Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/43CBE830FC9011EEBF12AA73C4F9AE02.roa
File: 43CBE830FC9011EEBF12AA73C4F9AE02.roa (raw, json)
Hash identifier: Nq4a0DT6dT08EL1wlZJKxdQBqstWgvVo9w1gJ3XcovA=
Subject key identifier: E4:96:8D:00:90:18:64:5F:66:BB:0C:E6:46:2A:26:DF:F4:26:22:A1
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 05AC
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/43CBE830FC9011EEBF12AA73C4F9AE02.roa
Signing time: Wed 17 Apr 2024 07:59:06 +0000
ROA not before: Wed 17 Apr 2024 07:59:06 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137076
IP address blocks: 14.96.24.0/21 maxlen: 24
14.96.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4
Validity
Not Before: Apr 17 07:59:06 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=661f8149-cc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:d5:c1:78:7f:49:3a:bb:42:83:2f:ca:5f:
96:0d:f8:32:cb:da:90:7e:9c:b0:c0:2a:dc:89:d1:
be:6a:58:1a:70:5e:37:88:b1:e7:9d:36:7e:4c:75:
ed:64:5b:fb:a3:40:b8:f2:34:78:4e:db:14:39:cf:
1b:ba:f7:26:96:12:22:7d:5f:1a:77:5e:da:45:e5:
ea:95:3c:da:5d:fa:84:e3:d6:d4:d6:53:fe:7c:e1:
43:a9:dc:3c:79:1c:f5:8e:46:4a:bd:94:22:de:46:
24:a4:0d:29:8a:44:d7:4a:fa:fa:84:27:ea:ce:90:
41:c9:fc:3e:92:4f:ab:d9:8d:c6:1c:11:d6:10:51:
e0:0d:49:65:92:f3:71:ac:b8:91:b4:88:b2:91:be:
27:82:89:32:2c:82:7a:57:b3:84:45:75:c4:75:55:
24:61:75:c6:9a:47:23:12:41:da:8a:8f:67:d7:ed:
90:dd:aa:98:17:a9:03:46:ba:27:cd:d2:c3:17:7e:
b8:fe:33:be:f6:5b:b7:f6:02:b8:6c:b7:9c:51:2b:
f5:7f:c4:e8:40:a5:01:34:53:b8:dc:7e:45:f0:83:
f6:c0:cd:e9:bb:b2:e2:2f:2e:f6:b3:63:d4:df:05:
4e:75:54:91:45:21:64:dc:3e:d1:0e:c0:4f:e8:29:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:8D:00:90:18:64:5F:66:BB:0C:E6:46:2A:26:DF:F4:26:22:A1
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/43CBE830FC9011EEBF12AA73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.96.24.0-14.96.39.255
Signature Algorithm: sha256WithRSAEncryption
53:c1:fc:a0:e2:bd:71:18:3b:9c:e8:d7:3b:c7:d2:84:70:96:
02:a5:d7:ef:8a:5f:78:39:7b:36:ce:38:ab:ce:26:10:4b:36:
db:4a:45:81:75:6c:b5:e4:7f:f0:e3:0a:d4:46:85:da:7a:10:
ad:cf:a7:54:bb:c5:fe:62:38:56:e5:3c:6f:53:7b:c1:e6:31:
57:d0:be:46:02:6c:3a:83:fd:01:63:fa:b4:07:09:0f:7a:ec:
1f:ba:4b:95:c3:7a:06:cd:c7:56:a2:e1:86:63:47:a9:4e:50:
2e:3f:0c:63:d8:33:82:1c:fa:90:3b:15:7c:ef:5f:f1:17:dd:
5a:a4:3a:50:c8:ef:b0:c3:97:9b:df:6b:58:2f:0b:44:53:15:
99:68:a8:5f:59:58:af:d5:bd:cf:8b:50:ab:98:38:c1:14:b2:
76:12:94:f6:90:fa:23:ec:3a:2d:c2:7e:9f:30:84:5d:ce:2d:
96:4d:88:79:4e:26:0b:9d:fa:ed:85:65:23:e2:c4:c8:23:a4:
f7:2c:3f:57:30:21:62:a8:8e:ac:6b:6b:09:fc:6e:b0:2e:79:
17:53:1e:f4:3a:87:be:3a:9b:2d:5f:f7:66:38:7b:6e:91:d9:
eb:e3:3a:8b:34:3b:12:eb:fa:75:8c:11:3b:33:8f:06:fb:4f:
6f:15:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:52 2025 by rpki-client