Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A6B5C696258111EEAE635F2CC4F9AE02.roa
File: A6B5C696258111EEAE635F2CC4F9AE02.roa (raw, json)
Hash identifier: x45uK+8FKVqPDyWreAIxM+W7EjTSEKVdx12p1xEVCdY=
Subject key identifier: 78:C2:0D:C7:3D:6E:A1:43:0F:F9:41:75:99:41:8C:F5:34:EE:64:5E
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0470
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A6B5C696258111EEAE635F2CC4F9AE02.roa
Signing time: Tue 18 Jul 2023 15:42:08 +0000
ROA not before: Tue 18 Jul 2023 15:42:08 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9387
IP address blocks: 122.50.1.0/24 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Jul 18 15:42:08 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64b6b2cf-661a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:dd:53:5f:73:07:b2:de:a6:aa:83:b9:b5:
9d:29:11:32:51:23:b8:37:ec:42:5d:67:ac:f6:b0:
22:c9:3d:a1:98:2a:2e:62:25:c0:ff:a3:cb:3b:79:
13:03:83:cd:29:da:59:9d:27:56:ec:37:99:23:d9:
22:dd:d6:d5:cf:2a:37:35:b6:01:72:e7:38:e4:6c:
c4:98:ef:01:dd:51:31:7f:e5:59:73:60:87:79:d4:
f7:a1:c9:7a:2e:87:66:35:27:22:e6:2c:94:30:49:
2f:1e:d0:3d:5d:57:c1:6b:b6:3e:a0:66:9c:c8:ea:
2e:88:c6:54:1e:76:9e:b6:76:cd:7a:1e:78:fc:4a:
c8:16:8b:f0:37:68:75:12:36:92:2b:17:97:92:aa:
5e:d1:32:53:27:8f:6c:dd:ff:18:48:76:0a:ad:84:
0e:5f:fa:2a:5c:14:d0:19:11:6f:f0:46:48:12:f3:
f2:73:11:c4:a8:59:28:01:6a:e2:06:8d:75:2e:94:
e6:65:0d:b9:28:9e:bf:5d:25:b8:38:a4:e6:4d:55:
69:c1:eb:4f:d3:31:16:06:41:ff:f4:1d:d2:8c:6d:
13:31:ac:57:a5:b7:78:4e:17:0a:f8:f0:a5:97:e2:
03:29:0f:e9:1f:db:96:4c:64:28:26:1b:4f:32:5f:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:0D:C7:3D:6E:A1:43:0F:F9:41:75:99:41:8C:F5:34:EE:64:5E
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A6B5C696258111EEAE635F2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.1.0/24
122.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d4:d0:7f:73:4a:c7:55:8a:6a:08:0d:e1:2b:27:a3:99:53:
91:32:37:37:f7:64:ed:bf:03:0f:57:3b:0e:53:b3:21:2a:0a:
a2:2f:b4:d2:3e:22:bc:d0:b0:3f:5a:c5:5a:6c:23:35:48:a5:
37:ad:0d:ee:a9:59:16:51:03:08:02:b5:17:cd:73:3f:a2:f2:
08:26:30:86:5c:ad:61:f2:5a:4d:2f:66:4c:1e:d6:64:30:57:
07:6c:db:24:08:c5:86:bd:07:55:a2:02:56:46:90:5a:b9:61:
bb:77:c8:0c:f9:9a:5c:ab:51:f6:09:f5:af:16:c9:d2:a8:60:
ab:c4:17:95:b7:5d:59:2f:f6:92:d6:17:16:5e:cb:6f:5d:77:
98:17:90:d6:1d:f5:e8:25:9a:7f:12:90:88:26:c8:72:2d:5f:
0a:af:d4:02:70:1b:1f:cb:0d:8b:85:40:03:c2:2d:96:51:e1:
23:bd:38:a1:29:c8:8c:a9:96:d8:ed:21:1f:79:9d:f7:63:bf:
e4:64:2f:bb:56:ca:f0:61:e3:f5:2a:84:d0:54:7c:4b:77:88:
52:9c:87:f2:4e:a4:7e:b7:52:1d:87:be:58:bf:57:3b:8e:fc:
39:04:1a:84:a6:7b:01:42:4e:d8:7c:92:f9:28:c2:d4:80:a1:
08:f5:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:00 2025 by rpki-client