Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa
File: 966C7BEC71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier: fTUvmmJUSdi3hruG2y4NYz/uLGWpBNq3/mEhomdi9PU=
Subject key identifier: B4:86:B9:A9:38:1B:93:41:94:A4:7D:01:8B:B5:C2:0C:83:FB:78:9E
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0D69
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa
Signing time: Fri 13 Sep 2024 14:29:30 +0000
ROA not before: Fri 13 Sep 2024 14:29:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136725
IP address blocks: 2406:840:fc10::/44 maxlen: 48
2406:840:fea4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: Sep 13 14:29:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e44c4a-cb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:72:69:74:0f:25:69:a0:43:22:8d:eb:ae:
0d:11:ca:d6:bf:32:70:53:54:1b:0f:78:f2:1d:bc:
d6:45:13:01:96:63:f7:7f:d6:c2:25:c4:b1:bb:c6:
e0:b2:d7:4d:03:e2:f4:1c:6e:34:82:e2:55:17:a8:
a1:3f:05:f1:a8:69:75:85:b2:66:12:e1:50:b5:1d:
7a:2a:86:48:83:66:37:e7:f0:52:4f:7f:0b:64:45:
19:d5:53:a8:b3:86:2e:8c:f0:bd:5b:45:79:5c:96:
e7:2a:61:c8:2d:02:32:fa:82:10:f3:cb:d6:1e:1e:
cc:df:da:eb:3c:65:5a:21:ba:66:90:8f:b1:cf:e2:
e5:04:6a:bd:d9:b5:2a:03:2c:98:74:91:c4:df:c8:
08:ef:65:71:98:7a:1e:a4:2d:d3:fb:7c:f4:ce:2a:
4d:f3:bf:eb:c6:45:b6:f4:dc:f6:fd:17:aa:26:61:
e5:a3:64:8c:6f:19:01:f5:36:57:1a:a1:0a:34:83:
53:73:a2:16:11:67:8e:8f:51:14:3c:26:51:82:ba:
63:6f:f8:34:29:59:4b:cc:5a:9c:e6:99:11:0c:93:
ab:cf:2b:db:e8:b8:95:52:76:ee:a8:6f:18:11:5a:
ef:d5:1b:6d:ef:f4:05:12:c2:de:65:76:d0:a5:2b:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:B9:A9:38:1B:93:41:94:A4:7D:01:8B:B5:C2:0C:83:FB:78:9E
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc10::/44
2406:840:fea4::/48
Signature Algorithm: sha256WithRSAEncryption
56:5a:72:77:38:ec:2d:73:e2:aa:c1:61:13:d0:15:fe:89:07:
f0:3c:25:a3:38:aa:7e:29:bd:95:5f:d5:7f:d2:aa:e0:1d:a5:
c6:fc:ca:85:8f:34:05:b4:0f:da:c0:6c:fa:a4:df:95:b9:14:
cf:72:99:7c:89:14:8d:ec:a9:e3:49:ab:84:69:bc:1a:11:53:
53:b2:8a:a5:d3:95:4c:12:b1:88:1d:3b:31:b2:27:b7:7b:61:
6c:ad:11:42:d4:db:71:7b:8b:94:88:79:f5:98:af:3a:10:22:
1e:4f:f6:e6:8a:6e:0e:4a:1a:9f:36:37:50:9c:23:92:f5:1c:
4d:ad:c6:7f:9d:0d:77:01:71:43:c2:56:ab:26:97:59:8f:f9:
77:93:b2:5f:b7:40:5a:95:02:2b:96:43:0a:8b:1e:69:f3:ee:
c0:26:33:9a:ef:1c:94:9c:34:86:c8:93:6c:5f:53:a4:cf:8a:
8c:7e:e2:31:91:d7:9c:d0:8c:df:d6:f6:06:42:6b:2d:26:db:
c9:71:a7:99:e3:5c:0e:e4:71:cc:c9:4e:2c:4f:f6:4c:44:5b:
95:8b:1b:0d:85:11:04:c0:23:b2:e6:de:1a:0d:f8:a7:b0:88:
8a:be:bb:60:99:fd:dd:13:7c:15:60:dd:18:c2:2f:29:99:98:
16:25:89:7d
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjQwOTEzMTQyOTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU0NGM0YS1jYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAundyaXQPJWmgQyKN664NEcrWvzJwU1QbD3jyHbzWRRMBlmP3f9bCJcSxu8bg
stdNA+L0HG40guJVF6ihPwXxqGl1hbJmEuFQtR16KoZIg2Y35/BST38LZEUZ1VOo
s4YujPC9W0V5XJbnKmHILQIy+oIQ88vWHh7M39rrPGVaIbpmkI+xz+LlBGq92bUq
AyyYdJHE38gI72VxmHoepC3T+3z0zipN87/rxkW29Nz2/ReqJmHlo2SMbxkB9TZX
GqEKNINTc6IWEWeOj1EUPCZRgrpjb/g0KVlLzFqc5pkRDJOrzyvb6LiVUnbuqG8Y
EVrv1Rtt7/QFEsLeZXbQpSvqdwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLSGuak4
G5NBlKR9AYu1wgyD+3ieMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTY2QzdCRUM3
MURDMTFFRkFDMDIyRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwQkBghA/BADBwAkBghA/qQwDQYJKoZIhvcNAQELBQADggEB
AFZacnc47C1z4qrBYRPQFf6JB/A8JaM4qn4pvZVf1X/SquAdpcb8yoWPNAW0D9rA
bPqk35W5FM9ymXyJFI3sqeNJq4RpvBoRU1OyiqXTlUwSsYgdOzGyJ7d7YWytEULU
23F7i5SIefWYrzoQIh5P9uaKbg5KGp82N1CcI5L1HE2txn+dDXcBcUPCVqsml1mP
+XeTsl+3QFqVAiuWQwqLHmnz7sAmM5rvHJScNIbIk2xfU6TPiox+4jGR15zQjN/W
9gZCay0m28lxp5njXA7kcczJTixP9kxEW5WLGw2FEQTAI7Lm3hoN+KewiIq+u2CZ
/d0TfBVg3RjCLymZmBYliX0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:57:52 2025 by rpki-client