Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/96ECCB300F8D11EC8603F473C4F9AE02.roa
File: 96ECCB300F8D11EC8603F473C4F9AE02.roa (raw, json)
Hash identifier: 5t4PRU/bPmjjSeUfU5a8OQV1DhPHxrJQQqIhnenUkQI=
Subject key identifier: F2:52:53:55:DA:FF:A1:21:DC:C7:4F:8A:8E:31:A9:FE:C9:A6:63:2D
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2358
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/96ECCB300F8D11EC8603F473C4F9AE02.roa
Signing time: Tue 07 Sep 2021 03:42:14 +0000
ROA not before: Tue 07 Sep 2021 03:42:14 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 138968
IP address blocks: 122.254.92.0/22 maxlen: 24
122.254.96.0/22 maxlen: 24
122.254.100.0/22 maxlen: 24
122.254.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9048 (0x2358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 7 03:42:14 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=6136df96-cdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:10:8e:96:41:6b:df:05:29:06:c3:12:c8:
ca:7b:d1:79:3c:2c:60:1d:a5:e6:cf:bc:56:74:15:
89:74:0b:7a:a8:30:29:5c:fd:b3:eb:a8:17:e6:a9:
63:f8:c4:79:ad:94:84:f6:5c:25:60:e5:b4:28:b3:
4c:ce:cf:33:df:62:41:cd:27:d6:dd:07:e1:37:08:
ba:ec:ad:27:cc:b2:75:36:84:ab:70:dc:86:30:d5:
22:95:cf:cc:0d:b4:ef:de:bf:23:eb:86:73:81:4c:
5c:1d:7a:7c:bf:24:56:5b:30:b7:5f:46:4a:ee:9b:
44:a4:e6:8f:05:6b:07:fe:69:95:ac:a2:16:eb:98:
3a:ce:97:73:7f:ef:ae:28:e2:98:a3:77:a7:68:dc:
3b:9d:25:6e:8d:fc:1a:94:6b:5e:17:ea:81:f8:46:
cd:4d:50:98:62:d3:ff:8d:5c:09:c1:f9:fd:a3:02:
ab:fa:13:7f:e5:7b:f2:27:07:ea:ba:ed:50:b6:56:
4c:0b:38:ea:1c:aa:4f:8e:de:33:a2:a7:d7:0a:3f:
f0:d1:bd:d2:51:8e:48:26:4e:53:50:b8:dc:48:83:
f3:47:fa:83:0c:eb:2c:65:9b:7f:ed:c8:2a:15:b8:
e9:f8:2f:39:d3:fe:eb:e8:fa:76:d5:f4:f2:92:0b:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:53:55:DA:FF:A1:21:DC:C7:4F:8A:8E:31:A9:FE:C9:A6:63:2D
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/96ECCB300F8D11EC8603F473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.92.0-122.254.107.255
Signature Algorithm: sha256WithRSAEncryption
10:53:91:6b:26:c1:1d:83:dc:7c:05:be:50:8f:89:e1:da:85:
5a:9f:1d:fc:75:05:33:0a:11:a8:b9:d5:b2:f1:ea:2d:ff:c0:
81:61:13:59:57:f9:0b:d0:a0:aa:de:fc:18:be:db:c3:c0:54:
2e:c7:9e:b2:e0:b6:30:59:4f:d6:93:3a:6c:ca:61:56:be:72:
c6:7c:1e:d6:d9:13:d7:f6:f8:9e:c9:93:a2:ac:49:5f:1f:29:
68:5a:ed:de:ab:f8:da:af:a2:2e:92:bd:c2:d2:39:ff:ef:f7:
60:d0:24:b8:f6:cd:f0:e8:f2:67:70:e7:83:02:a9:3e:41:37:
0c:41:44:8a:85:a3:59:66:b1:60:49:b3:b2:b5:94:77:61:d8:
bc:17:38:b5:29:08:ad:a2:8b:3d:a6:9c:8e:67:ac:4d:1d:c8:
32:29:fb:2c:2e:11:b6:23:a7:da:8c:e3:a8:36:ff:44:09:07:
60:a8:53:1c:37:73:1e:50:f9:a4:68:91:d0:87:6d:17:32:4c:
37:42:07:7f:0e:5c:82:88:04:32:71:c6:f1:c4:ac:e6:ed:89:
85:85:b9:81:c7:df:21:63:de:47:ae:d9:16:a3:1d:a1:03:d0:
28:e6:80:a5:55:3f:17:88:5e:45:17:d0:59:ad:bb:22:a0:90:
33:69:28:d8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICI1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjEwOTA3MDM0MjE0WhcNMjIwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTM2ZGY5Ni1jZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8NIQjpZBa98FKQbDEsjKe9F5PCxgHaXmz7xWdBWJdAt6qDApXP2z66gX5qlj
+MR5rZSE9lwlYOW0KLNMzs8z32JBzSfW3QfhNwi67K0nzLJ1NoSrcNyGMNUilc/M
DbTv3r8j64ZzgUxcHXp8vyRWWzC3X0ZK7ptEpOaPBWsH/mmVrKIW65g6zpdzf++u
KOKYo3enaNw7nSVujfwalGteF+qB+EbNTVCYYtP/jVwJwfn9owKr+hN/5XvyJwfq
uu1QtlZMCzjqHKpPjt4zoqfXCj/w0b3SUY5IJk5TULjcSIPzR/qDDOssZZt/7cgq
Fbjp+C850/7r6Pp21fTykgsInQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPJSU1Xa
/6Eh3MdPio4xqf7JpmMtMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvOTZFQ0NCMzAw
RjhEMTFFQzg2MDNGNDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAnr+XAMEAnr+aDANBgkqhkiG9w0BAQsFAAOCAQEAEFOR
aybBHYPcfAW+UI+J4dqFWp8d/HUFMwoRqLnVsvHqLf/AgWETWVf5C9Cgqt78GL7b
w8BULseesuC2MFlP1pM6bMphVr5yxnwe1tkT1/b4nsmToqxJXx8paFrt3qv42q+i
LpK9wtI5/+/3YNAkuPbN8OjyZ3DngwKpPkE3DEFEioWjWWaxYEmzsrWUd2HYvBc4
tSkIraKLPaacjmesTR3IMin7LC4RtiOn2ozjqDb/RAkHYKhTHDdzHlD5pGiR0Idt
FzJMN0IHfw5cgogEMnHG8cSs5u2JhYW5gcffIWPeR67ZFqMdoQPQKOaApVU/F4he
RRfQWa27IqCQM2ko2A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org