Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/49FBE75A5DDC11ECBEA38D83C4F9AE02.roa
File: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (raw, json)
Hash identifier: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=
Subject key identifier: 89:F9:83:92:59:1E:43:1F:F1:51:01:77:1D:C5:AD:6F:07:F4:A8:76
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 047B
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/49FBE75A5DDC11ECBEA38D83C4F9AE02.roa
Signing time: Sat 25 Jan 2025 00:13:38 +0000
ROA not before: Sat 25 Jan 2025 00:13:38 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 41378
IP address blocks: 2407:9240:2700::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC
Validity
Not Before: Jan 25 00:13:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67942cb2-b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:5d:66:7b:15:4f:6d:31:b1:1e:a6:54:65:
f4:8e:1e:a8:f6:33:bf:45:74:6f:3c:3f:e4:aa:ce:
a7:2e:09:21:5f:1c:97:ff:09:66:bb:ca:e2:3a:d8:
fc:76:84:8c:07:30:51:77:07:7d:8e:ef:f2:f4:fe:
cb:bf:da:18:18:21:86:00:0b:14:88:eb:f7:2e:0a:
66:fd:2b:94:cd:d1:59:a7:39:b5:de:0d:63:f7:3d:
46:29:30:36:b0:0a:44:3c:a3:a5:48:f7:01:49:11:
ec:3f:be:c8:ef:4b:53:fc:4e:e1:09:ac:45:86:f0:
fc:51:1d:6f:d4:1a:cf:c9:85:f9:e9:1f:18:ed:38:
f3:6a:20:c8:a5:5d:e0:22:f7:5d:84:c3:1a:32:bb:
25:8a:42:8d:88:04:22:96:17:60:4f:40:88:df:86:
8d:be:df:44:73:f1:8c:b7:88:28:61:81:57:0f:fc:
02:7e:75:fe:d7:17:d8:a4:6b:b3:3b:36:ac:20:a6:
9e:61:56:8a:6b:d2:69:33:9c:21:7b:21:cf:a4:af:
2b:86:75:1a:1b:c5:a3:10:28:58:6f:31:5e:3f:6d:
dd:e8:19:5e:d8:43:b8:fc:c8:1f:76:13:56:bb:d6:
e1:26:6e:14:76:13:82:96:09:8c:6e:ec:e1:55:a9:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F9:83:92:59:1E:43:1F:F1:51:01:77:1D:C5:AD:6F:07:F4:A8:76
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/49FBE75A5DDC11ECBEA38D83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9240:2700::/40
Signature Algorithm: sha256WithRSAEncryption
10:63:99:cf:5c:1c:6f:dd:18:32:dd:2b:05:d2:16:46:67:a5:
79:da:92:d3:d2:0e:ef:ee:92:eb:96:8a:bd:74:ad:2d:b0:a1:
00:76:32:d8:74:ab:f9:14:ef:e8:5e:af:56:e7:89:ae:a6:93:
b8:15:90:02:da:e0:da:b2:d5:b3:c0:8f:f9:32:c0:3a:35:53:
ac:88:dc:22:f7:ae:bf:f7:a7:b8:41:19:80:3f:83:a7:f1:a8:
eb:d4:3d:0d:bb:12:dc:c2:ff:5e:a1:f0:99:eb:86:da:a7:eb:
f8:a4:02:81:f9:2a:a4:9f:9f:aa:7d:38:24:c2:79:e2:73:e1:
b1:17:7a:d2:0c:e3:1b:7c:b3:03:14:a4:5c:30:62:11:9a:53:
dd:9d:65:c5:fe:af:da:0d:56:1a:bd:45:80:48:93:02:74:e3:
b9:2c:b8:00:46:14:e5:59:49:7b:be:88:83:e1:84:c7:8c:f5:
f1:dd:77:0e:34:86:e4:2d:32:3e:0e:d4:88:0c:17:9a:d2:f0:
75:a0:eb:39:68:d1:a5:c5:49:89:36:10:ad:38:9e:c1:86:c5:
dc:65:7e:58:3f:ed:f6:22:c7:ec:88:51:29:5f:b2:e0:4e:ac:
e1:23:12:68:b1:c9:ff:a1:da:b2:93:32:5d:4a:cd:e6:58:d7:
7c:b2:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:25 2025 by rpki-client