Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa
File: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (raw, json)
Hash identifier: BsYkZFLIqWXVcL7BCbS3LDfkV0RrqTrFNxdoppvTHY4=
Subject key identifier: 18:1C:5C:CF:9D:D9:D1:37:D0:49:76:BD:D1:33:22:AB:72:D5:5F:86
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 062D
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa
Signing time: Fri 24 Jan 2025 15:05:12 +0000
ROA not before: Fri 24 Jan 2025 15:05:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4826
IP address blocks: 2407:1740::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812
Validity
Not Before: Jan 24 15:05:12 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6793ac28-70ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:41:15:ae:01:16:a6:f6:0c:ea:84:c5:5f:
00:a1:40:44:a3:bd:6e:f6:3e:d5:1d:d8:b2:66:e6:
a9:e3:23:82:53:40:4d:a3:0f:c8:94:f7:d0:2e:d9:
b9:b8:1c:5a:9b:6d:96:17:0c:1f:4b:5a:04:a8:4d:
03:e8:96:6b:df:84:38:89:14:04:e6:71:34:75:f9:
0a:f2:50:e8:53:e3:2a:ea:7a:b2:40:c1:8a:8c:72:
88:ec:38:e7:b1:51:ca:fe:96:63:67:b6:ff:1a:37:
09:8b:3e:09:bb:21:b3:00:ce:e8:46:c1:bb:14:01:
b2:db:cd:1a:1a:06:4f:1b:db:54:76:6b:80:e1:fd:
63:64:d6:c0:9c:c4:e0:8b:3d:47:39:83:8c:90:7d:
19:c9:cb:4f:35:6b:0e:7e:94:65:a7:b1:68:6d:15:
49:10:4a:2f:41:ae:ce:fb:ef:29:bb:e8:9b:db:ff:
7a:0b:cc:ec:46:a7:41:40:f6:b0:55:d3:07:73:87:
35:ca:2d:49:6e:fe:9b:42:a0:88:8b:d4:76:34:cb:
c2:0d:c1:79:9a:db:4a:ab:39:b7:f3:07:5b:cb:d1:
10:03:64:b5:e3:61:73:d6:ee:96:2c:28:52:1f:6c:
28:83:c0:86:c4:a5:96:7b:81:ef:7a:bc:41:43:d7:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:5C:CF:9D:D9:D1:37:D0:49:76:BD:D1:33:22:AB:72:D5:5F:86
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9BE20420DA6411EF95F32A7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:1740::/32
Signature Algorithm: sha256WithRSAEncryption
8a:55:cc:15:b0:e6:fc:ce:e3:71:49:55:7b:7b:28:c9:2b:ce:
09:61:98:fc:73:26:90:0f:0f:81:43:68:0b:8d:70:9c:cd:11:
92:f1:87:1e:74:d8:df:33:42:f2:5d:7f:5d:76:1e:50:e7:87:
b3:ca:e1:6e:e6:78:0c:eb:5d:40:7c:8b:6d:47:cc:94:90:ae:
49:3f:7e:d7:20:f3:ca:c0:ae:f6:92:97:bd:0f:8d:84:be:0f:
01:f9:a8:f5:48:1f:61:7f:31:82:ea:df:f1:27:45:4b:a5:c7:
1a:d1:f4:2f:24:a7:8d:98:e5:34:4e:a5:af:73:e9:4d:21:13:
a0:dd:cf:0c:98:9d:4c:73:86:62:db:33:0f:03:fe:61:ba:57:
a5:11:ab:00:8c:d9:30:f4:47:32:a7:dc:9f:34:e9:25:e1:2a:
df:45:41:2c:de:27:c0:fc:70:75:7f:44:f5:f5:e9:72:e2:30:
f6:20:d4:e3:b0:ce:4a:58:44:ec:6a:d4:23:60:1a:b5:0a:d9:
be:f4:c9:49:ac:5c:88:d4:c4:97:30:64:bf:dc:fa:36:ec:78:
d3:c7:40:ce:2a:bd:18:ef:f5:d8:47:48:0f:b8:6e:54:66:c8:
95:fd:69:c3:93:60:28:9d:22:08:bc:b8:2a:da:0e:14:47:f1:
4c:d1:36:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:37 2025 by rpki-client