Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5416988BCA911ECB80B387AC4F9AE02.roa
File: A5416988BCA911ECB80B387AC4F9AE02.roa (raw, json)
Hash identifier: GDYLMMcp7dUrblzChmsWsahjfA9mwSh4TnWklDfoNU4=
Subject key identifier: F9:60:4A:B4:3E:A7:B0:22:8F:8A:21:24:EB:5B:50:4A:63:52:36:7D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 06F0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5416988BCA911ECB80B387AC4F9AE02.roa
Signing time: Fri 15 Apr 2022 10:48:55 +0000
ROA not before: Fri 15 Apr 2022 10:48:55 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 211252
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 15 10:48:55 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62594d97-c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:45:99:ac:d4:8f:8d:97:fe:d8:95:25:1d:
fc:e8:41:e3:eb:38:c3:72:a7:e3:0d:90:32:85:88:
c0:44:96:ae:7b:37:14:f0:51:b7:73:38:de:17:2b:
d0:f6:c2:e8:6d:88:93:61:25:25:98:0e:da:8a:7a:
5d:98:74:86:dc:22:1d:21:0c:a8:bf:28:a2:d0:6d:
58:14:6d:f3:b9:07:27:d0:18:b8:ee:62:41:c9:5e:
7d:ca:23:38:67:bf:f3:a1:3e:c1:db:6c:61:dc:d3:
3f:cf:57:18:35:7d:15:f5:71:b6:1e:e5:32:d2:34:
d1:0b:82:03:fe:ee:0b:04:10:2d:17:08:0c:76:83:
db:ac:d1:8f:0d:d3:e0:9a:8c:11:88:4d:85:bc:af:
bf:e4:3e:f6:47:ca:2f:b0:ba:66:df:85:78:9c:81:
9e:43:a8:2d:ae:98:2f:bc:19:43:c0:93:07:7a:b3:
d4:95:41:f2:5f:d5:86:9a:c0:b4:07:20:5d:61:4c:
6b:c8:85:67:6d:a3:13:10:ba:30:d1:62:f2:29:d0:
53:3f:4e:ab:fe:b9:eb:b2:57:47:16:e2:a2:0b:9a:
3e:2f:8e:8b:8d:1e:d1:68:9d:c8:43:05:39:1f:91:
a5:f4:2a:63:73:2f:d0:88:af:5a:6e:11:1c:ea:1d:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:4A:B4:3E:A7:B0:22:8F:8A:21:24:EB:5B:50:4A:63:52:36:7D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5416988BCA911ECB80B387AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.2.0/24
115.167.4.0/24
115.167.6.0/24
Signature Algorithm: sha256WithRSAEncryption
49:91:37:03:d1:88:fa:b2:85:c7:f0:fd:ce:d4:bd:ab:0d:82:
74:1a:a2:58:2e:0e:b1:15:2a:f5:16:de:7c:df:56:dc:74:e6:
74:1d:f4:52:2f:27:a4:34:0e:31:ae:89:94:e6:c2:d0:24:0b:
35:cb:11:7a:3e:4c:ec:87:bd:30:22:69:00:05:79:c7:a6:8c:
c5:ec:71:b9:48:74:4f:11:47:10:d8:6c:f5:25:6e:1e:70:5e:
57:bb:bb:e1:c8:39:a1:a6:02:1d:b8:32:b3:3d:ff:72:42:39:
bf:7e:54:e3:b1:6b:a1:3b:8d:8e:de:db:1f:f7:1a:c2:b4:40:
fc:0f:31:40:46:76:e1:95:44:d6:2b:34:60:42:9b:7d:7c:f7:
e2:0f:38:59:d1:f7:b4:4f:b5:ca:26:fa:3c:83:1f:70:b9:ef:
4b:6c:cf:20:2b:29:f7:24:c1:64:72:13:ea:af:3d:ca:99:fc:
6f:05:eb:61:67:38:f9:87:a9:5d:4d:f9:5d:59:69:cb:ac:6a:
1d:d8:c8:71:b0:4c:ba:6e:42:5e:f8:fa:42:35:d7:5c:de:05:
dd:5f:f8:7f:36:e9:14:de:ad:0f:7a:dc:e3:42:e3:4d:c8:f2:
82:dc:ac:4f:87:d9:44:e7:92:45:e5:06:96:f3:ea:f9:a7:aa:
2f:0c:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org