Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/4DB6F4745CE111EEA97FD214C4F9AE02.roa
File: 4DB6F4745CE111EEA97FD214C4F9AE02.roa (raw, json)
Hash identifier: uPGgLk6yKDXZ/x6VrsCD+aranCttdiSkmct4qMklAvE=
Subject key identifier: 5B:B7:2C:85:64:14:E2:E9:F4:A6:6F:08:3D:29:29:6A:75:02:69:EA
Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial: 02
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/4DB6F4745CE111EEA97FD214C4F9AE02.roa
Signing time: Wed 27 Sep 2023 02:55:24 +0000
ROA not before: Wed 27 Sep 2023 02:55:24 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 55860
IP address blocks: 202.74.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D109
Validity
Not Before: Sep 27 02:55:24 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6513999b-40bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:50:e9:7d:57:e4:1e:9c:bc:55:89:37:6f:
9f:ca:da:9f:00:74:4b:79:a5:d4:0b:7a:32:89:23:
56:11:19:d8:63:ec:a6:4b:dd:c8:39:1b:0f:db:cd:
ad:a5:67:56:68:68:4c:88:48:19:ff:19:c1:e1:14:
1c:c5:c3:ec:1f:ea:f2:30:b3:cb:bd:88:2b:73:33:
73:ae:e5:73:23:fc:19:a4:e4:f7:4d:76:96:37:f1:
9e:88:02:f0:88:98:72:25:82:02:b7:b0:78:c1:95:
d3:79:ac:2c:4d:67:6d:0a:63:65:06:1d:24:dd:0f:
cd:09:8e:8e:5b:23:8e:a2:c5:1b:c2:32:6e:59:c5:
d1:81:ab:36:d7:90:a6:2e:75:d6:25:f0:4e:62:59:
28:b9:d8:af:3b:4a:b5:ff:35:5b:88:cf:fe:57:76:
c8:4b:83:40:e7:98:26:aa:b5:42:10:a4:07:fe:4a:
cd:89:15:ef:b0:81:0c:09:55:bb:ae:4c:b7:25:5d:
4c:8c:d3:a7:24:1f:f3:88:53:13:77:f1:b3:78:04:
fd:d7:0c:15:91:0f:21:ad:a7:7d:61:58:a2:c4:3b:
05:d6:59:57:d3:84:63:f7:58:44:f1:7e:36:6d:f1:
49:5b:85:58:0d:68:05:b8:6e:df:47:d1:f5:d8:34:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:2C:85:64:14:E2:E9:F4:A6:6F:08:3D:29:29:6A:75:02:69:EA
X509v3 Authority Key Identifier:
keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/4DB6F4745CE111EEA97FD214C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.74.39.0/24
Signature Algorithm: sha256WithRSAEncryption
52:15:25:82:74:0c:25:ac:06:68:d1:94:61:5c:84:c7:00:f0:
d0:63:30:39:2a:51:2e:60:06:07:92:0e:79:19:f5:61:46:f0:
ed:0f:dc:d2:9e:01:9c:cd:0c:cd:c9:6a:70:9e:73:eb:83:f5:
f6:4b:45:9c:6f:35:b6:c9:11:3a:7c:f3:bf:82:a2:93:e6:43:
52:8e:8d:bc:cc:b8:62:1d:e8:b7:10:0a:02:ea:ee:c6:e2:52:
04:78:f1:b4:59:73:25:6b:a1:87:3c:d4:f3:5f:99:14:0e:33:
fd:f7:9f:b6:71:e7:1b:48:92:cc:d6:8f:4f:b1:f9:a7:02:c0:
d4:d3:c5:86:87:4c:5c:e9:d0:df:3d:ec:ff:f9:6b:be:63:58:
75:95:99:04:7e:6c:27:27:dc:e5:81:34:47:85:69:8b:9a:8b:
9f:1b:08:aa:b7:14:3c:3c:d7:4a:de:33:b2:9e:96:9d:26:2e:
d9:24:89:36:44:16:3a:e6:99:07:77:90:b4:fc:3c:81:46:93:
17:7b:6b:2e:10:12:b9:13:af:b6:32:c8:1d:0a:be:b3:2e:5b:
4c:48:3f:d3:bf:9c:43:8a:2b:30:65:5b:6a:59:02:31:1a:0a:
02:e9:5b:b1:56:97:bd:69:d3:87:3e:98:a7:ca:08:36:bc:8d:
07:4f:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:06 2025 by rpki-client