Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
File: 13E97B38F84511ECAB467675C4F9AE02.roa (raw, json)
Hash identifier: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI=
Subject key identifier: 68:21:2F:9F:29:4E:C9:0B:44:78:0F:47:C3:4E:C6:2C:DD:08:9D:73
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 047F
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
Signing time: Sat 25 Jan 2025 00:13:41 +0000
ROA not before: Sat 25 Jan 2025 00:13:41 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 7603
IP address blocks: 2407:9240:3500::/40 maxlen: 40
2407:9240:3500::/44 maxlen: 44
2407:9240:3500::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC
Validity
Not Before: Jan 25 00:13:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67942cb5-fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:a2:27:1a:2d:6a:04:6c:ba:b1:f8:84:c2:
f3:1b:70:7e:5e:4f:06:56:fc:64:c0:a8:b4:cb:3d:
8b:02:d2:73:2e:0e:8a:c0:fd:ff:5c:11:70:d4:c3:
0f:d4:fc:1f:be:b2:cf:d4:db:14:72:5e:b1:7f:b8:
98:68:c8:ba:0d:f5:28:45:f8:00:83:d2:76:aa:52:
d7:aa:25:72:73:59:37:91:48:65:8b:3f:a9:36:cf:
ae:af:23:46:80:64:fa:c1:aa:5c:9d:fb:a7:0b:19:
a5:f5:ce:d3:a2:ab:f5:75:06:aa:31:54:29:30:3f:
b6:b5:3b:c2:fd:10:49:53:ce:58:25:b6:9d:4b:86:
82:a6:19:5b:1a:a4:8e:4f:fb:5d:95:6e:4e:af:f5:
1f:12:1d:08:93:48:d1:9e:08:3c:8a:2f:6f:a2:42:
de:ef:c3:15:ae:29:78:f0:b0:13:f8:cf:31:ae:8f:
28:35:8b:29:77:7c:28:6f:a4:33:56:1a:8f:77:f1:
ed:96:8e:15:59:48:0d:85:5f:bc:93:54:1d:71:98:
fe:ba:9e:11:0c:0c:0c:2b:9a:a9:bc:8b:c0:a7:84:
8f:a1:58:4c:19:b9:7c:fd:54:e2:3e:c5:14:05:e1:
91:7e:c7:f9:d2:83:5c:de:df:9c:bd:a0:83:39:bd:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:2F:9F:29:4E:C9:0B:44:78:0F:47:C3:4E:C6:2C:DD:08:9D:73
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/13E97B38F84511ECAB467675C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9240:3500::/40
Signature Algorithm: sha256WithRSAEncryption
4f:c9:62:35:b6:f1:6a:3a:06:3c:33:14:55:2e:51:5d:1d:af:
e5:99:91:34:90:0b:d3:0e:c2:7e:3c:bc:e2:a7:c2:5a:b5:b4:
a2:76:86:5c:5d:24:fa:ec:9b:d7:3d:0f:60:e8:a7:a5:73:80:
86:bc:2b:67:10:6e:28:b4:da:e5:d9:d3:5c:f3:bf:ee:2a:9e:
66:69:cc:e3:c5:66:9f:ec:3b:6c:5d:d9:d1:2c:97:4f:f1:84:
d7:9b:bf:7a:ce:4e:bb:a0:bb:90:3d:9b:da:9b:f8:a3:aa:c4:
aa:da:f4:a0:d3:c3:15:05:c9:6b:ec:66:3d:b9:cf:60:12:af:
f1:f4:9a:6f:68:d8:9b:31:b4:58:b4:c9:90:4e:2b:51:59:4c:
58:63:67:c7:14:f0:c1:9c:2b:54:1d:af:3e:47:9a:cc:36:c0:
35:47:9f:cf:f5:15:fd:3a:7f:30:53:d1:43:23:f6:f4:01:57:
f9:55:a6:58:d9:13:89:07:bd:da:f1:26:21:10:b0:86:01:ed:
42:18:71:f2:bd:bb:45:03:af:8f:86:2a:f8:67:ba:17:11:78:
41:56:ae:ef:d2:a8:ea:d1:e3:83:ff:77:c2:f4:20:78:fa:81:
c3:98:bb:5d:f4:fd:4a:a7:d3:58:38:ed:37:c2:00:b5:c6:be:
93:1e:aa:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzQxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk0MmNiNS1mYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnJ6iJxotagRsurH4hMLzG3B+Xk8GVvxkwKi0yz2LAtJzLg6KwP3/XBFw1MMP
1PwfvrLP1NsUcl6xf7iYaMi6DfUoRfgAg9J2qlLXqiVyc1k3kUhliz+pNs+uryNG
gGT6wapcnfunCxml9c7Toqv1dQaqMVQpMD+2tTvC/RBJU85YJbadS4aCphlbGqSO
T/tdlW5Or/UfEh0Ik0jRngg8ii9vokLe78MVril48LAT+M8xro8oNYspd3wob6Qz
VhqPd/Htlo4VWUgNhV+8k1QdcZj+up4RDAwMK5qpvIvAp4SPoVhMGbl8/VTiPsUU
BeGRfsf50oNc3t+cvaCDOb3GOQIDAQABo4IClzCCApMwHQYDVR0OBBYEFGghL58p
TskLRHgPR8NOxizdCJ1zMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvMTNFOTdCMzhG
ODQ1MTFFQ0FCNDY3Njc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAkB5JANTANBgkqhkiG9w0BAQsFAAOCAQEAT8liNbbxajoG
PDMUVS5RXR2v5ZmRNJAL0w7Cfjy84qfCWrW0onaGXF0k+uyb1z0PYOinpXOAhrwr
ZxBuKLTa5dnTXPO/7iqeZmnM48Vmn+w7bF3Z0SyXT/GE15u/es5Ou6C7kD2b2pv4
o6rEqtr0oNPDFQXJa+xmPbnPYBKv8fSab2jYmzG0WLTJkE4rUVlMWGNnxxTwwZwr
VB2vPkeazDbANUefz/UV/Tp/MFPRQyP29AFX+VWmWNkTiQe92vEmIRCwhgHtQhhx
8r27RQOvj4Yq+Ge6FxF4QVau79Ko6tHjg/93wvQgePqBw5i7XfT9SqfTWDjtN8IA
tca+kx6q1Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:02 2025 by rpki-client