Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/4D96BEDE584211EC89B0B762C4F9AE02.roa
File: 4D96BEDE584211EC89B0B762C4F9AE02.roa (raw, json)
Hash identifier: jBCou/4ETL8J+yWeDDAAEOzC+0082iOBZk3lkQDoLOE=
Subject key identifier: 79:53:89:91:88:E4:B4:E9:19:C1:3E:FB:BB:43:A8:B1:3A:53:04:B5
Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial: 06AE
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/4D96BEDE584211EC89B0B762C4F9AE02.roa
Signing time: Mon 04 Apr 2022 10:09:51 +0000
ROA not before: Mon 04 Apr 2022 10:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133790
IP address blocks: 2001:df3:3a80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B826
Validity
Not Before: Apr 4 10:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624ac3ef-52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:08:ac:ea:66:a4:87:d3:ae:3d:1a:f4:86:
f3:97:af:4c:62:7f:36:57:79:06:07:a8:5f:a6:ec:
64:6c:14:0b:1f:34:59:42:ed:ea:3b:92:cd:d4:ad:
28:12:85:c9:56:c7:b6:30:b4:9c:a9:f7:9a:2a:4c:
45:18:bb:0b:11:a4:34:4c:45:29:d6:d2:90:6e:c5:
4b:a5:f3:81:15:e8:ff:6a:80:ec:d4:b8:34:57:5a:
a4:ec:92:3f:d4:30:4b:1f:c3:08:b5:85:19:60:06:
92:af:ca:66:d3:87:bb:4a:bd:b6:b8:9e:a7:73:9b:
98:32:49:ff:cc:bd:29:30:c7:7f:4f:37:06:5f:9d:
aa:8f:a8:85:b0:ce:2e:ea:38:61:bf:b7:15:d4:5d:
c7:1b:77:13:d5:c6:fe:17:d4:25:b9:3b:55:84:20:
02:ed:1c:85:37:74:3e:9f:9e:38:3d:f1:a9:a3:57:
e7:1c:72:13:8f:65:03:59:60:85:49:ba:c7:b3:73:
82:54:cc:f5:1f:e5:43:f4:e8:41:23:fb:31:98:8d:
90:10:40:39:85:c0:85:a3:98:9c:a7:4c:c1:be:03:
94:6f:88:c0:a6:10:93:1e:01:bb:b1:17:23:c3:5c:
b2:2b:bc:30:7f:a2:f3:94:01:f3:58:73:1c:70:55:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:53:89:91:88:E4:B4:E9:19:C1:3E:FB:BB:43:A8:B1:3A:53:04:B5
X509v3 Authority Key Identifier:
keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/4D96BEDE584211EC89B0B762C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
b9:c1:1e:4a:4b:da:75:d1:77:0c:21:f1:67:4b:35:f4:3d:c7:
d0:30:5e:db:fc:a2:51:7a:30:3e:76:50:63:97:fc:ac:b4:74:
18:6d:34:cf:c9:0a:4d:bc:33:68:4a:9b:2c:af:36:a5:de:3d:
f2:a1:fe:1c:cd:38:31:3a:d7:4f:ba:f6:e3:1f:a7:22:40:0d:
32:d3:ca:b1:16:dc:8b:ff:ba:5b:55:33:9f:24:4c:58:66:a0:
d8:e4:e3:54:3b:90:c6:f0:cd:ab:fb:22:fa:ba:89:29:18:3d:
4e:6b:f8:8a:e3:29:68:4f:c8:88:a7:c9:fb:7c:42:14:fd:6d:
e0:9b:45:e0:a3:e3:8c:8b:c5:74:65:0d:a0:4a:07:e3:70:6a:
69:f0:de:0c:89:e4:7d:a1:0a:5d:ca:bf:fe:94:42:b0:9a:25:
34:ab:ab:e5:78:6b:59:b8:cf:b3:cd:1a:ce:c7:9f:c8:9c:2f:
42:8a:35:82:13:c2:2e:5f:b6:83:8b:0a:68:1b:9e:ac:f7:14:
16:82:0b:6d:9c:7e:b6:9f:31:22:4b:65:c4:c7:87:9f:4c:36:
09:01:4d:80:1f:50:62:f2:21:58:01:62:4c:5d:6c:a0:5e:d1:
ee:50:cd:71:42:83:ad:4d:be:14:ef:1d:14:f0:5e:7e:08:6b:
34:50:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:59:50 2025 by rpki-client