Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa
File: 29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa (raw, json)
Hash identifier: FJfM7lHWuMbjUgjiTLJuLcB9K95fakyegv7eUmJxfBY=
Subject key identifier: D1:96:1C:79:D1:63:97:C6:21:EC:FA:47:65:2A:67:DA:7F:E5:73:54
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: B5
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa
Signing time: Wed 24 Jul 2024 23:03:43 +0000
ROA not before: Wed 24 Jul 2024 23:03:43 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 152300
IP address blocks: 36.50.18.0/23 maxlen: 31
2001:df3:51c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07
Validity
Not Before: Jul 24 23:03:43 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66a1884f-163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:2c:40:3c:40:41:5b:d3:bb:35:b8:48:23:
16:8d:7d:4e:84:3c:1b:b4:2b:0b:52:c6:e4:5a:01:
57:7e:cf:39:65:f1:1d:93:20:53:92:86:81:c4:43:
12:48:2e:01:e5:36:4e:9d:5e:01:b7:c4:f2:20:f2:
77:48:14:12:f6:7b:db:13:5f:59:94:d3:3b:b3:55:
1e:9c:ff:ec:fd:6b:73:d1:92:72:2b:33:4f:2f:41:
de:37:fa:46:32:e5:ab:a8:f7:99:19:4e:5d:90:bb:
3d:3f:bf:d1:e7:2a:80:ff:18:ab:43:ba:ad:23:32:
71:33:87:bc:84:7b:fd:62:14:27:66:24:63:d6:56:
b8:c5:70:0b:df:b1:7e:2d:80:a4:27:d9:ab:97:40:
c6:97:a8:a2:40:ef:68:77:5f:9a:f0:c0:9b:ed:a0:
0b:72:e2:6d:fb:9e:2f:32:5c:68:82:95:9d:bb:52:
bd:48:23:44:61:3c:57:9d:07:1a:58:10:67:ff:87:
35:58:47:f8:a5:da:13:23:88:23:26:92:5c:e7:43:
c2:85:5d:61:20:f8:34:1f:de:97:87:eb:a4:6f:e7:
ab:f8:71:89:41:48:8b:da:2a:5a:1e:b3:fd:7b:7a:
d4:91:b1:a8:fe:9b:10:b2:8a:52:62:28:34:e4:e3:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:1C:79:D1:63:97:C6:21:EC:FA:47:65:2A:67:DA:7F:E5:73:54
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.18.0/23
IPv6:
2001:df3:51c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:5a:ad:14:46:96:79:f1:0c:48:ea:63:22:2b:c5:8e:fb:46:
38:4d:4c:d5:7f:91:8b:9b:ab:80:aa:a6:e6:d5:09:4e:a9:f7:
03:63:10:fd:1a:49:7f:67:04:7c:7a:bd:91:65:98:c1:87:ad:
b3:5a:c8:c1:f5:4e:5d:f6:23:14:c4:f8:fa:19:e2:6e:2a:56:
18:2c:f2:9e:69:81:6d:14:89:9f:70:7b:62:5d:8e:8f:36:7e:
14:22:e7:4b:93:d4:1c:2a:43:54:a6:1a:6c:0e:89:37:84:0d:
87:45:c4:d7:bd:67:69:26:65:71:c5:e0:67:4d:66:3d:84:07:
97:05:fa:e5:5b:61:ec:04:06:db:65:0c:45:b6:ab:38:a4:08:
28:06:80:78:ba:36:cc:b8:6c:56:82:a4:72:d4:4b:15:a2:30:
04:37:d0:9a:ba:1b:45:70:d4:45:5c:63:9a:8f:54:66:d9:e6:
48:7b:8f:02:f2:ee:70:55:65:25:37:be:27:09:e9:9e:b8:3d:
29:78:b9:5f:d7:31:08:43:95:6c:e3:45:79:45:dc:47:eb:10:
95:82:95:ef:70:00:72:f9:1e:7b:d9:3e:5b:9a:0d:bf:af:5a:
b1:66:bc:05:3e:49:25:4c:e4:4d:23:05:6e:d0:c4:e5:94:96:
f0:09:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:00 2025 by rpki-client