Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/A726BEF060E111EE9116BA43C4F9AE02.roa
File: A726BEF060E111EE9116BA43C4F9AE02.roa (raw, json)
Hash identifier: 9+z9dK5Aqhzju1Dog9QqCmrlUwDw0itD5e0vdXieN+c=
Subject key identifier: 08:FC:E2:40:63:BD:CC:16:BA:4F:6D:02:FC:97:A5:D7:13:8E:01:49
Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial: 0F
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/A726BEF060E111EE9116BA43C4F9AE02.roa
Signing time: Mon 02 Oct 2023 05:07:59 +0000
ROA not before: Mon 02 Oct 2023 05:07:59 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 58560
IP address blocks: 202.74.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D109
Validity
Not Before: Oct 2 05:07:59 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=651a502e-10e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:b3:fe:57:c9:f1:7b:7d:73:88:04:a6:76:
39:2b:9b:74:83:a5:15:e5:91:34:6c:0e:9d:2a:7d:
24:72:11:ff:85:fd:83:01:0f:0e:9c:28:2a:67:dd:
c3:08:53:21:10:ac:a1:d1:40:1b:f8:b6:b2:f0:af:
b8:b1:d2:b8:42:6d:b5:68:ff:cf:d4:5e:c5:2a:60:
ec:a0:56:d2:28:b8:7a:c5:63:9d:8f:4a:cf:b0:c7:
d7:b8:37:18:ad:f0:99:ec:24:b3:35:85:6a:e9:fc:
fe:06:da:d8:1a:4b:9e:18:07:88:2e:52:ad:37:ed:
6e:84:d1:7c:63:90:66:17:7b:98:ab:63:fa:77:1a:
49:c3:20:41:48:9b:cc:82:72:aa:02:ed:34:c5:ac:
18:90:ee:56:e4:ba:50:45:46:02:62:66:92:72:38:
8e:6e:f8:9d:b0:b5:dc:2c:07:a8:0b:b4:90:cf:b6:
47:56:c7:d1:b2:8c:c0:bf:66:4f:1e:b6:6e:95:23:
30:82:28:5e:9e:97:53:aa:12:0f:c1:81:fd:98:40:
b2:18:8e:fd:55:af:b8:86:d9:d7:fe:0a:4a:c4:27:
27:db:b1:d5:91:36:1b:a8:99:06:83:4c:7a:20:aa:
d3:b0:d2:e9:ed:2d:71:8d:c7:b8:47:0f:29:78:0e:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:E2:40:63:BD:CC:16:BA:4F:6D:02:FC:97:A5:D7:13:8E:01:49
X509v3 Authority Key Identifier:
keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/A726BEF060E111EE9116BA43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.74.39.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0e:10:0f:54:79:a5:87:50:b3:34:ab:61:35:bf:77:a6:c3:
97:87:bc:10:c4:67:db:1f:88:59:8f:f4:49:cb:49:6f:7d:34:
f2:c6:f7:c0:db:70:e5:78:4a:d9:c3:e8:0d:37:83:be:02:b4:
16:23:60:6c:b8:68:c1:83:e1:63:4b:b2:df:4e:eb:f9:73:08:
4f:d0:37:f1:a2:d4:81:2a:14:8c:e0:00:c2:f0:4c:50:67:9b:
50:2c:e2:bc:f6:85:58:aa:79:cd:79:38:42:c3:87:17:48:93:
0b:a3:6a:64:9a:9c:ca:8c:2d:8f:95:e2:49:4e:8f:fc:10:a7:
f8:e1:61:e4:03:95:2e:49:17:54:1d:8e:85:62:be:8d:1f:4a:
20:a6:83:6c:60:53:4d:f2:11:ef:f4:2b:72:ab:c6:3e:60:33:
2b:c5:5b:ab:a9:06:51:ad:7e:39:0f:8d:a0:4b:1f:f7:c8:bd:
ba:94:43:56:31:de:c3:b4:92:7c:4a:80:60:07:ec:c9:40:f0:
63:e2:92:b5:3e:fe:e5:de:ba:18:44:a8:25:39:16:1f:7f:13:
e9:ee:ec:7d:83:8d:e5:94:87:75:b4:2f:60:55:67:2f:18:1f:
d5:49:f9:8a:be:27:af:f9:39:08:33:7b:ac:0e:eb:a1:26:48:
46:c7:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:19 2025 by rpki-client