Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/D3C36D46BCED11EFA8B68383C4F9AE02.roa
File: D3C36D46BCED11EFA8B68383C4F9AE02.roa (raw, json)
Hash identifier: +lFV6zmRlwGHwJqOPaIRFTxC1A2/mixCGqaB5M/9x0s=
Subject key identifier: 7D:B1:A0:4D:0A:32:20:BE:34:49:75:FF:ED:C7:01:66:DF:23:05:A7
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 03
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/D3C36D46BCED11EFA8B68383C4F9AE02.roa
Signing time: Wed 18 Dec 2024 03:11:52 +0000
ROA not before: Wed 18 Dec 2024 03:11:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152181
IP address blocks: 36.50.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Dec 18 03:11:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=67623d78-b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:d6:17:e6:14:c4:76:64:25:82:fa:a1:4d:
27:d1:d6:ec:c5:a9:a0:d6:e9:90:41:b7:00:f4:01:
e4:16:d7:26:0a:93:12:55:fb:85:f5:6d:0e:10:0a:
fe:e2:62:ea:1c:0b:25:09:fa:bc:97:a4:3b:6e:09:
4c:58:e0:5e:3f:24:0b:a8:5d:17:9c:43:34:a0:9f:
fa:47:40:65:7c:ff:57:ca:07:3d:99:57:7c:83:c9:
69:9c:63:78:73:f8:f5:60:5f:bb:b5:dd:4c:43:ec:
2d:ff:11:ca:76:58:01:3d:7f:37:3f:86:ce:9b:5c:
ae:7b:a8:34:33:25:05:5b:5e:e8:11:39:91:fb:2c:
8c:2f:8e:83:44:ff:39:6d:08:cd:39:8c:50:f0:37:
d4:97:21:c1:b9:39:2d:bb:d0:dc:7c:50:97:5f:16:
e8:e2:a1:8b:39:61:74:80:84:f9:71:29:56:c9:33:
e5:13:c0:7f:57:99:32:c2:08:83:2e:ed:6b:a9:8d:
2c:2f:7f:4f:23:57:04:b2:e5:57:52:38:35:9d:ea:
36:85:ab:99:9c:4e:df:e3:60:c6:fb:f9:9d:20:2d:
29:3e:20:a1:de:10:74:ad:4d:9f:74:72:e4:0e:e0:
db:7e:4b:36:07:21:5d:fd:23:1f:fd:a7:0d:fe:08:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:A0:4D:0A:32:20:BE:34:49:75:FF:ED:C7:01:66:DF:23:05:A7
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/D3C36D46BCED11EFA8B68383C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.144.0/23
Signature Algorithm: sha256WithRSAEncryption
61:1d:ed:36:db:63:90:27:76:96:0e:3f:74:77:bf:8d:13:be:
d3:7e:88:8f:4f:66:67:44:9c:dd:0e:eb:64:f9:cc:4d:92:ae:
af:ba:7a:c6:e8:cb:d3:ed:66:9f:2a:05:9f:ed:11:34:24:da:
1e:2c:30:68:73:16:f3:d4:86:28:f9:a3:25:70:70:e9:26:0a:
29:0e:14:40:86:fd:0e:4f:e7:51:ed:da:18:77:a8:07:0c:14:
01:ec:a2:f3:4f:cf:04:24:b3:8d:5c:5c:cc:e9:b5:ac:91:03:
31:f6:e0:ab:af:5c:a4:e7:5e:a0:bc:dc:f3:64:c3:eb:5b:8a:
cb:9e:88:3b:81:b0:51:36:f2:28:05:0d:1e:fd:d8:c1:51:9f:
46:14:90:78:27:04:cb:12:7e:f9:e1:13:c8:ef:56:5b:b9:f0:
72:50:1c:43:8b:a1:a3:6b:f0:16:09:cc:47:16:2f:06:d7:67:
28:99:88:b6:68:d4:dd:6d:15:4b:33:54:ac:f1:d5:83:e7:15:
26:e4:15:64:19:7c:ff:c9:cc:46:1f:e1:5c:6b:28:ff:4d:f0:
f2:75:bd:2b:f2:79:20:a1:f9:e3:45:68:2b:44:14:21:fc:85:
ed:d3:79:54:8a:48:8d:0d:bf:13:4d:bc:e5:ec:c1:eb:7d:d5:
de:c1:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:28:59 2025 by rpki-client