Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa
File: 3F7DF1DAE27C11EDAE21C974C4F9AE02.roa (raw, json)
Hash identifier: 7+iwGvBe2i2+1Iw3Ji78E2B2nQ4C3/BeDh7VWnAt1yI=
Subject key identifier: 44:B9:33:36:73:BB:B1:27:34:22:7E:9E:B4:59:E7:74:FC:85:D2:7C
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 040C
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa
Signing time: Sat 09 Dec 2023 01:53:51 +0000
ROA not before: Sat 09 Dec 2023 01:53:51 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 38266
IP address blocks: 223.196.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D
Validity
Not Before: Dec 9 01:53:51 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6573c8af-c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:fb:29:2f:1b:d0:d3:d1:a2:ec:ca:04:cf:
49:e6:4a:02:2a:68:5e:0b:cf:31:b2:69:08:66:8e:
3d:7b:31:c9:b0:41:84:c4:84:93:53:33:66:6b:23:
38:af:4b:69:79:3f:70:e3:30:7a:80:78:d2:30:62:
a1:4e:f9:26:c0:a2:04:7b:39:bb:ce:75:1b:8a:af:
1d:74:17:6b:1d:4b:8e:9d:23:22:ac:19:63:61:8e:
58:8a:26:1a:55:e0:28:41:e9:f9:d6:42:09:7d:c4:
3b:53:99:50:19:a8:92:f2:14:68:71:30:e3:6c:67:
e4:7a:6a:0c:eb:15:3c:7c:15:40:96:93:11:1f:54:
cf:b3:94:70:a8:65:c0:15:59:99:55:01:5a:27:98:
f1:d9:50:19:6e:0d:77:86:ac:2f:7f:f3:c6:dc:4a:
7d:a5:e1:6d:89:5b:20:43:f3:ba:aa:ee:74:61:91:
54:c4:59:2a:60:bf:6a:12:c5:10:ab:01:2e:6d:cf:
8c:82:42:a0:f4:7a:ea:e2:a4:f6:8b:f7:cd:5c:10:
6c:1f:dd:e0:a2:98:75:6b:9d:f8:c5:6c:95:bf:95:
ec:11:9a:3b:76:d5:c3:91:fb:8e:ec:c4:6d:67:ce:
5c:11:c4:9b:4e:e1:a3:98:37:a6:ae:2a:6b:b8:44:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B9:33:36:73:BB:B1:27:34:22:7E:9E:B4:59:E7:74:FC:85:D2:7C
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.196.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ae:d7:99:be:48:f2:36:d6:6b:b2:60:1e:99:55:82:ab:7b:
66:0f:6f:c5:d5:02:ec:a1:24:c6:ee:3b:8e:9e:76:af:fd:9e:
75:69:cf:ab:b1:ce:68:20:0a:5a:ed:c1:66:ef:c4:68:ac:c8:
11:c2:76:17:a9:78:64:f6:5e:6b:3a:07:79:d8:9d:a7:ff:5e:
05:39:b5:d3:4f:2e:2b:05:e4:cb:70:ea:ce:42:a1:08:2b:70:
44:54:b9:68:13:55:6b:38:b2:14:19:33:77:43:11:05:ad:7e:
5a:d7:7a:c0:ce:65:e2:88:e5:49:75:b7:55:83:32:3a:69:80:
ce:fb:00:8d:5c:c3:b2:1e:f5:c6:03:95:a7:39:ae:b8:fa:db:
a5:6b:a9:0e:d9:02:0a:d5:14:73:d3:a1:ff:90:68:a1:5e:50:
91:a4:e7:e0:84:5f:b0:ad:14:02:da:f8:30:d1:fd:52:c3:8f:
a3:89:5b:56:33:98:27:8f:0c:a2:72:33:c8:8f:f8:65:7e:24:
cc:14:94:e8:47:39:1c:fc:04:0b:70:c7:b6:ae:f8:17:40:f3:
57:32:e2:48:05:85:59:fb:83:59:ae:0f:03:f1:19:61:32:f7:
9c:5f:97:d5:a4:c9:83:97:4a:dd:8f:6c:24:12:f6:6d:cd:8f:
e9:61:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:28:18 2025 by rpki-client