Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
File: 3209950C603F11EBB4E2A42AC4F9AE02.roa (raw, json)
Hash identifier: WoT6QFeg4vykUdYUoxS7/AvifMBDgtTNSxrbzxvTUuo=
Subject key identifier: 3E:79:F1:C9:BB:41:5A:AE:59:B4:45:FF:DD:DC:1C:06:2A:06:84:23
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3497
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
Signing time: Mon 31 Jul 2023 14:30:15 +0000
ROA not before: Mon 31 Jul 2023 14:30:15 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 10310
IP address blocks: 203.212.184.0/24 maxlen: 24
203.212.184.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13463 (0x3497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E
Validity
Not Before: Jul 31 14:30:15 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c7c577-fa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:30:f9:d4:18:7c:e1:66:ec:ec:d4:34:98:
0c:07:95:ca:ae:1a:88:e3:a5:b3:db:a2:2e:37:bd:
df:4b:ba:03:ee:e3:86:20:dc:a4:fc:2f:68:08:54:
5a:36:d6:76:8e:80:02:9d:91:7d:5b:16:51:bc:d5:
37:7f:a4:8b:bb:26:a6:c4:ea:a1:ce:d5:e4:05:99:
6d:39:40:35:10:42:49:1f:24:be:82:c6:7f:59:3e:
7f:15:ac:d8:dc:ae:99:f0:61:d4:b1:63:fe:d4:52:
0d:79:6c:96:89:96:d5:85:f9:ab:6f:98:9b:45:0b:
d0:05:ae:24:76:16:b3:e2:81:4e:de:26:b3:a0:53:
54:6b:0f:b1:0e:34:87:a5:fd:6b:f5:ab:98:88:25:
ec:94:41:0b:f0:94:08:56:8e:bf:af:60:28:87:7e:
ce:73:4b:06:45:e4:91:69:28:b9:4b:30:ab:70:4f:
a4:0a:b9:26:93:73:42:9a:45:ef:94:24:64:05:49:
97:d6:ca:e8:72:48:ba:06:b4:b8:43:64:76:a4:68:
b7:39:16:4d:a6:e4:d1:cd:07:74:23:8b:46:d8:6f:
9c:13:2f:66:ef:6c:7e:d0:cc:65:65:42:92:9d:a3:
ff:f0:f9:a6:99:ee:f9:06:22:b0:9b:74:85:b5:48:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:F1:C9:BB:41:5A:AE:59:B4:45:FF:DD:DC:1C:06:2A:06:84:23
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.212.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:40:52:16:da:78:9c:7f:a8:c0:32:83:da:1a:7e:21:75:da:
00:18:22:03:28:50:b1:92:3c:ec:71:90:5c:e6:d1:6e:25:e3:
85:2c:47:ae:08:67:a9:a4:f3:34:ac:52:ce:89:c7:22:a9:57:
f6:31:bb:a6:58:08:59:f0:23:19:52:cf:34:83:0c:a2:33:79:
dd:54:c3:ec:46:d5:1a:54:9e:da:14:c8:63:89:57:03:93:53:
c7:a6:81:9c:0c:c0:06:3e:3c:fe:1b:12:2a:56:a4:83:8b:a3:
64:ca:ee:20:bf:6d:3d:a1:97:34:2f:dd:be:4d:14:e6:70:66:
db:1d:ba:c0:e2:0f:36:e0:2f:fc:6f:29:6a:f2:77:98:92:49:
37:f2:fa:9b:84:f0:79:f0:68:62:d2:fa:2c:0b:97:52:30:54:
1b:e8:c8:c3:7b:94:b5:8c:02:fa:e5:08:0b:fd:89:fb:18:30:
c8:ad:38:b5:ff:2b:e6:b3:e9:d3:2c:51:ad:4a:56:12:42:be:
e4:45:d7:4a:b2:c3:02:0a:45:99:4a:fc:b3:78:a1:aa:3e:1c:
e5:3f:af:fe:8a:c6:d1:40:f3:b5:98:4a:75:9a:cb:40:90:94:
77:38:b4:54:42:5c:89:14:a3:86:9c:0f:16:3d:f0:74:c5:74:
45:fb:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:14:04 2025 by rpki-client