Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa
File: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (raw, json)
Hash identifier: 4uQI4pUXnWzfYHdgbJNZzm+RMbPwp0sMW3SM9UXkSAA=
Subject key identifier: 31:4C:0C:B4:B7:88:20:02:4F:27:D6:3D:BB:56:C3:ED:83:5D:B7:23
Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial: 3433
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa
Signing time: Sun 02 Jun 2024 16:21:19 +0000
ROA not before: Sun 02 Jun 2024 16:21:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 56264
IP address blocks: 2401:9440::/33 maxlen: 33
2401:9440:8000::/33 maxlen: 33
2406:9b00::/33 maxlen: 36
2406:9b00::/48 maxlen: 48
2406:9b00:1::/48 maxlen: 48
2406:9b00:2::/48 maxlen: 48
2406:9b00:8000::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13363 (0x3433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127726
Validity
Not Before: Jun 2 16:21:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665c9bff-0fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:c1:7c:33:77:be:6b:0d:36:71:fb:15:28:
88:5d:d6:7e:a5:8b:62:37:8a:12:3d:86:b2:76:da:
11:e7:92:00:67:b4:bb:53:39:7a:a6:89:7f:5f:1d:
a9:38:8b:b7:6b:73:01:41:60:eb:b4:d6:14:af:1a:
25:38:e4:e1:aa:87:37:c0:5b:46:8b:b2:18:60:da:
dd:a9:90:88:00:98:63:85:5b:ed:50:03:2c:0b:d1:
93:06:84:b0:c6:73:0f:68:2e:48:91:e5:fd:af:7e:
d9:f4:46:8c:c0:e3:d8:29:ca:2f:75:2d:7a:78:58:
e8:aa:dd:95:42:4c:be:ac:6d:92:23:1e:ae:25:30:
60:24:58:60:8b:4b:9f:b0:8b:f2:c6:33:0b:12:75:
07:6b:f1:6d:e3:e4:94:e9:e5:d4:36:58:47:fa:47:
c7:92:f6:3c:a2:20:a3:83:ce:23:1b:ab:5d:a0:52:
37:08:86:4d:57:2f:e4:a0:fb:9e:12:65:fd:45:63:
d5:ec:ba:47:10:ea:66:48:fd:16:c5:4d:c8:b4:59:
97:41:18:4c:f4:cd:bd:d9:4e:2b:d0:60:82:12:4d:
e1:cc:31:4d:04:a2:27:10:98:6e:1b:88:e6:8e:c1:
34:b2:af:3f:1c:ce:b9:f9:f6:34:01:97:72:d0:e3:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:0C:B4:B7:88:20:02:4F:27:D6:3D:BB:56:C3:ED:83:5D:B7:23
X509v3 Authority Key Identifier:
keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:9440::/32
2406:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
07:c8:56:f0:e9:8c:b3:6d:34:a6:34:b3:0b:2c:2c:e7:86:c1:
b2:90:a2:f5:f3:27:95:b6:b4:0b:e3:b8:f1:df:77:40:7d:3e:
eb:f4:ea:79:de:e3:56:02:1f:00:05:99:fd:44:c8:20:48:47:
0b:5a:26:04:f2:bc:1b:c6:04:29:28:46:45:33:58:f5:23:4b:
db:f4:cd:92:33:26:61:36:2e:5f:1f:e2:a3:28:4c:ad:bf:d3:
3f:8f:dc:72:e1:b6:c7:03:6c:9b:6a:d5:9d:2b:db:0b:5d:79:
1a:a7:a0:03:6e:49:ce:a8:67:83:05:5b:db:6c:1e:3a:d0:97:
19:41:d2:60:3a:ac:f9:b1:93:fa:d3:93:3e:b5:a1:ce:4f:fe:
7a:25:d9:85:6b:02:2b:f9:54:63:23:08:3b:8e:b6:5e:ed:2d:
33:5f:75:2d:47:c2:e5:7f:f8:af:24:e7:89:eb:73:1f:b2:18:
5a:2c:3d:33:5c:1d:08:dd:54:12:47:14:28:31:22:e3:61:43:
68:39:59:54:4c:ab:48:ae:ec:67:75:38:30:91:e9:0c:03:10:
3b:02:72:81:9e:75:24:a5:a6:e8:e8:ac:d4:1c:05:aa:e2:32:
22:be:c5:a7:35:bb:a3:8f:1d:28:22:73:ee:3c:e3:63:5a:d5:
05:b3:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:07 2025 by rpki-client