Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/36DE5CD805F111EA83817F1AC4F9AE02.roa
File: 36DE5CD805F111EA83817F1AC4F9AE02.roa (raw, json)
Hash identifier: uf9CyGGOhra4wf4msvgGIorl5Oq6S3h02osG/+L45xk=
Subject key identifier: 6A:81:1A:4B:18:25:D0:72:96:BB:5A:BB:8B:40:59:2B:D6:AC:CD:CE
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 172A
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/36DE5CD805F111EA83817F1AC4F9AE02.roa
Signing time: Mon 28 Mar 2022 14:40:30 +0000
ROA not before: Mon 28 Mar 2022 14:40:30 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 2914
IP address blocks: 116.51.16.0/20 maxlen: 20
116.51.28.32/27 maxlen: 27
116.51.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5930 (0x172a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Mar 28 14:40:30 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6241c8de-d736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:0f:6f:45:52:2e:43:78:46:82:38:82:d9:
69:0f:f1:52:13:92:a3:70:7f:08:b9:c4:17:af:8d:
42:9e:5e:ad:48:8e:34:90:a1:f0:a3:e5:1f:ce:c8:
5d:d3:8f:8e:e8:ff:74:8b:bf:91:fc:15:e3:68:67:
37:9e:04:0e:67:bc:5c:df:87:b0:9d:28:a6:52:bf:
84:4b:96:21:74:1a:e0:ee:db:fb:81:d0:1f:56:96:
06:a1:46:5a:36:cd:08:23:e4:0b:c9:31:f7:a2:4c:
be:e9:68:ce:bf:25:a8:28:b2:8a:d4:e6:f6:d5:66:
dd:12:06:4b:74:27:96:d6:9d:f3:ba:b5:2e:a4:5d:
6f:d8:e2:ca:70:e4:14:9f:60:f0:9a:66:82:a9:31:
d0:5b:13:de:43:b7:bd:5b:9a:91:96:26:ba:21:4c:
14:01:71:24:b6:e5:a3:08:09:ba:5f:01:8b:2a:d3:
0c:cf:4d:5b:53:ed:4a:b5:5f:d5:a2:b0:31:1c:43:
5e:a7:14:fe:fb:de:bf:fd:1b:02:2b:2e:0a:c3:ed:
5d:cc:01:0a:00:12:55:9d:97:75:cc:e5:ee:9c:75:
86:cb:7e:a5:53:75:02:94:ae:f3:56:41:ad:63:e3:
b8:e7:08:54:6d:f0:a2:14:93:ea:66:5b:f2:c3:2d:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:1A:4B:18:25:D0:72:96:BB:5A:BB:8B:40:59:2B:D6:AC:CD:CE
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/36DE5CD805F111EA83817F1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.16.0/20
116.51.40.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:99:51:57:ff:8d:f5:83:c4:ab:ed:20:fd:9f:1c:4f:fc:f9:
45:d4:05:83:90:91:3a:c1:59:e2:d3:bc:1e:bb:f6:65:62:43:
2d:b6:38:c6:87:8c:e0:2b:43:88:2b:ed:ad:0f:f7:3c:d9:82:
c4:b1:95:b6:0b:18:ad:78:6d:86:39:d9:41:4c:7c:24:2d:42:
cb:13:db:47:9e:c4:f8:0c:dd:0b:33:d6:6f:89:dd:27:55:4a:
d7:9a:e9:44:79:4d:14:9b:42:b9:d3:f3:a2:7c:85:47:89:3c:
3a:f4:6e:2f:59:b2:ac:fd:a8:82:c1:87:d6:92:e6:7c:3f:aa:
6c:a1:bf:bf:53:0d:29:78:df:28:a9:f2:da:66:82:02:c4:ad:
37:b1:68:f3:13:c6:c2:2d:91:58:59:1f:ef:25:21:0a:57:6f:
a8:5e:da:54:ef:54:10:b9:7f:bd:cf:f5:1a:06:9b:5f:f3:5c:
8d:4c:31:d4:65:6e:87:37:81:f1:e8:87:63:39:d1:df:91:4d:
d5:f1:35:cc:c3:7e:75:62:32:4f:90:2c:aa:71:25:fa:d2:45:
a1:34:dd:d4:84:7b:ef:ee:48:62:3a:66:4e:0f:49:c9:96:8f:
c3:e3:11:c5:31:64:a0:86:44:82:8b:e0:e5:db:b7:1b:d3:ba:
f3:2f:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org