Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
File: F420BF1EDF9811EDB93A9960C4F9AE02.roa (raw, json)
Hash identifier: K+89q2bZEhjMIzkqM6kkS8iQx16A3qxREtHbSv62rWU=
Subject key identifier: B1:03:B9:6F:7D:14:95:21:12:E2:44:3D:AF:4D:48:D8:B9:AD:B2:4B
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2973
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:52:56 +0000
ROA not before: Tue 31 Dec 2024 15:52:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138915
IP address blocks: 2405:9800:c92d::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10611 (0x2973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:52:56 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741358-3c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:e8:ea:2f:3f:a2:8d:5e:25:bd:a3:46:66:
67:6b:66:04:b5:ac:2b:ad:cc:c0:19:2f:e3:07:36:
0d:8f:d9:d5:53:b3:fe:e4:f2:e9:7b:c1:a4:44:0a:
11:05:55:6c:af:eb:48:71:b6:82:e8:d5:4a:14:fe:
ac:08:4c:03:12:6a:d5:a7:85:28:14:4e:1a:10:56:
bc:b5:7e:5b:e0:b7:5a:9d:c5:86:43:9c:e8:8f:f4:
60:42:66:f2:05:53:54:7a:4d:3c:39:9c:92:5f:d2:
ff:fc:2b:61:e8:83:41:9a:70:1f:cb:f4:bb:7d:85:
3d:3e:c0:45:0a:13:97:83:5d:67:e0:d2:0c:87:7f:
ff:23:50:0a:12:6e:24:44:85:76:15:73:ae:ae:a5:
c4:82:05:94:f1:05:d3:91:4c:70:05:f2:1b:d8:83:
14:9f:b6:2d:88:b6:1e:cc:0d:e8:3d:62:a7:a1:56:
b9:3b:56:24:3f:85:4c:d4:97:0f:1b:ce:66:22:a9:
9e:0d:45:c7:17:2f:66:dd:24:0b:06:b6:44:24:3e:
8b:12:fc:3f:c5:5c:5b:4d:6f:7b:bc:d6:3a:0d:be:
7d:58:2f:9d:27:a8:a5:7f:ca:0f:37:54:0e:8e:b9:
e1:b3:0b:22:25:82:4a:af:b0:b4:a3:42:ce:61:2a:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:B9:6F:7D:14:95:21:12:E2:44:3D:AF:4D:48:D8:B9:AD:B2:4B
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:9800:c92d::/48
Signature Algorithm: sha256WithRSAEncryption
ad:a8:8d:ea:c6:ef:b8:de:09:6e:10:db:fb:d0:c0:32:0f:0f:
03:8d:46:dd:02:b2:78:ee:68:a1:3f:65:cf:5c:7a:d5:00:b0:
15:30:25:63:17:48:41:16:dc:8b:a6:8a:2a:b1:69:76:76:18:
dd:4b:27:46:39:48:5b:84:3f:9a:89:a9:2c:5a:7a:0b:fc:24:
e8:aa:f3:be:04:39:8c:9a:bb:71:06:d0:ec:1e:72:4d:99:2e:
3f:c8:1a:49:67:bd:c1:79:03:b4:3e:49:ca:88:d3:df:23:60:
b5:10:30:c7:f9:1d:8f:ae:14:ea:c5:2e:91:56:13:f9:64:ba:
c9:75:7f:15:80:f6:35:8e:45:bc:fe:05:0b:47:31:d9:ca:c4:
66:cf:59:3e:c6:20:9d:e6:9e:a2:c9:b6:8a:2a:0a:75:51:41:
53:5a:18:a7:c9:aa:0d:cd:05:ad:fb:d4:43:10:60:19:27:c2:
87:f9:c5:62:8c:7f:17:ac:12:13:80:49:85:c7:df:fe:35:19:
92:a7:77:45:2c:65:3f:f1:e9:2a:e7:94:ec:a8:4e:1e:42:25:
65:78:b0:47:29:d9:05:93:ba:ab:43:f2:16:97:57:bd:77:a0:
f1:60:57:2e:cb:b2:8b:f4:2e:f1:05:60:64:fd:fe:0c:cf:b2:
0c:2d:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:53 2025 by rpki-client