Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa
File: 3BF787825C4511ED9CD04525C4F9AE02.roa (raw, json)
Hash identifier: LIENBvmMrRIxmnzlElXveDjHkViAX5FdLQn69HvX/+Q=
Subject key identifier: 46:E2:C5:1F:AD:BA:19:2A:8D:F2:00:80:79:11:1A:DA:6D:BC:37:DC
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0475
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa
Signing time: Sat 25 Jan 2025 00:13:33 +0000
ROA not before: Sat 25 Jan 2025 00:13:33 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 210769
IP address blocks: 2407:9240:1002::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC
Validity
Not Before: Jan 25 00:13:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67942cad-081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:ab:e7:c8:8d:85:8c:ea:83:90:e4:44:25:
db:c2:2f:a3:4d:56:2a:1c:f1:f4:37:ed:1a:21:fc:
e4:91:58:ba:35:f6:57:8c:09:f0:0e:6b:f9:da:83:
cd:7b:5d:80:88:ec:f3:d1:28:59:97:d6:bd:54:5d:
e7:58:bf:c7:bc:87:15:78:4a:ae:d1:1f:7f:dd:2f:
17:43:6c:91:6d:79:03:70:f8:69:b5:8a:1f:c3:c2:
50:b9:01:08:bd:15:7d:d5:70:1d:8b:f6:22:29:b0:
89:6e:12:a3:b0:c9:21:2a:3f:45:eb:29:95:5b:e2:
10:b7:9c:61:85:33:c2:38:8a:15:8e:5a:80:1a:51:
61:c8:32:94:cf:03:04:8f:d2:b1:0c:a2:e4:7b:9d:
2f:db:fc:3e:f2:e2:d2:09:3b:4c:41:28:eb:b4:5c:
21:f5:53:81:fa:fd:3e:9b:d2:ce:40:90:e2:16:47:
1e:97:87:91:5b:a6:c5:e5:b9:82:ec:d1:94:7a:bd:
27:8e:3a:93:05:7d:34:24:48:50:41:d8:41:cf:db:
80:8e:b8:78:11:78:21:d2:f8:9f:5b:60:e4:4d:e1:
0c:2f:41:8a:d5:d0:47:d4:ff:7f:4f:59:37:de:a8:
2b:ca:d8:33:3c:2f:fb:3d:c7:af:0c:39:51:15:ef:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:C5:1F:AD:BA:19:2A:8D:F2:00:80:79:11:1A:DA:6D:BC:37:DC
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/3BF787825C4511ED9CD04525C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9240:1002::/48
Signature Algorithm: sha256WithRSAEncryption
97:e0:e2:bc:b3:dd:ae:2b:44:18:a7:8f:29:0f:f5:9a:ff:83:
51:e1:c0:39:d7:06:98:45:3d:05:ea:ed:02:cd:f7:a9:77:a3:
54:30:90:cd:66:1a:38:31:fc:26:30:54:0a:8c:89:d0:a5:aa:
bc:33:a7:5f:11:41:e3:b3:a4:92:6d:ae:f7:02:f3:dc:cf:e7:
83:06:30:bb:74:56:3e:19:4b:2d:ff:ae:fc:f3:a1:f5:3c:81:
4d:43:6d:ba:eb:e5:b1:3f:c4:43:e1:cc:e1:dd:a4:dd:d4:d7:
1f:01:a0:d5:94:40:44:bb:8f:0e:e0:dc:ce:50:3e:7b:ea:35:
ad:33:69:69:a7:25:2c:c3:a5:d3:f9:30:a3:f0:85:07:a0:0b:
a8:e3:25:17:7a:f6:78:e0:7a:86:d2:95:c3:18:5f:dc:e9:74:
7c:c3:f2:df:02:cf:38:56:fc:1c:3d:a5:e7:2c:cc:da:1c:b0:
7a:42:6d:e3:92:e5:a4:4c:f3:69:7a:7d:08:9a:76:f3:c8:93:
42:3c:90:02:70:fd:31:20:fc:5a:15:e6:cd:9f:4e:b5:60:33:
ec:5f:38:ed:fd:4a:61:76:86:84:6f:de:37:91:15:e0:3c:1d:
27:c9:80:86:6d:47:1d:81:d4:1d:03:bb:47:b1:c9:7c:4b:a5:
c8:34:ab:03
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjUwMTI1MDAxMzMzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk0MmNhZC0wODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqeWr58iNhYzqg5DkRCXbwi+jTVYqHPH0N+0aIfzkkVi6NfZXjAnwDmv52oPN
e12AiOzz0ShZl9a9VF3nWL/HvIcVeEqu0R9/3S8XQ2yRbXkDcPhptYofw8JQuQEI
vRV91XAdi/YiKbCJbhKjsMkhKj9F6ymVW+IQt5xhhTPCOIoVjlqAGlFhyDKUzwME
j9KxDKLke50v2/w+8uLSCTtMQSjrtFwh9VOB+v0+m9LOQJDiFkcel4eRW6bF5bmC
7NGUer0njjqTBX00JEhQQdhBz9uAjrh4EXgh0vifW2DkTeEML0GK1dBH1P9/T1k3
3qgrytgzPC/7PcevDDlRFe+XiwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEbixR+t
uhkqjfIAgHkRGtptvDfcMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvM0JGNzg3ODI1
QzQ1MTFFRDlDRDA0NTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkB5JAEAIwDQYJKoZIhvcNAQELBQADggEBAJfg4ryz3a4r
RBinjykP9Zr/g1HhwDnXBphFPQXq7QLN96l3o1QwkM1mGjgx/CYwVAqMidClqrwz
p18RQeOzpJJtrvcC89zP54MGMLt0Vj4ZSy3/rvzzofU8gU1Dbbrr5bE/xEPhzOHd
pN3U1x8BoNWUQES7jw7g3M5QPnvqNa0zaWmnJSzDpdP5MKPwhQegC6jjJRd69njg
eobSlcMYX9zpdHzD8t8CzzhW/Bw9pecszNocsHpCbeOS5aRM82l6fQiadvPIk0I8
kAJw/TEg/FoV5s2fTrVgM+xfOO39SmF2hoRv3jeRFeA8HSfJgIZtRx2B1B0Du0ex
yXxLpcg0qwM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:49 2025 by rpki-client