EC992FF474C4F9AE02.roa
Signing time: Fri 11 Mar 2022 12:49:01 +0000
ROA not before: Fri 11 Mar 2022 12:49:01 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 210441
IP address blocks: 115.167.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 11 12:49:01 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=622b453d-50fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:dc:31:f5:55:90:70:5c:e0:c4:79:8c:35:
0e:b0:51:d7:80:a9:fd:2e:13:ff:7e:23:f9:bd:9a:
78:57:1e:4d:b2:0d:da:93:be:43:ef:99:7c:dc:a6:
f3:4f:e0:43:93:10:27:8e:31:94:32:0b:3b:ea:29:
06:7b:19:fd:0f:fc:7e:03:a9:f7:b1:dd:e8:64:48:
41:ba:eb:f1:7d:e2:38:82:81:6c:6f:58:8c:82:36:
8c:e3:bc:69:2e:23:a8:8d:b7:35:8b:45:31:15:f0:
ae:e3:f0:aa:b6:35:1f:af:5c:83:c1:fa:29:cc:b7:
e9:e9:37:9c:1d:88:08:7d:46:a8:21:86:55:0f:47:
3c:0d:e9:f0:30:61:f7:dd:d7:9c:59:87:cf:7f:ea:
e2:c6:ac:06:78:09:e0:92:d2:05:6f:6f:50:b2:3e:
1b:22:30:81:b1:43:fc:4f:25:97:c7:3d:de:d3:2f:
d3:b4:37:a8:58:a4:2c:17:12:47:38:e7:78:51:9e:
34:b6:87:f0:f7:e2:7e:7d:3c:9c:c5:a5:4f:ab:1a:
0d:a7:14:d6:a0:1f:c3:57:89:23:97:02:ef:be:dd:
33:e6:63:fa:06:14:15:82:05:57:83:3e:02:ee:31:
45:a6:00:b5:18:8f:fd:c3:6f:64:f8:28:f7:8f:b6:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CD:55:17:D4:6F:01:1C:72:87:59:FC:26:7F:CC:75:BB:30:E6:E0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9FEBA1F0A13911EC992FF474C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.100.0/22
Signature Algorithm: sha256WithRSAEncryption
63:04:6c:95:3f:d9:ac:bf:4e:1c:2b:86:ca:4c:ac:ca:8f:62:
fd:14:1e:2c:de:20:28:cf:4f:94:52:09:ad:ee:12:d0:e1:02:
57:d0:af:c2:6d:c0:8f:4b:c2:70:01:a5:f4:89:22:38:5c:ee:
b2:11:16:b6:bd:36:7f:e2:d5:27:dd:b0:5e:23:82:7a:99:d7:
04:68:76:f0:95:d7:31:32:49:36:eb:ba:dd:b0:35:28:b8:81:
ff:b4:a6:18:cb:6b:27:05:22:cc:25:f3:6e:1c:15:bc:f1:e4:
ce:ae:53:30:f2:5a:b5:4a:8f:6c:ea:8c:1a:78:20:58:1a:7b:
2d:65:54:83:13:3d:e5:7c:97:ea:b1:20:32:5f:03:ce:e2:7d:
8f:b9:57:bc:a9:f1:e8:b5:d2:55:e0:fa:c9:7c:ed:07:3b:9f:
77:88:8f:82:b3:3e:18:5c:27:5f:40:f0:43:9f:5e:fc:7a:19:
88:7c:c0:1b:bc:38:1a:1d:93:32:98:10:d9:4d:b1:5a:60:51:
92:b9:1a:6d:84:5f:4f:55:37:d4:3c:51:31:5e:bb:23:56:48:
29:d1:65:e4:ab:9b:12:db:63:90:bb:97:04:4e:89:ff:13:01:
71:17:c3:c8:18:7f:af:ee:4c:b3:60:97:60:85:81:71:fd:7d:
d2:cb:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org