Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa
File: 209A2EA88D9B11EEB4F6C646C4F9AE02.roa (raw, json)
Hash identifier: t98TzM/dH6Z0S1YjmBFC8aqcGxXk9nsgXCocY//ngE4=
Subject key identifier: 36:E2:E7:EC:8B:31:CA:82:D5:85:EB:04:F9:E6:1D:EA:C8:62:47:2D
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: 08
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa
Signing time: Tue 28 Nov 2023 03:08:52 +0000
ROA not before: Tue 28 Nov 2023 03:08:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 152125
IP address blocks: 36.50.31.0/24 maxlen: 24
2001:df3:3340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Nov 28 03:08:52 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656559c3-58f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:af:9a:0a:28:5f:f9:da:d6:8a:4d:a0:8f:
a4:e1:85:b9:bf:b4:b9:fb:5c:73:0d:25:a9:03:2e:
76:64:6e:bb:89:41:9f:a3:da:6a:aa:b0:d4:25:7e:
82:4f:cb:1f:88:04:f9:a8:4b:cf:e9:80:eb:bb:04:
22:01:97:5c:14:1e:a7:01:57:79:a2:59:43:48:b3:
54:da:56:04:77:39:66:d9:2d:68:48:70:77:23:d7:
cc:0f:ee:9e:04:35:e3:fe:b2:f9:56:de:49:e1:a6:
22:72:59:59:e7:5d:8d:09:cc:0d:e0:d6:84:cb:de:
a6:8b:0b:40:70:27:f8:84:9c:92:ab:40:fd:dd:72:
bd:ab:8f:90:cc:b1:57:d7:fb:ee:25:05:0c:bc:0c:
56:79:ed:03:98:08:c7:b4:6a:91:f9:d3:69:df:2b:
30:d5:83:98:5d:71:7d:cb:74:c4:50:b6:1b:91:68:
6a:48:6b:6d:10:39:6b:e9:59:d0:35:66:39:42:4b:
0f:16:98:01:4c:18:1d:d9:b4:20:6d:27:ab:2b:55:
1b:47:c2:ad:d8:5f:ff:e3:c8:75:0b:d4:16:57:51:
af:df:e8:06:aa:5e:a0:32:c7:19:e1:28:11:79:64:
dc:86:66:6e:e8:29:aa:82:12:3a:3d:e7:e4:2b:93:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:E7:EC:8B:31:CA:82:D5:85:EB:04:F9:E6:1D:EA:C8:62:47:2D
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.31.0/24
IPv6:
2001:df3:3340::/48
Signature Algorithm: sha256WithRSAEncryption
97:f9:cd:33:67:fd:5d:40:85:68:b9:fe:cc:21:96:44:46:3a:
11:f0:dd:af:df:40:be:86:c4:bd:91:73:7f:17:d0:4c:b8:d2:
cf:53:80:01:a0:27:7a:01:dc:20:ad:26:bf:ed:41:1f:58:43:
e7:f8:fa:91:37:ba:29:59:7f:31:9a:1f:56:8e:76:c5:2f:1f:
b8:1f:78:be:f4:3d:b7:74:68:2e:0f:c5:85:e1:7a:b5:1e:02:
2d:5a:7c:25:e7:f4:83:00:44:aa:13:4d:8e:11:e8:b1:87:81:
73:6b:04:69:1a:99:c3:a1:e4:ff:aa:16:05:d7:7f:a2:e5:b4:
80:4d:c5:b7:73:c0:52:40:dc:30:11:d1:6a:88:e0:21:06:61:
85:9f:13:8c:30:8a:2c:f6:03:9e:f0:20:e7:16:5e:3e:c1:ab:
ad:04:42:bc:e7:c9:e5:56:5b:5c:ff:64:7d:15:0b:01:f4:1f:
d9:96:38:ef:34:79:06:48:0a:2b:ae:fc:9b:61:fe:66:93:39:
81:06:6c:93:04:22:95:22:d3:7e:44:68:d9:bf:5b:16:8b:cb:
75:86:cd:25:73:c3:09:dd:bd:17:31:23:7a:5b:9c:6f:91:95:
6b:70:a0:f1:04:a2:bc:c8:ce:c4:23:fe:c1:81:4b:24:4f:b2:
2c:d5:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:34:20 2025 by rpki-client