Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7A8AE582064911ECA853EB0FC4F9AE02.roa
File: 7A8AE582064911ECA853EB0FC4F9AE02.roa (raw, json)
Hash identifier: ketVi/LqhERMvvPWcpFajHhoZ3ICZ1EtXOGluUXxw74=
Subject key identifier: EA:CF:79:03:B6:05:4E:2A:54:D7:C7:5F:04:68:23:3B:7A:0F:63:2B
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 05
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7A8AE582064911ECA853EB0FC4F9AE02.roa
Signing time: Thu 26 Aug 2021 08:42:00 +0000
ROA not before: Thu 26 Aug 2021 08:42:00 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 45806
IP address blocks: 110.164.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 26 08:42:00 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=612753d8-0d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:ad:82:fa:4e:2e:1d:1e:2f:1c:62:10:2d:
0e:fc:6a:f9:11:52:0a:53:5d:9b:21:52:c3:a3:17:
ee:a3:97:24:f6:fb:cb:64:05:53:3e:68:cd:fd:29:
5d:e3:7f:9e:04:a1:75:84:2f:bd:c2:9d:8e:e8:be:
9c:a8:eb:c0:8e:8d:e5:03:bb:a3:06:fd:63:88:e5:
48:ad:99:8e:40:ef:6a:52:c2:a1:95:d4:40:1b:e6:
6d:13:24:fd:29:68:85:5d:78:59:af:15:fe:74:f5:
15:42:e4:84:d6:c5:63:99:86:d4:a0:2c:f1:9f:53:
4b:b6:62:16:ad:53:18:2e:d4:f5:94:02:30:40:2a:
bf:8b:23:54:7e:6a:b7:28:ad:64:1e:01:fa:95:a1:
24:6d:70:54:53:e1:cf:88:e0:53:e3:ab:22:00:07:
fa:9d:d7:57:46:5b:1f:8d:bf:8c:31:79:b0:2e:17:
df:05:3d:5f:4d:33:92:93:42:16:7d:c3:d8:e4:8e:
3f:ae:2c:4f:67:f2:bc:65:44:a8:99:89:78:18:38:
04:7f:28:c8:7b:56:fc:1e:78:f5:98:d8:db:03:6a:
1d:a3:a1:9d:33:d4:96:70:7b:5b:fd:2e:93:2f:d7:
50:56:92:f2:4b:84:56:6e:75:f0:7d:be:92:4e:c4:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:79:03:B6:05:4E:2A:54:D7:C7:5F:04:68:23:3B:7A:0F:63:2B
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7A8AE582064911ECA853EB0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.60.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:57:9d:ae:3d:62:ea:ed:d4:b9:3a:ae:0f:ca:73:73:a3:
0b:4c:77:56:ac:4a:22:a0:7e:69:4d:0b:0f:a5:a1:49:98:7d:
60:57:15:d7:6b:ab:53:2d:a5:1a:c8:2b:56:b1:13:45:a3:26:
09:bf:c2:b2:79:50:b7:75:1b:30:62:64:26:67:de:a7:24:f7:
7f:2f:6b:8f:51:2c:a3:e3:c1:13:90:72:88:ff:2a:6c:55:a1:
9f:79:59:d6:4e:4f:27:f3:c2:b6:b4:0a:03:9c:c9:8c:b2:46:
91:25:d6:4e:7c:cf:34:c1:56:47:e6:98:28:76:fb:ff:26:fc:
eb:cf:62:76:bc:48:a1:c4:88:8e:05:cc:1d:8b:a7:8d:86:b9:
e1:7c:66:9e:86:e1:57:a2:95:29:c1:36:61:71:06:ed:ed:ec:
44:2e:4b:6e:a2:0f:8a:48:fd:a3:ae:8f:75:0a:8c:90:8e:d6:
17:69:5e:b9:7d:89:78:3c:76:35:14:6e:1c:e9:cf:b6:cc:17:
1a:94:e2:a7:f4:c0:a1:02:93:30:b4:47:ce:1c:d3:dc:dd:01:
09:22:01:6d:09:41:6b:79:d3:21:19:17:81:d2:b1:57:44:34:
10:3d:4d:fe:c5:36:f6:c8:b2:f3:cc:4f:14:2d:b2:39:bb:74:
99:60:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org