Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File: EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier: yJ+SVca3dIEVbLRKvfj50dgEnl+0SPNec7gFGt3BMLw=
Subject key identifier: 9C:04:99:E9:BB:9E:86:D6:81:BC:D2:00:4D:40:B3:D5:4C:CD:82:D2
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2763
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time: Tue 30 Jul 2024 16:04:13 +0000
ROA not before: Tue 30 Jul 2024 16:04:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 142561
IP address blocks: 2402:9e80:200::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10083 (0x2763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D
Validity
Not Before: Jul 30 16:04:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a90efc-ff05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:46:50:b6:f3:3c:86:e8:de:fa:72:07:69:
25:d3:b4:5b:6a:35:9c:42:24:2d:a1:8c:6a:4a:14:
72:dc:e4:91:a8:06:53:80:08:63:84:3a:89:a4:10:
9a:52:aa:91:a9:e2:27:f8:fa:7a:9c:ce:e0:f7:5f:
66:34:71:08:23:9f:24:bd:17:6d:02:ef:34:de:31:
be:fd:92:00:80:3a:0d:e5:32:6a:53:04:e9:1d:c3:
c8:2e:ca:84:52:f3:9a:0a:8b:37:bc:46:2f:74:58:
96:5d:5a:34:f7:62:07:4e:3b:f9:e0:0d:33:4a:39:
2c:85:dc:41:58:1d:3a:0b:d5:ae:61:ba:56:1c:78:
45:b3:6a:46:94:f8:a2:aa:8a:4f:72:b5:4e:29:40:
fe:f5:88:03:e3:07:af:92:a7:9f:30:01:b8:c1:7e:
94:7f:2d:f7:e4:7e:d7:2e:67:3d:91:d4:cf:83:60:
ac:74:5a:7c:9b:06:d3:53:00:f7:50:e1:1c:df:f3:
d1:a3:b6:7b:eb:6c:05:f0:2b:05:f9:90:3e:b6:d3:
18:ad:49:be:33:9f:9a:d9:7d:a8:86:e2:2a:40:8f:
ff:c1:00:9d:95:bf:32:dc:6f:9e:f7:c6:96:43:d4:
11:46:12:7d:27:d5:b8:a0:cc:b3:e1:77:09:27:c7:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:99:E9:BB:9E:86:D6:81:BC:D2:00:4D:40:B3:D5:4C:CD:82:D2
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:200::/44
Signature Algorithm: sha256WithRSAEncryption
40:f6:52:c6:d3:bd:2b:f3:4f:12:07:81:8f:4d:df:35:45:6f:
d2:e8:9d:c8:cd:fa:b2:d6:ef:50:96:4b:48:34:ff:9a:24:8d:
42:bf:c5:3d:6e:18:78:d0:b8:ea:1f:ee:3f:72:95:2b:f1:4e:
8a:c2:7c:c9:5c:9d:8b:40:8b:1b:58:c8:6d:df:a7:d3:18:76:
5c:14:4d:af:37:85:c1:cf:1f:0d:c8:a2:db:08:87:2c:55:a9:
f7:6f:3f:ff:9b:69:5d:ab:06:73:97:cb:54:59:11:40:c8:e2:
4e:5b:fb:f2:6f:d7:ab:4d:98:99:9e:7d:13:d5:1a:4d:b0:0e:
a6:fd:8f:74:52:a3:6f:33:da:a1:c9:01:1f:b4:a5:71:a5:33:
95:d1:bd:19:12:7b:96:d7:f9:65:fa:aa:68:67:92:76:81:3c:
e5:ee:22:c1:5e:74:f3:7a:b3:f7:f1:b9:c3:2e:f5:e0:3d:08:
f6:69:46:f8:d8:ef:44:a9:2d:41:e6:52:1d:d7:8b:19:36:72:
67:59:5f:e0:e9:3d:ee:71:09:9f:29:1e:7d:f7:0d:46:72:3a:
2d:15:a7:9a:0f:da:ad:03:59:1c:53:17:28:ae:09:c5:14:cf:
71:53:b6:cc:9e:2d:1a:df:43:d5:81:a8:be:90:b4:14:4e:95:
70:e6:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:07 2025 by rpki-client