Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa
File: EB852420BEFC11EC82FBEC0AC4F9AE02.roa (raw, json)
Hash identifier: u9B8kLlkD/6UQaknve3bbLxR+jMEAa064x79Pfq6fZg=
Subject key identifier: BC:84:43:A5:0F:7C:A0:3B:0D:48:F7:5E:D1:D9:41:57:78:7F:BB:F0
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0A5A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa
Signing time: Sun 14 May 2023 22:14:48 +0000
ROA not before: Sun 14 May 2023 22:14:48 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2406:840:e666::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2650 (0xa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C
Validity
Not Before: May 14 22:14:48 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64615d57-7a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:db:5c:3e:b3:55:32:f8:1d:27:51:e1:3e:
6f:50:bc:10:23:7f:0f:04:f8:07:7b:d3:1b:9f:f1:
7c:18:a0:73:34:ee:0f:d3:89:d9:44:93:a6:95:ed:
09:aa:d4:ea:e8:95:06:f7:16:12:6f:9e:76:04:3f:
cd:57:c1:e5:4c:25:09:1a:33:03:26:e8:6c:09:ea:
dd:ee:f7:e3:bb:2b:54:95:55:d3:d9:47:54:84:57:
81:7b:d1:88:b7:2c:6c:00:97:26:b1:84:84:c7:3d:
f9:1b:2c:a7:c9:40:39:f0:33:f9:2e:2f:44:b0:36:
3b:21:b9:48:b3:31:23:b6:d5:f7:bd:32:09:b9:b9:
e9:16:18:f3:b0:5d:3c:2c:c0:c2:c9:c2:6b:45:68:
4d:51:e1:01:5a:d2:16:d6:ac:cc:d8:1d:c2:8f:a2:
b7:ba:e6:c6:f7:41:3f:d6:56:c1:b7:bc:4f:e2:db:
f4:a6:f4:64:e0:7f:be:f7:0e:df:52:5e:22:f8:ce:
fd:c2:f8:81:db:41:b4:8b:49:56:ec:f9:e8:b2:b7:
e0:81:9d:6b:bf:91:88:d5:92:6c:73:db:be:cf:c6:
07:fc:c3:75:34:a6:a1:5e:95:f8:b5:db:da:da:5a:
36:30:8f:1f:98:21:c5:3c:28:fa:c7:b8:e4:94:c3:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:43:A5:0F:7C:A0:3B:0D:48:F7:5E:D1:D9:41:57:78:7F:BB:F0
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e666::/47
Signature Algorithm: sha256WithRSAEncryption
85:a5:87:3c:7d:83:7f:d8:03:e8:b1:c9:c6:dc:dd:4f:49:27:
6d:72:15:f7:1d:2c:41:37:0e:65:f3:1a:f5:db:c8:fc:9f:08:
ee:9e:2e:a2:76:27:19:71:df:7a:20:3a:57:bc:b2:6d:51:5f:
ab:6e:59:5d:fb:1d:4e:7c:8c:19:45:10:96:07:71:63:b1:15:
34:58:f5:fd:45:eb:5c:de:ab:37:3d:4f:a6:de:e1:14:5f:3b:
75:33:55:13:27:5d:9d:b3:38:39:df:b1:7b:6e:15:bd:98:ab:
55:60:8d:29:23:a8:05:ba:f1:7b:6a:45:60:70:cd:cc:68:60:
28:97:9c:c4:29:e1:30:df:b7:79:e9:3c:d0:7a:f7:5f:88:6e:
0b:89:26:94:ea:c0:0e:72:34:06:8b:d6:b9:7d:f5:87:11:d3:
bd:5d:47:ed:e6:28:8d:6e:37:bc:10:22:56:df:a9:f5:ff:36:
a6:3f:a8:b0:af:5f:c6:bd:3f:9b:c4:a5:e1:c0:36:e3:d6:31:
73:6c:19:e0:cf:7b:1a:5f:aa:41:d6:e6:8d:2f:b4:2b:88:73:
3a:5f:a8:a2:83:41:2c:6c:ed:63:96:7a:f7:e7:27:0f:9e:15:
21:35:18:80:24:37:0f:ee:3a:db:f3:c7:07:2a:a8:3e:b0:a8:
37:4b:3e:6f
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDQ4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxNWQ1Ny03YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNTbXD6zVTL4HSdR4T5vULwQI38PBPgHe9Mbn/F8GKBzNO4P04nZRJOmle0J
qtTq6JUG9xYSb552BD/NV8HlTCUJGjMDJuhsCerd7vfjuytUlVXT2UdUhFeBe9GI
tyxsAJcmsYSExz35GyynyUA58DP5Li9EsDY7IblIszEjttX3vTIJubnpFhjzsF08
LMDCycJrRWhNUeEBWtIW1qzM2B3Cj6K3uubG90E/1lbBt7xP4tv0pvRk4H++9w7f
Ul4i+M79wviB20G0i0lW7PnosrfggZ1rv5GI1ZJsc9u+z8YH/MN1NKahXpX4tdva
2lo2MI8fmCHFPCj6x7jklMNGowIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLyEQ6UP
fKA7DUj3XtHZQVd4f7vwMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRUI4NTI0MjBC
RUZDMTFFQzgyRkJFQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwEkBghA5mYwDQYJKoZIhvcNAQELBQADggEBAIWlhzx9g3/Y
A+ixycbc3U9JJ21yFfcdLEE3DmXzGvXbyPyfCO6eLqJ2Jxlx33ogOle8sm1RX6tu
WV37HU58jBlFEJYHcWOxFTRY9f1F61zeqzc9T6be4RRfO3UzVRMnXZ2zODnfsXtu
Fb2Yq1VgjSkjqAW68XtqRWBwzcxoYCiXnMQp4TDft3npPNB691+IbguJJpTqwA5y
NAaL1rl99YcR071dR+3mKI1uN7wQIlbfqfX/NqY/qLCvX8a9P5vEpeHANuPWMXNs
GeDPexpfqkHW5o0vtCuIczpfqKKDQSxs7WOWevfnJw+eFSE1GIAkNw/uOtvzxwcq
qD6wqDdLPm8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:57:56 2025 by rpki-client