Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
File: 497C858A498B11EF8663C87AC4F9AE02.roa (raw, json)
Hash identifier: xA3VbGO0yue7KUMSSkV+9U3z0cpO1sL8xR37nWRgrZA=
Subject key identifier: F3:33:57:13:09:17:BE:49:47:B3:6E:6A:89:E2:05:9C:2F:BA:13:A0
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3512
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
Signing time: Wed 24 Jul 2024 07:06:46 +0000
ROA not before: Wed 24 Jul 2024 07:06:46 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 54702
IP address blocks: 175.29.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13586 (0x3512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD
Validity
Not Before: Jul 24 07:06:46 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66a0a805-17f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:0c:de:e3:2d:35:1f:73:b7:b1:e4:cf:ba:
83:5b:5b:9d:c7:5c:5c:8b:c2:b7:bb:d1:b4:70:de:
ff:29:c5:9a:76:13:3b:cb:06:a6:94:ac:b3:0c:1f:
34:8d:89:a9:a6:75:b6:16:01:e5:28:c7:99:2c:a9:
f0:69:21:1f:ff:8f:e1:29:e5:2f:09:9b:d0:7e:9e:
de:75:50:27:11:12:73:85:75:4a:ab:a7:ca:3e:51:
ba:3d:8b:b4:2c:35:4d:13:a2:f0:11:3e:2b:c2:d2:
39:ca:c9:8b:21:3a:6a:79:ac:3e:78:66:76:c3:2e:
ea:18:34:60:8c:ab:ad:b0:cc:98:01:21:71:1d:69:
a6:e6:84:dd:14:7a:eb:fc:69:30:b5:a6:91:66:12:
45:8b:13:d3:df:c5:34:b0:ff:45:e1:36:95:2b:69:
66:74:0a:f7:61:45:1e:8e:fe:c0:a9:0d:8f:ef:b2:
28:90:39:64:e6:2a:f8:2a:39:f9:f9:a6:e6:64:3b:
06:6c:b8:e1:77:8e:65:cb:25:dd:32:22:e0:11:97:
16:f5:d9:c6:7d:65:e2:43:54:87:82:02:9c:94:b2:
1e:0c:1d:c5:7b:e9:61:8a:cf:73:c3:87:7f:00:fd:
12:bb:db:16:bd:cc:48:36:0d:50:02:a7:4f:b0:7b:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:57:13:09:17:BE:49:47:B3:6E:6A:89:E2:05:9C:2F:BA:13:A0
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/497C858A498B11EF8663C87AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:a8:06:b3:39:cc:dc:ca:b0:9a:cd:bc:73:5b:01:2a:11:50:
0c:9d:8d:0c:ab:fb:28:92:4c:03:57:9c:10:e2:fc:d3:88:e3:
1c:ec:33:96:af:2c:25:f4:ac:5c:75:f5:db:f8:c2:36:80:60:
ab:92:ba:71:d7:20:9f:ef:ad:c7:3c:85:a5:87:19:d0:f5:95:
59:7e:07:a5:15:d7:e8:00:3e:5b:ce:a4:04:9a:0d:63:69:90:
a1:52:f0:74:47:b4:49:b0:49:d3:76:87:8c:1a:a5:0e:18:29:
57:1b:f6:58:6f:58:fc:89:5e:e8:13:ac:b3:38:a6:9b:ef:a7:
ee:3d:c4:bc:ed:64:be:1a:7e:56:30:46:da:73:df:bf:ba:85:
b7:52:f9:7a:c6:c9:04:bb:41:dc:cc:8d:bd:a3:a1:68:99:9c:
cf:27:fb:ba:ee:ef:af:bd:a6:2e:ae:3a:03:60:38:19:33:3b:
98:f7:33:a2:2b:1d:1b:ab:88:bd:de:04:af:bc:2a:94:8f:9b:
fe:07:65:3c:33:a3:0a:bb:c5:d9:be:5b:5b:15:ca:ac:b8:3f:
2a:7f:34:06:52:a2:c4:69:06:f7:d0:aa:5c:ce:9f:d0:a2:17:
de:e1:3a:40:39:9b:7b:0e:8f:1b:af:80:ab:f9:c7:f2:c3:27:
c1:27:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:50 2025 by rpki-client