Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6D48BCC492C511ECB654DF27C4F9AE02.roa
File: 6D48BCC492C511ECB654DF27C4F9AE02.roa (raw, json)
Hash identifier: Xuma4eoPUp+UKutSjVotr5hIN1QGYn5EMGDY8BMi+4E=
Subject key identifier: E2:60:B1:47:7E:C9:23:D8:F9:10:8F:43:C9:AB:59:33:27:B0:85:02
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 24BD
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6D48BCC492C511ECB654DF27C4F9AE02.roa
Signing time: Mon 21 Feb 2022 03:21:58 +0000
ROA not before: Mon 21 Feb 2022 03:21:58 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 138968
IP address blocks: 122.254.100.0/22 maxlen: 24
122.254.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9405 (0x24bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Feb 21 03:21:58 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=62130556-4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:4f:e9:2f:08:d1:5f:ea:f8:b3:98:c0:ea:
20:d0:b4:cc:1d:04:6f:89:12:20:a2:f9:f7:f5:ca:
d2:8d:8d:58:2a:74:9c:ac:a4:29:1b:07:8f:60:53:
65:c8:9f:db:a2:dc:37:27:4f:2f:6c:c9:60:38:a2:
92:82:0a:b3:9c:24:bc:8e:37:33:ce:55:71:47:47:
7c:7c:6a:9d:5a:98:57:07:53:64:97:e0:54:54:a7:
80:53:b1:31:e1:b1:11:00:92:5e:55:f9:9e:be:ea:
e5:ca:83:4c:15:a5:df:94:8d:fc:d7:83:bb:16:8f:
6e:7a:4a:5c:26:7c:64:fc:4b:61:d1:34:d5:ef:59:
ce:ef:bb:25:e4:f5:fd:07:25:b6:cb:3b:12:9f:06:
f4:0d:69:58:ff:a8:87:7b:96:48:be:83:60:7b:c4:
2e:19:50:5f:c2:fd:a7:01:45:52:da:57:47:d6:dd:
65:ad:17:45:31:30:bf:5c:f4:d7:72:8b:b2:78:a0:
3c:08:0c:fc:97:3d:fe:59:b4:f1:1b:aa:e5:7a:0b:
7d:ab:14:aa:92:b9:6a:fc:03:3d:89:f5:47:0c:d5:
fa:42:a8:77:99:0d:cc:f2:9a:b2:97:1f:28:88:bb:
c6:34:59:f1:0a:53:dd:f3:df:50:50:53:d8:3a:57:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:B1:47:7E:C9:23:D8:F9:10:8F:43:C9:AB:59:33:27:B0:85:02
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6D48BCC492C511ECB654DF27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.100.0-122.254.107.255
Signature Algorithm: sha256WithRSAEncryption
27:bd:29:ce:cd:82:ae:4b:61:0b:f9:41:01:83:a8:b8:dc:d4:
b6:17:f2:cb:03:2a:44:c3:71:27:a5:52:9a:3b:58:36:f1:46:
9c:5d:bd:e0:e7:0c:4d:d5:d9:c1:03:1d:97:e2:c3:46:78:d8:
2e:b3:8e:db:fc:e3:65:c7:d9:e7:95:29:1b:f6:96:18:3c:43:
b8:a7:36:68:96:c9:74:d8:e3:51:5c:09:86:0c:35:a8:a3:64:
7d:37:35:9f:09:7a:1c:aa:8d:60:c4:aa:5e:dd:0b:72:13:fe:
33:9d:c1:77:31:e4:c7:f8:db:bb:f6:50:44:82:24:62:68:19:
ac:47:39:4a:79:96:c7:98:de:f3:c2:24:d2:28:6f:36:8a:32:
a1:e2:98:cb:db:48:52:7a:0b:9d:91:b5:b5:7c:42:b2:43:32:
56:07:9e:03:b0:7e:33:a7:aa:06:f1:fd:58:b0:c6:f0:bd:fe:
a8:6c:d7:74:de:5b:61:cb:25:b8:a8:b4:a1:cc:ea:dc:ef:13:
eb:f1:22:0d:0d:5e:3f:c4:fe:e5:de:ca:b5:06:56:98:e1:50:
98:b1:41:bd:3d:42:1d:fd:8a:16:26:58:27:16:b0:51:a0:39:
b1:09:bb:fe:5c:a4:94:42:b1:8e:cc:44:31:df:52:81:d1:07:
17:2d:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org