Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/1D3BD9FAA5B211ECA267CD0CC4F9AE02.roa
File: 1D3BD9FAA5B211ECA267CD0CC4F9AE02.roa (raw, json)
Hash identifier: hj2xIHBvT1W8m1rCr+Tf2I/A1P7raNsGhGXDTz0qxME=
Subject key identifier: 92:3E:2B:99:7D:64:ED:F8:F5:70:71:AE:BA:E5:65:05:66:1C:D5:1C
Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Certificate serial: 1064
Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/1D3BD9FAA5B211ECA267CD0CC4F9AE02.roa
Signing time: Fri 08 Apr 2022 11:41:38 +0000
ROA not before: Fri 08 Apr 2022 11:41:38 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 58664
IP address blocks: 130.248.113.0/24 maxlen: 24
130.248.115.0/24 maxlen: 24
130.248.127.0/24 maxlen: 24
192.150.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4196 (0x1064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Validity
Not Before: Apr 8 11:41:38 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62501f72-d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:04:bf:5a:aa:21:9b:5d:e6:f3:83:d9:f2:
cf:c4:3b:71:65:ba:bd:48:bb:9a:2d:17:a0:4c:b9:
f6:b8:fb:86:30:22:91:52:62:ff:87:e3:08:c5:ad:
06:5e:1c:e6:b5:55:f8:d4:de:49:79:b4:42:77:2a:
f2:7e:67:b0:4c:b5:78:eb:36:3e:9c:44:24:e1:f0:
f8:5c:b3:b4:60:ef:d0:0c:7f:c3:b5:1f:ec:ac:18:
5e:5c:06:b0:b4:be:6b:be:d4:12:27:d7:3c:a0:f4:
2a:93:cb:9d:49:ba:7d:a4:a6:00:c6:03:d5:a6:15:
93:4f:28:a1:48:4c:10:36:e0:25:b5:de:9e:b3:58:
cf:df:bc:aa:80:cb:b4:15:1a:63:30:d4:1e:cb:8a:
1e:6d:3d:a9:b8:7f:63:11:d9:d6:23:9e:b4:bd:77:
2e:b4:c3:62:ce:ea:95:5b:02:ce:5e:77:3c:05:e0:
ee:a4:ee:db:b4:dd:06:fb:52:55:cd:44:a4:b9:30:
37:3f:5b:47:40:2d:68:2c:9f:3e:38:e4:6d:b2:87:
b2:9c:3f:3f:c2:0a:e3:bb:ff:17:2f:69:2d:b5:c6:
71:a9:3e:a5:e4:34:e7:8b:ee:c7:02:c3:76:f5:c1:
cb:1f:47:fa:3b:8c:7d:3b:35:f5:36:f5:1a:5b:5b:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:2B:99:7D:64:ED:F8:F5:70:71:AE:BA:E5:65:05:66:1C:D5:1C
X509v3 Authority Key Identifier:
keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/1D3BD9FAA5B211ECA267CD0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.248.113.0/24
130.248.115.0/24
130.248.127.0/24
192.150.16.0/24
Signature Algorithm: sha256WithRSAEncryption
01:85:ab:a5:59:9c:13:7c:dd:ca:f6:8c:99:a8:96:0f:ac:ba:
92:d9:f9:32:cd:52:83:00:54:41:29:38:29:32:6b:8c:8e:b9:
cc:83:b0:09:39:58:0f:fa:e2:ca:97:14:d7:f5:70:39:75:44:
25:9e:49:d8:b2:0d:dc:be:f6:26:07:99:74:48:95:3f:9e:26:
6e:23:91:e0:e1:a7:06:d6:cf:20:9a:7a:19:3b:b1:f2:22:53:
7a:cc:7f:e3:72:27:94:5b:e6:f1:43:db:7f:0a:a6:4b:6f:ca:
8a:57:b8:e5:78:7a:40:74:dd:6b:0d:18:a9:7b:3d:0c:9f:0f:
be:29:33:b8:19:14:23:5d:9b:a6:cd:c8:0e:5c:61:68:54:5d:
7b:4b:b8:6d:12:fb:bc:2c:2a:24:f3:8b:d7:82:eb:b3:39:77:
a3:97:17:20:7e:f4:10:9b:68:1c:47:cd:95:d8:84:84:bc:1b:
42:c7:34:b9:13:49:57:89:83:e2:3b:cd:a9:72:24:e9:6c:18:
ab:ca:e7:46:24:3f:1e:14:38:a4:b9:e9:23:fa:38:27:a8:58:
b7:65:b3:ec:e2:5b:77:07:02:a6:46:7f:d4:41:eb:7c:42:52:
58:74:e1:8a:aa:5a:fe:8f:4b:4a:4e:ac:3a:24:55:0c:79:58:
d9:ec:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org