Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/364C8B32EC3011EC8AA4BC55C4F9AE02.roa
File: 364C8B32EC3011EC8AA4BC55C4F9AE02.roa (raw, json)
Hash identifier: jJ8P83c0Tz7RoJ2voWtFgFBkPpJA7+1XUimvaU4Qx8E=
Subject key identifier: 01:4F:0E:46:76:07:71:3A:5D:78:22:29:6D:58:9D:C6:91:F2:41:CB
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3240
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/364C8B32EC3011EC8AA4BC55C4F9AE02.roa
Signing time: Tue 14 Jun 2022 22:20:36 +0000
ROA not before: Tue 14 Jun 2022 22:20:36 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 211585
IP address blocks: 117.121.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12864 (0x3240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jun 14 22:20:36 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62a909b3-0496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:99:90:95:f8:8e:a7:a7:ec:f6:c2:6c:54:
11:46:5f:e7:9b:ca:2d:35:00:be:82:77:d2:14:c2:
cf:b3:52:b3:d3:a7:be:55:c8:4d:50:96:04:d9:1b:
c6:69:8e:83:80:d1:81:6b:f0:f1:52:3d:fd:a7:f0:
af:ce:73:48:c7:15:bf:f2:63:c6:64:f6:58:ad:9a:
7c:b1:ee:02:24:08:f3:11:c5:c2:46:92:20:c3:91:
ee:97:63:be:35:51:3d:40:74:42:88:d1:84:60:8f:
b3:d5:d4:cf:34:42:97:3c:46:f3:6c:c9:85:ba:1b:
64:f0:3a:a4:6e:fc:64:f5:a2:b3:e7:96:aa:d9:66:
3a:ef:54:6f:96:3f:12:8a:d0:25:81:78:da:27:97:
94:5b:e7:82:69:0d:1f:0a:32:b3:dc:9c:60:07:ce:
d0:b1:ee:bf:7a:84:9b:03:0f:2f:6c:eb:ba:77:ed:
e4:da:84:4a:2b:7e:27:11:f6:8e:0d:2a:3b:8e:ab:
45:9d:e4:ec:1f:cf:7e:3d:d0:43:95:a3:ef:8b:e4:
b5:db:5f:ef:b4:7b:16:21:a3:b6:43:c0:d2:e4:19:
ed:ad:1d:3f:e3:52:03:ec:24:16:97:8d:24:24:28:
f6:b8:91:41:d2:3d:6a:79:6b:d3:18:ec:af:91:13:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:0E:46:76:07:71:3A:5D:78:22:29:6D:58:9D:C6:91:F2:41:CB
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/364C8B32EC3011EC8AA4BC55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.245.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ee:bb:22:4f:15:a7:34:0b:93:01:7c:25:e2:88:61:98:73:
c8:75:0b:85:f9:bf:26:a3:3f:1d:f0:c4:bb:1f:87:6a:3f:e7:
4f:c4:f7:4e:54:e0:88:96:4b:c8:7b:90:de:5e:7b:4c:1a:30:
f8:6b:ef:e0:31:d4:8d:ce:08:c3:6b:db:88:a9:b6:e7:b8:86:
ef:a9:56:44:c6:15:5f:ee:9b:3f:53:3b:0d:3f:77:4b:10:4c:
f8:2b:5e:73:a7:12:26:08:72:0c:0d:be:0c:03:9c:e6:3e:f2:
8d:29:eb:72:14:65:7d:0e:72:28:2c:01:2c:cc:02:e5:3d:24:
e2:69:30:ad:b6:ca:b7:5a:cd:c5:fc:30:fd:a3:47:ff:52:ca:
6b:45:3c:d3:ff:b2:80:02:33:4a:25:9b:75:52:85:f0:ea:43:
25:5a:54:45:83:09:29:ea:ff:e2:9d:db:9b:ca:20:a5:10:45:
67:9e:17:b9:aa:e8:93:e7:03:01:da:d4:b1:3d:f2:f3:ab:e6:
b6:78:ff:81:fd:1d:20:55:8f:78:5b:8b:99:12:53:75:c0:88:
78:11:e5:47:c8:3f:99:8b:cd:ab:53:80:db:ec:5f:9f:34:e7:
70:37:f0:49:2d:ad:10:b9:75:23:15:26:c0:e3:37:ad:24:4a:
ba:34:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org