Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa
File: 3C0F4E20EABF11EF8452610BC4F9AE02.roa (raw, json)
Hash identifier: y5ot4Na6Q3D3xvJLgDVcZp4HYH8sywvrGCGyKgmWTEg=
Subject key identifier: F7:AF:71:5C:C4:C5:2C:B9:70:E1:56:FC:CF:20:A0:90:A9:F2:73:4D
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0E21
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa
Signing time: Fri 14 Feb 2025 10:34:14 +0000
ROA not before: Fri 14 Feb 2025 10:34:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138211
IP address blocks: 2406:840:f880::/44 maxlen: 48
2406:840:fea0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: Feb 14 10:34:14 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67af1c26-c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dd:56:12:fd:37:fd:d7:6f:a5:b1:0c:e6:5b:
31:53:42:de:81:18:8d:f7:a3:21:49:a4:ca:27:86:
6d:76:76:15:98:d0:48:dd:d1:58:8c:86:f5:33:6d:
9a:62:b3:9e:d1:e1:6e:7c:38:64:37:0e:7e:8d:df:
ed:74:24:f1:6f:28:75:6d:18:02:73:19:dd:7b:16:
0d:f6:84:cf:7e:14:98:bb:ec:af:82:2c:0a:7f:b4:
7f:a6:83:54:64:42:b0:92:c7:34:33:07:ca:9e:18:
e9:fa:c7:30:69:6d:26:cf:5f:af:6e:42:44:0d:55:
a5:a3:9f:90:08:89:4f:a4:a6:20:80:e5:c6:45:bd:
5b:37:4e:ef:6f:15:9f:6b:1c:29:fe:7c:3b:f7:ea:
42:34:0f:fd:06:82:b1:e4:6c:cf:49:2e:4e:fe:b9:
66:31:2c:6e:7e:b0:f2:33:51:1e:fa:5e:40:05:7f:
fa:5a:91:30:f6:7a:9a:51:34:9c:f6:ae:2f:d9:e1:
7b:a1:18:23:5a:57:9a:8c:69:c6:4a:5a:27:48:e2:
94:80:c8:16:03:51:4f:ba:3b:a2:6b:cf:3e:9d:bc:
b5:b9:27:ad:bf:ba:ca:b8:5f:d3:e3:f5:e4:4e:fe:
44:2f:b0:dc:42:f4:00:7b:34:83:48:4a:26:de:9d:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:71:5C:C4:C5:2C:B9:70:E1:56:FC:CF:20:A0:90:A9:F2:73:4D
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3C0F4E20EABF11EF8452610BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:f880::/44
2406:840:fea0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d5:d3:0e:6b:ef:56:15:36:76:4d:bb:c3:c5:4a:a2:aa:dc:
a6:bd:b7:ab:12:d0:a6:fb:7f:41:70:96:46:f6:4d:71:c8:d6:
76:18:7f:6c:f1:34:5a:bb:9b:38:aa:2e:70:5f:38:b5:87:e2:
31:8c:27:1a:5a:27:4a:0c:69:55:74:00:fc:93:49:e4:0c:aa:
c6:c3:3b:af:30:49:ae:75:4b:61:5f:25:4f:5c:65:ed:72:f8:
fa:46:87:da:1b:aa:b0:7c:03:bb:77:23:17:50:42:e0:ef:61:
ec:ad:fb:bb:4e:f8:f9:ef:51:b2:8b:f2:01:10:f2:06:85:c0:
ba:06:be:3e:40:0c:e6:e6:18:73:bd:4a:ff:2e:bb:62:24:14:
6b:43:1d:e2:d3:0a:7e:35:8c:74:4c:a6:b4:40:c2:d9:bf:4a:
3e:69:36:b5:15:18:89:e3:06:71:55:60:cb:36:d3:3b:a2:19:
51:82:a6:c7:7f:96:27:37:be:23:dd:2d:0a:78:7b:0e:8e:13:
3d:20:e7:e1:f9:6b:4e:e8:53:2c:5a:37:90:04:98:c2:a4:ce:
9d:f0:f0:18:45:c7:53:93:a4:8a:97:ee:81:7f:49:ac:bf:3f:
be:d3:50:7b:c7:cc:99:db:16:45:b3:0b:a2:4b:f9:dd:b2:6a:
9f:73:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:19 2025 by rpki-client