Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
File: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (raw, json)
Hash identifier: aAT/94R8V8a6H3ASbqGyXee0COP067Ce/xVNeahwCBY=
Subject key identifier: 50:ED:6F:E3:B2:0B:D5:58:6E:6A:68:F6:08:97:8B:5E:45:0E:CE:E9
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0683
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
Signing time: Thu 24 Oct 2024 21:29:59 +0000
ROA not before: Thu 24 Oct 2024 21:29:59 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 8796
IP address blocks: 2401:2660:2000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322
Validity
Not Before: Oct 24 21:29:59 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671abc56-6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:bd:4c:25:75:e1:b2:36:d5:5c:ee:2a:7a:
64:9b:91:ae:e9:79:1b:c5:ac:33:82:9b:13:fb:19:
f0:7b:40:0e:60:54:01:c8:11:c5:46:12:84:8a:94:
d7:32:79:fa:80:59:bb:bd:77:46:c9:34:92:14:aa:
e3:35:a0:31:cc:e4:38:b0:69:b6:f2:43:18:87:6d:
b0:b6:05:37:b9:44:dd:4e:d2:37:a0:33:29:c4:73:
28:04:54:47:39:bc:4e:f1:b3:3b:c9:ba:61:43:15:
b1:fc:81:e8:a4:cd:f6:fc:4f:2b:42:9f:02:fa:0c:
06:77:23:05:6b:40:ae:07:3f:73:12:d5:92:42:4b:
c4:6b:2f:76:6a:c5:24:50:2e:dc:46:8f:17:34:78:
4e:bc:d8:96:7e:34:99:6d:a9:3d:04:c2:72:9a:d6:
2b:78:a2:33:53:df:b8:f8:12:e3:fc:4f:44:6a:f7:
01:c4:23:be:8f:7a:f6:06:cf:d0:a8:16:aa:5a:3d:
72:6f:ff:9b:5d:73:9f:22:0e:55:71:45:73:d0:76:
00:7b:7b:5a:44:28:f9:16:67:ba:30:c2:07:cd:ae:
5f:ab:f1:ce:4c:46:40:f3:7e:fb:38:7f:c8:7f:69:
c0:82:1a:a8:38:d6:22:0c:37:d1:d2:9e:ff:02:0f:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:6F:E3:B2:0B:D5:58:6E:6A:68:F6:08:97:8B:5E:45:0E:CE:E9
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2660:2000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:a1:04:77:bf:4a:36:9a:21:34:86:22:b2:c1:df:2c:a2:56:
a2:1e:55:0a:44:9d:47:f9:b9:a0:2e:5a:25:3e:ef:f9:05:86:
9c:e3:10:a5:00:b2:66:84:7d:ef:50:57:28:b6:e2:c9:3a:50:
10:c0:8e:91:2e:45:95:72:73:31:2a:ae:3c:0b:7d:cc:63:25:
e4:0c:7a:56:54:08:db:88:97:dc:aa:72:86:3b:ba:7b:ca:0f:
8d:23:ae:de:6d:85:36:4e:84:9a:a9:30:85:46:2c:b0:23:69:
10:15:51:1b:35:01:c9:25:56:44:fd:1c:f2:2e:57:2d:d5:d1:
b6:67:db:10:70:52:d3:45:4d:a1:da:db:75:92:c8:6b:a4:02:
0e:b7:db:b7:8a:9d:48:ff:82:fd:3c:23:a0:0f:31:75:66:31:
08:81:43:65:fa:40:f5:5b:3e:4f:1d:85:31:dc:e8:1d:bf:77:
8d:3f:21:62:8d:9d:5c:89:79:6f:a5:62:4e:8d:77:5d:42:32:
f5:c2:68:4d:0c:11:31:3a:96:12:b1:f0:fe:fe:43:96:a8:7f:
89:df:2e:47:25:50:f6:61:62:62:3c:c9:2a:2e:4c:e1:6e:2a:
3b:ec:8d:d3:59:51:d3:47:a5:9e:97:a2:fa:1c:9c:5a:d3:27:
66:29:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:05 2025 by rpki-client