Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/5702AD56C63611EFA1B27B48C4F9AE02.roa
File: 5702AD56C63611EFA1B27B48C4F9AE02.roa (raw, json)
Hash identifier: Sv9HabWeD00ZU+xM+wCGj/5tk+9WO9hsyGSRLqIVDkM=
Subject key identifier: 77:E1:22:93:28:3E:F9:9D:AC:C8:F9:26:80:36:30:48:FE:72:5C:34
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: F7
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/5702AD56C63611EFA1B27B48C4F9AE02.roa
Signing time: Sun 29 Dec 2024 22:45:31 +0000
ROA not before: Sun 29 Dec 2024 22:45:31 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140934
IP address blocks: 36.50.240.0/23 maxlen: 23
36.50.240.0/24 maxlen: 24
36.50.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D
Validity
Not Before: Dec 29 22:45:31 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6771d10a-3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:58:b0:8d:91:fb:82:64:22:fd:5d:f6:27:a4:
af:c1:90:52:d2:c4:71:37:06:2f:bf:0b:13:28:f0:
36:e0:1d:ab:24:9c:34:dd:bb:25:8b:5f:25:06:7a:
0d:11:a4:9d:cd:2a:ca:34:df:36:dc:2d:8a:d8:47:
00:23:12:f4:38:14:8e:b2:c4:99:0b:45:ae:7d:76:
de:66:2d:4c:92:eb:75:d5:33:7a:9b:b5:30:e7:f2:
33:a6:8b:a7:fb:54:3f:27:26:0e:b6:3b:aa:47:37:
c1:93:68:db:af:c9:5a:f1:b7:6f:c6:10:40:c2:6b:
fd:0c:56:c2:cc:5c:1c:07:92:22:10:d1:14:ef:73:
84:12:78:e6:6a:c8:ce:f2:db:b7:75:80:3c:b1:03:
62:e9:5e:89:36:d1:34:bc:dc:04:c4:88:ec:fa:9f:
17:f6:dc:4c:6d:43:53:f2:59:cb:de:29:5e:8a:64:
c6:d5:af:95:fc:44:e2:0a:29:b8:2b:5b:c9:d1:ed:
10:de:20:6a:74:29:b6:47:2c:c5:90:ec:ba:99:51:
26:15:53:73:7f:8b:91:b7:37:84:a7:43:79:ab:9d:
bf:0a:68:bb:a5:2f:df:ac:c1:35:a1:62:9d:4f:28:
a4:04:4d:4a:61:30:bc:c5:b4:e5:4d:d8:f6:85:bb:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:22:93:28:3E:F9:9D:AC:C8:F9:26:80:36:30:48:FE:72:5C:34
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/5702AD56C63611EFA1B27B48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.240.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ef:5a:8a:23:e4:ca:e4:69:cc:d7:24:fd:cd:84:af:55:80:
9a:48:11:d0:56:7f:e9:f1:34:ee:92:11:9f:98:da:1c:fa:b2:
4f:67:0e:25:81:b1:cd:a7:c9:b4:3a:6c:48:f7:12:14:7c:81:
9c:3d:94:a9:0b:09:b3:2c:1e:d2:1d:39:8d:94:9d:82:69:de:
ff:a6:e4:eb:21:e8:ea:ae:73:76:fe:a4:6b:17:7a:7a:cf:f3:
46:8a:73:55:4b:53:2b:89:63:cb:b4:05:13:51:90:75:1a:be:
a1:2b:b1:8c:25:0d:ba:4b:5a:22:af:0e:c7:61:a0:29:6a:42:
0a:8f:5a:87:29:f3:d3:b4:1b:ff:17:13:26:6d:58:7e:aa:09:
cc:a2:fe:6a:43:b0:fc:79:57:50:f0:02:e6:2d:14:18:b5:75:
d2:ca:0b:27:47:57:79:0e:7b:91:1e:1c:ad:36:d9:74:87:3c:
6b:b4:99:63:b2:92:48:f0:ab:f8:0e:d7:87:9b:c7:35:de:79:
e1:75:6d:7e:4b:11:0f:a9:e0:ad:8f:93:c7:9d:fd:72:53:03:
bc:58:33:ea:12:ae:0a:66:f7:31:67:4e:f8:67:63:6b:9f:99:
31:60:10:4f:f0:81:4f:f7:43:a3:d7:e8:75:51:85:f9:db:e1:
0b:27:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:49 2025 by rpki-client