Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
File: 296CCA26624C11ECBBFEC928C4F9AE02.roa (raw, json)
Hash identifier: Bq4z4ndClQCXvrPZsdGFxWvcsbCa+iwW7QUUguTOj44=
Subject key identifier: 8B:19:E9:D3:59:5E:2E:49:35:51:AC:52:E6:81:B4:B6:7A:31:57:54
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1A39
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
Signing time: Sun 30 Apr 2023 17:13:55 +0000
ROA not before: Sun 30 Apr 2023 17:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142033
IP address blocks: 2403:7100:a::/48 maxlen: 48
2403:7100:b::/48 maxlen: 48
2403:7100:c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6713 (0x1a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75
Validity
Not Before: Apr 30 17:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644ea1d2-4821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:84:6e:d8:ae:8c:87:22:14:96:2f:17:d8:
11:53:9a:36:66:1e:e5:9f:42:74:13:9c:f0:f9:d7:
8f:f3:af:f8:b2:05:78:92:88:22:25:e6:3c:5c:eb:
2d:57:ff:10:e3:a0:95:77:64:59:ca:6e:78:24:24:
bd:61:6c:81:d9:6a:e9:f4:54:c7:82:37:74:ff:57:
e6:03:b1:b8:59:cd:be:ae:2a:60:53:85:de:76:ab:
56:e6:66:de:74:bd:b8:3b:15:bf:54:9b:ba:61:9c:
77:28:93:62:a6:b1:3b:a1:9b:b9:63:37:24:a3:33:
68:d8:fe:02:43:fa:5e:2d:55:ad:c8:02:bd:5f:83:
00:20:1a:5c:3d:e8:c0:c1:01:87:b0:08:70:e0:9f:
98:ee:e1:3b:d4:8d:b9:05:9b:a8:7f:47:01:92:02:
62:22:50:a0:24:d5:95:5e:11:4f:40:18:30:90:28:
be:2e:d1:78:08:59:86:1a:04:f8:9f:ff:9d:37:22:
ca:2f:59:04:8f:54:86:c9:25:76:c9:ff:36:36:a3:
ca:8d:7a:14:e7:b4:29:f1:3c:d0:94:8f:3b:aa:95:
11:ef:dd:78:cd:c6:a4:80:be:e7:e9:bf:6b:38:dd:
d8:ac:8a:84:4e:00:c8:58:02:78:5f:ee:2e:5b:36:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:E9:D3:59:5E:2E:49:35:51:AC:52:E6:81:B4:B6:7A:31:57:54
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7100:a::-2403:7100:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:64:d9:d5:fa:54:1b:77:45:63:94:58:52:13:cf:e0:b1:e8:
8e:34:08:31:62:b0:11:dc:fb:42:32:41:78:12:ba:83:fd:99:
46:42:61:f3:bf:55:83:bd:ad:f6:90:30:52:55:72:b1:94:62:
50:99:d3:9c:7a:6c:b7:4a:47:6a:d6:1f:5d:a8:b5:49:d6:79:
fa:f1:25:aa:73:9e:ea:38:8f:fb:6a:86:87:c6:a2:ce:82:fb:
91:9d:84:46:05:fb:05:bf:35:48:2a:f3:74:e1:e3:6e:c9:a9:
85:3e:a9:73:e5:2a:24:e8:41:e4:28:e6:a5:55:e8:81:54:3a:
60:89:3c:b0:07:71:81:38:0d:16:5d:e6:d3:ae:84:64:ff:31:
14:58:4a:d5:90:34:1a:e5:0f:05:02:d2:40:81:0c:ef:50:c6:
7f:79:67:a3:13:83:e1:4a:30:85:43:ef:6a:c3:64:39:b1:ae:
f0:61:6c:b0:9c:94:74:a5:ed:9c:37:4f:5a:42:06:a1:ad:3e:
fa:08:78:bb:58:46:74:1f:1b:7f:71:63:55:7a:21:67:74:e0:
62:a9:99:d6:6a:cc:ce:62:5c:9b:ae:0d:91:3b:1e:01:87:57:
68:39:0b:c7:a8:19:79:af:88:16:cc:49:3b:d2:5e:68:e2:f8:
48:04:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:59 2025 by rpki-client