Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9838AEC413611ECA936C369C4F9AE02.roa
File: F9838AEC413611ECA936C369C4F9AE02.roa (raw, json)
Hash identifier: /gk2vlKmQT1YXsKffKYHzaj7pM9kWyYiSe6lNKddLBw=
Subject key identifier: 20:94:BA:49:12:D2:BD:10:0C:07:2D:8B:47:86:81:A8:84:F9:28:68
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0635
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9838AEC413611ECA936C369C4F9AE02.roa
Signing time: Tue 08 Feb 2022 09:10:23 +0000
ROA not before: Tue 08 Feb 2022 09:10:23 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 46664
IP address blocks: 115.167.48.0/22 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 8 09:10:23 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=6202337e-6f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:26:b4:55:72:32:26:25:13:46:44:eb:e9:
e6:e5:b3:d5:d7:c1:b5:a9:1f:19:0a:58:b9:ec:ef:
95:fd:86:c3:2d:d3:62:e4:b0:2b:45:5e:58:9d:37:
50:15:b3:8d:6a:b1:6c:eb:ec:36:11:f6:91:45:33:
36:d5:24:5b:54:39:d9:3b:d6:fb:2f:2e:30:81:a4:
92:b4:5a:f0:96:f9:79:92:18:53:fb:7f:cb:b1:8c:
52:18:91:51:05:0c:04:3c:49:f1:1c:89:e3:7e:17:
65:a7:c9:23:07:01:72:78:0d:e4:21:cf:94:28:f7:
46:78:6c:d2:12:3a:c0:65:72:15:56:14:c5:d0:f6:
d5:74:9c:7f:7b:30:8e:d0:ce:ef:57:ab:ac:8a:77:
f4:33:7e:27:53:41:0b:64:e5:e2:46:f9:92:42:a3:
7a:05:c9:73:84:7f:ac:1d:f7:82:0c:40:36:69:3a:
5b:fe:d0:da:ba:6b:c0:ab:a4:78:9a:f6:ca:60:57:
dc:e4:7c:fb:0b:ac:0a:2c:7a:ae:50:b8:03:8f:a1:
85:79:55:27:f2:a6:97:e6:66:fa:e9:42:18:2a:4b:
b0:41:99:62:58:2e:10:06:6a:41:c6:2b:06:98:36:
87:b2:b6:8c:f0:1b:4a:51:4d:9b:37:cc:9c:f5:e7:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:BA:49:12:D2:BD:10:0C:07:2D:8B:47:86:81:A8:84:F9:28:68
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F9838AEC413611ECA936C369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.48.0/22
175.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5a:9e:a1:41:19:5f:e0:e2:1a:67:d9:cc:0f:c5:1c:b4:62:
11:9a:3a:af:0b:26:f1:7d:cc:e7:d1:ca:1a:30:71:fe:01:6e:
48:17:39:aa:e7:b6:f9:d3:21:22:80:17:4a:41:d7:9c:99:ff:
5e:ae:70:bb:76:a4:62:24:c9:b2:21:ac:5a:14:ac:dc:d0:9f:
29:38:ee:2e:1f:6d:65:79:a9:96:39:2f:97:e5:5f:08:87:f0:
1e:5d:f5:78:91:40:70:9b:fa:ae:df:15:78:43:ec:d5:53:fa:
57:80:9c:28:cc:e4:57:94:2e:a4:5a:61:23:39:c0:a0:3d:f4:
ba:cf:5e:47:62:bc:41:91:f4:4b:b3:e8:cf:b4:51:8f:78:9a:
b3:6a:b9:1b:14:5f:5f:6c:ed:17:80:1b:95:0f:02:6b:28:be:
43:56:61:28:4b:be:4b:4c:eb:5d:a9:f2:28:1e:56:5a:da:b2:
de:4e:b8:83:bf:1b:ed:bc:b5:4e:17:6e:a7:95:6a:28:3f:ab:
4f:1a:09:f2:fa:79:e9:32:6d:03:66:d0:ab:e6:9c:fb:e9:1a:
d7:51:ce:f1:26:be:ab:e5:81:71:1c:28:8b:8f:d1:d6:fd:d5:
0b:7c:1e:79:93:e4:2a:da:51:31:dc:e9:87:0c:51:34:8b:bb:
f2:7a:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org