Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa
File: 82ECD570A52311EE9E3A6A6DC4F9AE02.roa (raw, json)
Hash identifier: kQlo4TZudL/+3cVdukaI2Xt0SfMZfPOcB6vLAPmqmPY=
Subject key identifier: DB:72:4C:CA:B0:0A:1B:A1:8C:7E:2C:E7:9D:B6:19:4F:BC:5F:03:50
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0C48
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa
Signing time: Sun 26 May 2024 21:31:20 +0000
ROA not before: Sun 26 May 2024 21:31:20 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131075
IP address blocks: 2406:840:fdff::/48 maxlen: 48
2406:840:fec7::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: May 26 21:31:20 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6653aa28-3668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:6c:e0:87:d9:f1:a9:ba:25:42:cc:2f:67:
bb:7c:aa:c5:57:e3:f1:6e:6d:49:dd:5b:cb:f0:5c:
d7:cd:67:9b:39:6b:d9:51:1e:49:44:0d:0a:a2:1b:
45:44:06:31:e6:56:96:a5:5e:08:0b:6b:1d:27:04:
39:95:8a:02:db:27:e6:d3:7a:ed:06:17:40:3f:ee:
eb:af:ff:7f:c1:e5:a1:a3:fd:ca:e8:eb:76:49:85:
a7:07:a0:01:1c:49:61:02:7d:c7:0f:76:3c:be:6b:
05:20:fd:15:33:10:16:76:df:ac:f3:8a:8c:bb:83:
83:08:7d:28:4d:f5:68:89:9d:84:7e:49:e9:24:ca:
44:67:57:86:75:35:fc:ab:ea:aa:27:2a:fe:ce:11:
f5:37:bf:64:eb:be:52:35:aa:ea:6b:14:e3:e8:0e:
c0:0c:3d:6d:d0:6b:ee:ae:06:e7:42:bd:61:d2:9e:
a1:a3:5e:eb:6c:a1:ae:6d:06:da:33:dd:44:82:22:
e2:64:61:dd:f3:a3:bf:39:55:ac:c8:58:2c:eb:18:
e8:bb:ac:10:6c:db:e8:02:e9:df:96:ad:f9:eb:24:
ee:4d:b9:27:ca:0e:57:4f:38:d7:b9:15:12:eb:37:
46:99:d9:c8:8f:b0:70:45:3a:e8:30:a8:3d:cf:e8:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:4C:CA:B0:0A:1B:A1:8C:7E:2C:E7:9D:B6:19:4F:BC:5F:03:50
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fdff::/48
2406:840:fec7::/48
Signature Algorithm: sha256WithRSAEncryption
74:2e:12:0f:7e:36:07:18:e5:96:e1:98:0b:4c:fa:2a:7d:6e:
6d:69:0b:d4:f5:4f:87:1c:f4:da:8d:d4:38:89:15:5e:c4:25:
2f:a1:7e:27:ce:8c:09:2c:31:4a:70:72:b2:06:1d:d0:da:ca:
1d:74:9a:0e:e2:17:9c:86:51:fa:3b:a5:59:1c:74:d6:98:f1:
a6:fe:38:ae:ce:40:13:b6:77:30:38:8e:83:18:1d:53:7e:67:
5a:8b:58:de:62:3e:5e:e8:23:45:b9:1c:85:93:df:ec:1d:d9:
6f:d1:5c:3a:f5:17:6f:cf:28:70:9d:97:c3:33:6b:36:f1:36:
76:bc:72:7f:5a:7b:74:ca:6c:50:33:03:aa:b7:50:59:35:08:
17:f9:22:4b:a2:15:07:77:5e:c9:a3:c7:70:b9:5f:77:b7:0c:
4b:44:0f:50:9d:28:9f:49:01:2e:8e:b0:bd:6a:4c:ca:42:e8:
bb:e9:54:2c:fe:6f:ed:da:79:13:14:21:06:92:a7:02:71:c3:
d8:51:5e:76:0f:ea:b9:ce:52:e7:9c:57:d1:0d:6b:38:7d:fa:
e5:e1:fc:02:f3:6a:2b:17:5b:db:6e:0f:86:c3:21:aa:a9:9d:
02:bc:a4:56:3b:d9:0b:db:b8:eb:21:24:ac:6b:bc:0c:cb:45:
ee:96:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:11 2025 by rpki-client