Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/616F00FA87AA11ECA9AE522EC4F9AE02.roa
File: 616F00FA87AA11ECA9AE522EC4F9AE02.roa (raw, json)
Hash identifier: z8LuQo1DtQfX8UCmY423hqxZwV3RQP0c0ZZCdvm9DM8=
Subject key identifier: 07:15:C5:69:B2:3D:99:1F:82:56:F7:BA:A5:A4:7A:E6:9A:B4:30:6F
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 0284
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/616F00FA87AA11ECA9AE522EC4F9AE02.roa
Signing time: Mon 07 Feb 2022 00:10:39 +0000
ROA not before: Mon 07 Feb 2022 00:10:39 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 135348
IP address blocks: 168.134.136.0/24 maxlen: 24
168.134.137.0/24 maxlen: 24
168.134.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Feb 7 00:10:39 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6200637f-7a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:94:01:3c:aa:e1:c6:06:cd:eb:b3:f7:c4:
62:bd:0c:aa:db:7d:97:5e:de:2e:5d:02:45:38:aa:
22:eb:99:bb:67:94:8a:b2:6f:cd:d1:5f:22:87:e5:
cf:fc:bc:74:61:40:75:9e:31:09:fa:de:95:b4:8b:
3c:cc:62:de:9b:8c:7d:98:40:bb:9b:b9:24:f0:9b:
42:32:6b:1d:ab:22:c5:18:b9:e5:8a:d1:e5:eb:f9:
49:f0:21:e8:21:44:e8:e1:99:2a:55:e2:48:a5:41:
de:c4:22:2e:eb:65:98:81:45:ae:f7:03:d8:e6:70:
a0:f4:d1:85:4d:89:19:65:a0:d6:bd:ec:38:9d:b5:
53:77:10:d6:d6:a2:6f:b1:1d:f9:af:cf:a5:0d:57:
cb:4a:33:79:c9:ed:9b:05:bb:85:57:70:0e:de:83:
a7:fa:25:a3:c0:a5:15:47:cb:05:b5:36:32:54:48:
62:a1:cb:34:85:59:46:7c:74:f1:cb:96:23:56:9a:
bc:49:e1:20:e7:94:ea:ba:db:92:64:6b:77:42:13:
0d:29:c6:4a:5c:96:54:71:94:9f:4d:05:43:7e:f0:
98:9c:9e:5a:5c:fb:dd:58:f0:1a:ea:a5:51:0a:a8:
14:27:eb:c5:57:94:e7:f3:0b:60:7c:34:38:a7:d1:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:C5:69:B2:3D:99:1F:82:56:F7:BA:A5:A4:7A:E6:9A:B4:30:6F
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/616F00FA87AA11ECA9AE522EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.134.136.0-168.134.138.255
Signature Algorithm: sha256WithRSAEncryption
3a:51:51:a5:fe:c9:32:f6:0c:0c:db:34:4a:a0:c3:de:05:0c:
84:9e:a3:42:b5:d6:47:f8:fa:cd:3e:17:6d:88:7e:76:06:25:
15:5c:40:c5:cb:c5:48:37:68:58:55:d8:59:aa:73:9b:c5:51:
e0:3e:a5:a1:ac:89:1e:f8:18:08:a3:b5:b3:53:d9:49:66:67:
e2:03:ff:de:98:95:9d:36:e7:94:82:8e:d4:ec:ec:38:80:35:
35:eb:4d:74:03:51:0d:4a:d8:9f:0f:b3:d3:ed:59:86:fc:9f:
62:93:5d:5f:a2:5b:88:64:47:c0:1d:a1:db:3b:f0:be:c6:82:
f2:23:51:56:1b:51:74:cf:2f:97:8a:1d:82:0e:26:4a:79:54:
62:87:6b:4e:ea:f3:45:28:c6:6d:52:4b:98:cc:9a:d2:ba:2f:
10:96:c8:b1:ed:22:0d:27:b2:25:eb:63:a6:89:c8:c0:0a:00:
a2:71:9c:51:7d:98:ad:69:bf:c5:3b:06:5c:e0:05:8f:69:64:
2a:38:a2:29:12:e1:53:05:50:c2:12:9c:4c:59:ad:a4:26:85:
a7:4c:14:1a:1e:cc:2e:f7:9d:0f:24:5b:b7:4c:73:15:05:d0:
22:68:ae:8b:ad:f8:ed:0f:bc:69:0c:a4:aa:80:0d:58:97:33:
99:8a:40:5f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjIwMjA3MDAxMDM5WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjAwNjM3Zi03YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYSUATyq4cYGzeuz98RivQyq232XXt4uXQJFOKoi65m7Z5SKsm/N0V8ih+XP
/Lx0YUB1njEJ+t6VtIs8zGLem4x9mEC7m7kk8JtCMmsdqyLFGLnlitHl6/lJ8CHo
IUTo4ZkqVeJIpUHexCIu62WYgUWu9wPY5nCg9NGFTYkZZaDWvew4nbVTdxDW1qJv
sR35r8+lDVfLSjN5ye2bBbuFV3AO3oOn+iWjwKUVR8sFtTYyVEhiocs0hVlGfHTx
y5YjVpq8SeEg55TqutuSZGt3QhMNKcZKXJZUcZSfTQVDfvCYnJ5aXPvdWPAa6qVR
CqgUJ+vFV5Tn8wtgfDQ4p9EFFQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAcVxWmy
PZkfglb3uqWkeuaatDBvMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjI3N0QvNzhBMUQwOEU4RDZCMTFFQjk4NDBFMDVGQzRGOUFFMDIvNjE2RjAwRkE4
N0FBMTFFQ0E5QUU1MjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEA6iGiAMEAKiGijANBgkqhkiG9w0BAQsFAAOCAQEAOlFR
pf7JMvYMDNs0SqDD3gUMhJ6jQrXWR/j6zT4XbYh+dgYlFVxAxcvFSDdoWFXYWapz
m8VR4D6loayJHvgYCKO1s1PZSWZn4gP/3piVnTbnlIKO1OzsOIA1NetNdANRDUrY
nw+z0+1ZhvyfYpNdX6JbiGRHwB2h2zvwvsaC8iNRVhtRdM8vl4odgg4mSnlUYodr
TurzRSjGbVJLmMya0rovEJbIse0iDSeyJetjponIwAoAonGcUX2YrWm/xTsGXOAF
j2lkKjiiKRLhUwVQwhKcTFmtpCaFp0wUGh7MLvedDyRbt0xzFQXQImiui6347Q+8
aQykqoANWJczmYpAXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org