Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8A037E6843F11ECB48B0671C4F9AE02.roa
File: A8A037E6843F11ECB48B0671C4F9AE02.roa (raw, json)
Hash identifier: JMEJwz2bQ5vphVFhZfo25hboOz18HpiTJHTWt7G1HyA=
Subject key identifier: 42:65:15:E7:6C:BB:FE:D8:C0:15:5A:DA:64:5A:2C:9E:10:BC:95:BE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0623
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8A037E6843F11ECB48B0671C4F9AE02.roa
Signing time: Wed 02 Feb 2022 15:49:09 +0000
ROA not before: Wed 02 Feb 2022 15:49:09 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 399136
IP address blocks: 115.167.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 2 15:49:09 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61faa7f5-62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:09:83:1c:fb:ec:a3:87:ef:0d:9c:35:84:
8b:4b:52:ed:4d:80:36:f0:ff:09:27:64:a5:b8:51:
e0:51:3a:67:b2:37:dd:78:d7:da:f1:47:33:f6:71:
f9:6c:1b:33:62:dd:06:52:d4:28:19:0b:0d:0f:d8:
e6:db:a2:88:9a:42:ae:40:59:3e:92:e0:de:6d:ef:
45:8e:34:03:0d:2a:c5:d5:c4:ae:63:97:b1:7b:58:
9c:16:40:f8:7f:81:0f:4b:49:69:cc:6b:3d:1c:19:
fb:41:8f:c4:87:48:5a:e6:aa:e3:7b:d4:f0:e3:86:
de:a7:59:e6:64:9c:86:dc:b7:af:fe:d9:73:b2:10:
9b:0f:91:57:83:28:d5:fe:f0:b0:b9:e7:86:1c:d0:
36:5d:00:cc:33:6c:f3:11:1a:a9:8a:38:de:c3:7a:
bb:c1:13:a5:64:da:5e:0a:b3:27:73:ed:52:09:ec:
33:84:6f:cf:c5:fd:31:4e:d7:b7:8b:b5:1e:fe:94:
65:16:76:2c:80:ac:f0:81:ba:e7:01:a3:24:9c:09:
0e:0b:b8:f1:c7:bd:5d:95:b4:25:9a:2a:b3:41:f9:
2a:82:f6:79:6f:40:03:a8:77:64:d8:ff:b1:17:58:
44:ec:2f:15:5f:ef:1d:a0:92:a8:90:c5:f3:de:0f:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:15:E7:6C:BB:FE:D8:C0:15:5A:DA:64:5A:2C:9E:10:BC:95:BE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A8A037E6843F11ECB48B0671C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:6f:54:83:33:48:4c:ce:45:e0:3c:b5:0f:b1:4e:f9:d2:74:
ce:5c:7f:2d:cd:67:e3:95:89:64:00:b8:6f:45:2e:16:3b:9c:
6d:aa:14:db:1f:63:3f:69:86:d6:14:56:d1:ca:32:29:0a:8c:
31:96:3a:ca:dc:de:a8:49:a9:c3:5a:5f:58:92:48:e7:1a:8b:
da:9d:bd:52:01:45:e8:cf:8f:33:89:0c:23:1c:d0:16:c7:50:
1f:08:03:03:ec:11:e2:40:61:df:fd:10:52:ae:01:48:83:72:
00:a2:bd:13:be:c0:29:b2:2f:bc:6d:a4:21:51:0a:4e:57:eb:
fb:7d:cb:50:ae:7e:be:f3:bf:10:be:2b:96:7e:22:88:6b:e5:
89:46:2f:05:fd:1b:2e:46:90:12:3f:9d:b5:87:c4:76:b9:c8:
aa:c2:11:38:ac:e6:19:53:28:23:55:94:fb:82:80:9e:ce:16:
8f:78:84:c7:ca:5c:13:7e:a6:14:28:84:e5:54:1f:09:28:79:
ef:01:83:b2:9d:b0:cb:3f:5a:a3:73:b0:47:be:39:d9:55:55:
53:f6:cf:23:4e:d0:5a:a3:30:34:79:81:13:3a:35:d5:72:61:
57:84:c6:46:c4:a4:1d:c8:fe:d0:fb:9d:f7:cf:a6:f3:8f:17:
72:04:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org