Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/E7ECA23C696D11ECAD19A72DC4F9AE02.roa
File: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (raw, json)
Hash identifier: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=
Subject key identifier: EB:BB:FA:B1:24:B3:F7:3F:84:5A:B3:30:CF:18:BE:DC:7B:9E:24:CA
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0478
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/E7ECA23C696D11ECAD19A72DC4F9AE02.roa
Signing time: Sat 25 Jan 2025 00:13:36 +0000
ROA not before: Sat 25 Jan 2025 00:13:35 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 212358
IP address blocks: 2407:9240:2900::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC
Validity
Not Before: Jan 25 00:13:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67942caf-d35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:93:5e:1c:59:7d:6a:87:62:cf:39:4f:ae:
99:37:58:00:b8:5d:e5:f7:dd:fb:0d:35:99:85:7a:
df:28:3f:66:9f:c3:96:0f:34:61:d3:0b:3e:d2:c7:
60:6c:f4:4d:77:9c:35:69:95:cd:f3:62:6b:87:cd:
68:db:30:fa:7a:b7:d0:f1:8d:00:20:7f:45:22:4d:
84:28:96:31:90:57:7c:e7:1d:f0:6a:53:ed:9d:2e:
d9:f1:93:2c:94:d0:ae:79:60:98:29:58:35:e9:01:
26:14:ad:17:52:cd:e5:1e:c5:b8:c8:26:ab:ab:1f:
38:c9:5b:a8:d8:65:97:60:06:c2:86:a0:19:dd:91:
cd:1c:1c:c5:3e:8b:15:5f:10:d7:fb:0c:e8:b8:fb:
f4:ec:16:fd:8a:2f:b7:a1:89:86:3e:d0:97:06:79:
08:d9:71:0f:c8:fa:32:c9:9b:64:f8:9a:16:0d:72:
8f:85:54:1a:9a:1b:80:f5:72:93:e3:1a:a7:db:70:
9f:7b:a7:79:3e:32:58:51:ce:d1:12:fe:fc:3c:64:
a9:72:62:a7:ae:32:fd:fc:17:e0:a8:85:de:d6:a4:
d0:a2:2f:57:be:20:25:61:1d:df:78:8b:14:05:c3:
48:e8:66:f4:c3:48:45:22:b1:de:d4:54:a5:01:26:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:FA:B1:24:B3:F7:3F:84:5A:B3:30:CF:18:BE:DC:7B:9E:24:CA
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/E7ECA23C696D11ECAD19A72DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9240:2900::/40
Signature Algorithm: sha256WithRSAEncryption
44:ab:01:be:6c:a0:41:f9:04:ad:5c:46:d6:cb:a3:3f:10:e5:
03:ae:b6:df:82:85:96:25:db:4b:47:e3:76:73:68:63:0d:4f:
8c:0a:49:fd:3a:1e:b4:51:96:4f:f1:54:20:55:f2:0c:f7:db:
78:e3:84:51:28:38:35:ed:24:e1:b7:6d:47:8b:a8:65:02:b3:
86:fd:00:fe:d5:f1:e4:a6:5b:71:41:af:90:9c:09:3d:71:79:
0b:a1:af:b5:a6:42:b6:61:e6:47:db:78:61:2a:64:91:90:11:
de:85:02:d9:5c:4d:8c:f1:d8:65:ec:34:dc:64:7d:bf:83:e7:
f3:6e:70:7d:f5:f6:06:a8:c9:e7:8a:be:eb:a2:f9:0d:24:08:
28:2e:7b:9c:e9:a4:23:e9:bd:2c:24:d7:58:a5:80:9c:c4:08:
fc:de:3b:94:f9:31:d4:c9:e9:e3:a1:89:24:d3:9e:e6:bb:44:
53:e0:38:42:d1:68:0a:ee:ba:c8:d3:28:22:ea:26:9a:08:ef:
f9:16:d6:3e:5b:aa:34:3f:d7:78:ba:e1:63:f8:4e:9c:73:2d:
0e:6c:4f:27:b9:1a:f0:c9:41:6b:5c:27:8d:ec:4d:40:4e:48:
6e:be:d4:57:43:3a:d4:f7:19:ea:6e:2d:f3:ec:f6:30:8e:7f:
c9:67:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:49 2025 by rpki-client