Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa
File: 24C46B7CE9EE11EBA7E58E66C4F9AE02.roa (raw, json)
Hash identifier: Ppb0lUVLV59MYb6CNXp6beNhjOpDi3sllq/JnOX6dXI=
Subject key identifier: 58:AB:C0:B2:C9:C4:0C:E8:96:5C:60:B2:31:E8:26:32:58:85:D9:B6
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0CA0
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa
Signing time: Sun 26 May 2024 21:32:43 +0000
ROA not before: Sun 26 May 2024 21:32:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 208753
IP address blocks: 2406:840:feb0::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: May 26 21:32:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6653aa7a-6fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:b9:77:23:89:3d:d0:ab:5b:bd:74:20:cc:
0e:fc:c7:97:03:c2:b2:16:ca:c7:44:68:cf:21:33:
bf:8f:33:13:7b:01:3f:01:5a:d6:81:7e:97:7b:35:
ed:27:b2:20:c9:c7:b5:9f:5b:27:65:94:fc:42:c5:
84:40:b2:f7:21:28:58:2c:14:6e:55:32:68:82:c2:
a9:03:02:71:98:37:a0:43:41:bf:e7:ac:a7:ee:9e:
80:64:48:73:dc:b9:4b:7d:ab:07:38:d9:6f:98:73:
1e:ef:95:1e:75:a5:73:97:f9:e3:26:a4:2a:40:61:
58:d5:52:8b:c6:f2:02:33:f8:e7:3c:0a:c3:50:56:
dd:be:fe:e8:dd:e0:8d:e0:dd:ea:eb:f6:6b:33:ef:
22:60:1d:ab:bd:68:25:bf:b6:30:c2:08:96:0f:6d:
dc:7a:f8:69:a8:29:7a:cd:c8:e5:41:c6:28:68:25:
46:9b:d7:4e:a6:b7:7a:39:3b:82:48:b0:da:e3:26:
37:5d:56:83:92:78:63:3f:8c:49:10:84:c6:ef:43:
27:e4:05:58:5b:19:9c:60:17:fb:6c:cb:66:85:ec:
13:f1:8b:80:23:8b:e9:ba:2c:a2:d7:da:8b:cf:cd:
12:44:aa:c6:f1:c5:a1:7f:34:d6:70:77:6f:49:dc:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:C0:B2:C9:C4:0C:E8:96:5C:60:B2:31:E8:26:32:58:85:D9:B6
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:feb0::/44
Signature Algorithm: sha256WithRSAEncryption
97:c9:0a:97:a9:00:3a:41:76:00:bb:ad:aa:23:b7:5f:e1:81:
5b:78:a4:af:22:aa:6c:67:f9:99:9f:ed:6f:90:e8:03:bd:8f:
7b:0b:0a:c9:01:45:7e:14:32:7e:88:c5:ec:04:16:62:17:05:
b5:31:04:a5:ed:b9:6f:af:d0:8a:3b:af:9d:b4:07:14:9c:1d:
9d:ac:ca:e3:54:23:e5:df:86:3a:23:91:ca:ad:fb:3e:c2:69:
d7:ba:bc:1c:3b:60:b6:4a:3f:8f:c5:e7:23:2f:0e:c1:3b:d0:
43:c8:1d:ca:a2:99:ee:be:1c:71:22:04:66:14:35:8a:ba:63:
75:8c:88:8d:e0:fb:30:85:5a:5a:ae:01:4a:a0:39:6e:08:03:
19:09:ba:4e:40:9f:bf:34:a2:2e:0e:1f:b8:c3:aa:06:30:d4:
81:a4:74:d7:21:f4:57:f3:55:39:c8:9e:4f:7d:84:75:f9:a4:
51:83:74:d5:63:e3:39:31:6b:7d:5b:37:16:22:9e:84:c8:fc:
88:49:f4:0b:1b:95:1b:5f:16:ed:47:4f:9a:85:50:a0:d2:88:
30:1c:ad:37:7e:5e:75:39:8e:90:a6:42:c3:64:d3:e0:14:e9:
9d:e0:8c:a6:e2:7a:b7:5e:e7:5a:12:60:ee:3a:b2:24:76:4e:
c9:62:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:08:06 2025 by rpki-client