Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7E63980A37B11ECA208FE7EC4F9AE02.roa
File: F7E63980A37B11ECA208FE7EC4F9AE02.roa (raw, json)
Hash identifier: IeADYdcE/xXTT+blsw8I1hZNxiN/r4wEOgAOeyp65Wc=
Subject key identifier: 69:14:BB:92:1D:09:E0:4B:A5:57:2C:1E:F8:78:A8:CF:A3:6B:D9:2B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0693
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7E63980A37B11ECA208FE7EC4F9AE02.roa
Signing time: Mon 14 Mar 2022 09:48:58 +0000
ROA not before: Mon 14 Mar 2022 09:48:58 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 1239
IP address blocks: 175.110.68.0/22 maxlen: 22
175.110.76.0/22 maxlen: 22
175.110.92.0/22 maxlen: 22
175.110.96.0/24 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 14 09:48:58 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=622f0f8a-7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:4f:16:b3:2f:ff:d2:17:c9:ed:b9:b7:a7:
dc:b1:bc:e7:ec:f2:d7:02:f6:a3:db:3f:14:81:c2:
11:7f:fc:40:17:98:40:a3:e8:8c:61:75:d0:e3:8b:
b3:4e:69:72:67:57:77:ba:c0:e7:83:5f:2b:23:02:
f6:0e:ac:7c:c6:1e:09:22:4f:86:d6:1d:ab:dc:52:
94:fe:42:ba:cf:f0:8c:86:d2:06:c7:6a:3b:2b:6f:
bb:0f:20:b0:f9:c9:77:6d:80:47:38:aa:12:1f:34:
02:bd:5a:9a:45:36:ae:2c:d8:34:44:f4:3c:ca:00:
a1:e1:de:4f:44:a1:a4:d2:00:ef:99:6a:97:f9:38:
dd:fb:3b:04:01:ff:e1:05:21:d4:1f:2d:37:26:8e:
5f:52:c6:08:3b:ca:d9:36:39:a0:24:31:5f:b2:bf:
22:ba:2f:f3:f5:ce:9b:7d:c3:1d:48:fb:c5:f2:be:
58:7f:8c:98:95:ae:69:b9:93:22:d5:bd:09:0d:ae:
31:ca:fd:45:96:e5:18:59:bf:05:3d:ca:4c:d3:0c:
26:6a:35:fe:dc:bd:32:17:fc:6c:2a:a5:d9:6c:27:
f2:ec:cf:88:64:b1:93:44:70:56:36:f3:65:da:43:
59:fd:dd:65:6c:59:d4:06:83:10:c6:f9:07:c7:c1:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:BB:92:1D:09:E0:4B:A5:57:2C:1E:F8:78:A8:CF:A3:6B:D9:2B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7E63980A37B11ECA208FE7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.68.0/22
175.110.76.0/22
175.110.92.0-175.110.96.255
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:0e:fc:54:de:0d:da:e4:72:a9:e8:18:05:89:87:38:6b:d8:
40:19:a3:6a:78:11:c4:7d:a5:f1:8f:6e:a8:60:ff:91:c0:4f:
dc:01:5f:a7:f0:74:dd:a5:c0:0c:06:c9:2d:07:4b:7d:45:45:
b5:ce:d9:1a:93:30:06:d9:54:7d:2f:ca:bf:c0:b3:4a:a8:9e:
f9:fd:df:6d:3f:63:84:6f:39:72:cd:42:a5:da:f4:07:f8:32:
e6:9a:36:25:f5:94:2d:4e:1c:64:90:87:f9:25:9c:f3:0f:dd:
02:f3:84:d2:c0:28:5b:98:8f:45:ba:f5:ce:ee:38:a7:aa:90:
0b:aa:2e:af:83:49:f8:bf:28:c0:27:11:22:64:cd:12:3e:37:
23:d2:a7:25:fa:a9:0f:46:89:81:1b:09:97:0f:bd:53:50:53:
0e:15:64:cc:a3:40:12:ef:3a:36:33:68:86:8d:a7:a3:36:a8:
71:d7:d1:19:c9:46:91:fc:d5:17:a2:cb:0f:e2:15:e1:1c:47:
0b:f0:d8:57:68:32:b5:7e:82:5d:19:1b:71:49:cd:48:7f:07:
72:72:b5:99:e5:89:5c:e7:0f:49:7f:b2:47:33:d9:a3:ad:26:
c9:df:25:43:15:1b:3f:cc:6a:9a:7c:5a:04:3e:0f:f6:f9:1e:
09:c2:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org