Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/263312129AEB11EBB81ECA2CC4F9AE02.roa
File: 263312129AEB11EBB81ECA2CC4F9AE02.roa (raw, json)
Hash identifier: AV3DGaSdIXChmAuv5rh65s3xbSERtwc5/zIcZQnvVMg=
Subject key identifier: 6F:BA:65:12:FA:92:59:C9:82:99:23:BF:E5:DD:01:06:08:26:B1:A0
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 05
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/263312129AEB11EBB81ECA2CC4F9AE02.roa
Signing time: Sun 11 Apr 2021 17:27:11 +0000
ROA not before: Sun 11 Apr 2021 17:27:11 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 23930
IP address blocks: 203.175.1.0/24 maxlen: 24
203.175.2.0/24 maxlen: 24
203.175.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Validity
Not Before: Apr 11 17:27:11 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=6073316f-c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:3f:5b:72:83:0e:55:8f:fb:9c:f3:76:a0:
a1:8d:b8:68:85:9b:e1:82:e3:78:e4:a6:9e:d9:89:
62:16:b1:c0:88:04:74:52:ef:ce:2e:e1:1d:11:51:
11:aa:4a:d0:69:b4:95:c4:db:24:aa:ac:71:2d:a8:
73:95:d7:bd:ad:9f:8e:a4:dd:92:0f:24:87:76:2e:
03:94:1e:fa:37:05:42:df:f7:98:37:65:9f:e2:bd:
18:fb:c5:ff:1b:2a:02:84:5a:19:88:35:c7:9a:31:
6f:ac:33:29:75:82:b5:27:8a:b6:49:e9:22:00:6c:
ee:3d:43:14:33:8c:04:ef:54:48:9a:91:75:1b:2a:
22:f9:4b:01:78:45:0f:d8:0a:a9:1a:7e:6c:41:7c:
32:66:21:32:30:cd:de:28:26:58:b9:8b:ab:06:39:
b7:40:6e:48:38:e7:09:72:ef:1e:9d:ab:63:19:0b:
65:46:87:cf:3e:35:c1:c6:e4:66:57:a2:ba:4e:66:
e6:d8:c6:7a:45:ed:34:ee:bd:6a:2b:fe:a0:94:8b:
c7:38:2b:b6:21:08:f2:c7:27:1e:cf:ba:0f:38:ae:
8c:98:1a:ca:41:30:ee:79:3d:16:20:24:77:98:61:
8d:8c:98:f3:3c:c3:38:b2:ba:fd:ca:82:6a:21:f0:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:65:12:FA:92:59:C9:82:99:23:BF:E5:DD:01:06:08:26:B1:A0
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/263312129AEB11EBB81ECA2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.1.0-203.175.3.255
Signature Algorithm: sha256WithRSAEncryption
94:33:a5:5f:c7:d1:97:be:1e:b8:a0:3a:84:de:e0:ef:77:5f:
cc:18:bd:05:db:51:da:57:b3:42:d8:e8:e8:41:95:da:ad:f3:
b7:e6:ad:86:5e:35:85:07:7c:1a:d2:23:d8:73:03:d3:b6:84:
62:1d:c0:7b:08:37:03:d5:27:51:a2:e4:12:fb:b6:26:2b:44:
05:80:1c:b2:3e:1c:4f:2a:f4:3e:49:d2:28:53:5c:e3:6f:25:
46:38:58:99:51:ad:46:ca:1b:19:0d:bf:d9:3d:10:6c:98:5c:
7c:21:67:8a:55:ea:bd:2f:d1:9c:f5:1a:69:e4:8f:2a:40:7c:
b9:b2:89:22:c9:60:1d:2b:b8:b9:a7:db:45:1b:84:e6:fa:35:
1b:81:8b:fb:d5:04:2d:b5:df:8e:60:85:85:ec:9b:8a:43:5b:
b2:ec:f8:e1:36:b9:48:7c:ef:df:6d:9d:bd:1a:59:95:19:bd:
36:93:94:18:e2:e1:68:79:51:a6:23:57:87:df:f5:43:54:86:
cb:55:a8:ee:86:f9:16:6b:81:8b:15:9c:26:c5:4e:fc:43:29:
b6:fe:ba:25:ea:64:21:fd:79:23:68:54:89:2a:80:33:24:2d:
5a:9f:af:c3:59:98:f4:27:80:d7:99:0b:7c:34:62:37:2a:14:
5f:76:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org