Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/F12A769A9E5911EDA0CDAA19C4F9AE02.roa
File: F12A769A9E5911EDA0CDAA19C4F9AE02.roa (raw, json)
Hash identifier: TaRMooCQxTO5xlu3403SafaOU20CL53AVXXesw79XSk=
Subject key identifier: 57:E7:FE:5C:BF:6B:98:E1:EE:D2:67:F5:73:8B:A0:19:2B:23:01:75
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0C4E
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/F12A769A9E5911EDA0CDAA19C4F9AE02.roa
Signing time: Fri 27 Jan 2023 15:47:46 +0000
ROA not before: Fri 27 Jan 2023 15:47:46 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 209554
IP address blocks: 2405:84c0:6f00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60
Validity
Not Before: Jan 27 15:47:46 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63d3f221-b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:c2:d8:1b:e3:33:91:39:27:6c:d9:81:c1:
2a:57:fc:f9:32:71:e3:d8:9a:9c:40:01:e7:52:d7:
22:98:c0:e1:45:e1:be:4d:40:85:d2:f3:26:f4:3d:
cd:58:60:93:d9:69:51:db:4a:d2:55:55:e9:a0:ab:
df:5d:c6:f3:5b:a2:43:0f:72:91:ee:53:6d:e9:76:
83:68:be:21:ee:fd:d7:7a:ab:2a:8a:24:c6:2e:e7:
8c:f6:98:1c:9f:ca:71:b2:37:b1:d4:48:9e:69:55:
d0:3c:be:8e:0a:4c:39:0f:d4:d4:f1:87:4a:6d:82:
41:da:eb:36:67:ab:86:77:8d:82:1c:be:f4:00:42:
b7:fb:17:74:0d:1b:14:13:ed:d9:72:48:f6:be:e2:
c1:03:33:3c:4b:d4:b6:43:49:27:5c:fe:7f:ce:cb:
c9:a1:75:ca:48:1c:c0:1c:9e:94:73:24:7a:aa:17:
e4:f9:03:0b:00:f8:7d:fd:a3:fd:b7:49:63:f3:05:
54:c0:99:49:76:37:29:a8:d5:96:af:dd:76:f5:05:
b4:b7:d8:8d:d8:56:f5:bd:b7:9c:e2:b5:44:46:c5:
02:bf:e4:8e:93:c1:b5:29:e1:cc:c6:84:c7:c8:1e:
aa:d6:e9:bc:02:63:78:a0:0c:43:dd:f9:30:3e:dd:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:FE:5C:BF:6B:98:E1:EE:D2:67:F5:73:8B:A0:19:2B:23:01:75
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/F12A769A9E5911EDA0CDAA19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:84c0:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
48:d7:1a:5d:d5:4b:4e:06:9f:70:86:02:dc:b6:25:9d:77:08:
73:cc:4b:58:d0:f5:ac:a9:e5:66:b8:4c:db:75:3b:5e:9e:72:
d2:9a:da:a3:f5:b3:ea:96:8e:8a:34:1f:53:07:d9:c3:56:cc:
df:85:51:28:b0:f1:f0:a9:ba:ee:98:7b:8a:b0:29:02:25:b5:
ea:ca:c3:b9:bf:19:fc:54:f5:49:9f:37:2d:df:4c:c5:a3:09:
dc:6c:5e:f1:e8:c5:f7:09:83:41:f4:79:08:9e:cc:95:f1:91:
76:95:c7:f3:5f:da:ec:29:d5:38:a6:59:2e:88:e4:d7:d3:98:
76:47:ce:32:f6:2f:08:75:ba:98:8b:14:49:ce:5d:18:d6:e2:
81:95:06:13:19:38:b2:6f:61:3e:9d:44:c1:60:fa:5b:e6:4f:
63:0e:36:54:97:f7:26:6b:4d:08:58:30:76:67:4a:0f:df:9e:
4e:12:46:28:58:2a:14:6e:20:4a:56:f9:4a:c6:da:f4:0a:77:
f9:27:d3:f3:78:ff:a7:04:67:5c:b6:0c:43:56:50:fd:b0:b2:
ee:67:50:58:e7:c1:a9:ed:66:c4:1f:70:0e:c5:c5:a4:1d:0c:
44:fe:23:a2:1e:11:79:38:48:00:70:18:c8:2d:cb:85:51:c0:
cf:ea:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:16 2025 by rpki-client