Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
File: D40753E8F6C411EEAFF62079C4F9AE02.roa (raw, json)
Hash identifier: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=
Subject key identifier: 3C:13:C9:A3:36:B1:45:14:0B:73:B2:98:90:F0:5E:B5:D6:A3:88:10
Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial: 0228
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
Signing time: Sat 11 May 2024 04:39:54 +0000
ROA not before: Sat 11 May 2024 04:39:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 2404:f980:8::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9945
Validity
Not Before: May 11 04:39:53 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=663ef699-ab69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:ad:45:1d:e7:cf:62:88:bd:04:60:4f:17:
36:3f:c5:bf:bf:2b:e0:a4:83:9f:f1:f5:e8:52:4e:
58:6a:b5:22:08:5a:e4:2e:8d:5f:32:5c:30:e2:02:
40:84:1a:b0:73:27:70:23:a9:11:5f:0f:c9:ce:00:
a7:f9:bf:cf:97:00:7a:7f:15:89:c9:f6:62:43:73:
4c:02:5d:9b:2a:74:d4:99:f1:b0:01:4a:58:4e:4e:
60:c4:6a:bb:68:b9:f3:dd:a6:4b:28:fc:2b:ff:68:
b3:7e:ad:a5:55:15:0d:dc:63:86:83:05:98:82:f8:
b8:c0:18:7a:d7:2d:c3:a7:d5:a7:e5:31:4f:64:df:
73:fe:30:c5:71:6e:ce:59:54:c1:50:a8:c3:0d:35:
77:67:bf:57:90:64:70:1b:52:27:6c:5d:e2:0a:13:
56:c1:da:5c:2d:79:fc:cf:37:1e:f3:7d:84:7f:31:
8e:64:a1:63:36:70:c7:82:c7:59:3b:41:ce:5a:42:
be:39:5a:d7:7c:4c:05:29:1f:00:40:63:25:51:68:
cb:ce:dd:46:b6:70:72:7f:a0:1b:12:f0:27:52:15:
35:a3:01:52:f2:1e:10:ec:67:8f:d5:83:21:52:04:
4b:6a:27:57:b3:75:d3:c5:a9:6b:57:f1:60:cf:74:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:C9:A3:36:B1:45:14:0B:73:B2:98:90:F0:5E:B5:D6:A3:88:10
X509v3 Authority Key Identifier:
keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f980:8::/48
Signature Algorithm: sha256WithRSAEncryption
8f:c8:0f:4f:f9:75:75:7e:dd:fa:c6:2d:24:b5:13:c6:30:c5:
37:2d:b6:15:6d:2f:ea:4a:ad:c1:5a:8b:e4:34:f0:7d:68:b2:
8e:13:72:72:f2:c5:6d:e0:b6:5c:32:5d:3d:9a:fc:c5:27:a7:
c9:a0:75:de:c7:2a:aa:2d:71:20:2f:0c:ae:62:0c:bd:83:86:
f0:01:fa:87:98:79:48:d8:10:3e:64:ec:20:c5:34:bd:11:6d:
cf:93:43:78:6f:50:41:83:41:72:43:23:25:a1:49:a5:9d:8b:
3f:02:80:c5:d5:f2:d2:65:ca:6e:6c:0c:08:6a:cb:86:d8:e2:
88:5a:1d:ca:6e:d4:33:f2:85:71:94:f9:7a:e2:73:ab:67:e9:
78:b1:0c:58:28:a4:a3:25:51:3e:d4:67:13:da:cb:54:06:31:
87:ab:8e:51:de:33:0c:77:f3:30:31:28:ba:16:9c:5c:21:00:
d1:fd:1f:f6:ca:88:66:db:5f:0a:fc:eb:a2:f3:29:e1:db:0b:
d6:5d:8e:de:99:6c:54:76:64:13:1e:96:32:d9:57:e0:f6:b1:
a8:d3:da:d2:fd:bd:42:8f:95:77:1d:9d:47:62:51:eb:0f:a5:
84:67:ca:10:11:2e:ed:eb:c9:9a:2e:d1:8a:85:83:fc:d0:9c:
1a:ed:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:40 2025 by rpki-client