Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/EB5EBC3A341D11EEBE89FE2FC4F9AE02.roa
File: EB5EBC3A341D11EEBE89FE2FC4F9AE02.roa (raw, json)
Hash identifier: FCDJlRGpsAtgYzNX7GgnijG96w+qPEoHtmq0Hme7HVA=
Subject key identifier: 14:18:3E:B8:D0:ED:EC:17:EF:A4:97:5C:01:C1:51:E3:F3:FF:F5:93
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: E1
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/EB5EBC3A341D11EEBE89FE2FC4F9AE02.roa
Signing time: Sun 06 Aug 2023 05:56:01 +0000
ROA not before: Sun 06 Aug 2023 05:56:01 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 15731
IP address blocks: 203.33.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A
Validity
Not Before: Aug 6 05:56:01 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64cf35f0-5390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:08:3a:77:93:e2:11:2b:23:86:86:08:61:
9d:c5:37:c5:f0:f1:d9:25:12:a5:78:28:c1:c2:19:
5e:3c:88:46:5c:ac:f8:7c:62:c1:d7:ab:11:df:55:
d6:72:e5:48:21:61:41:10:e8:74:01:0e:57:e9:e4:
90:51:6b:a0:00:36:7e:ff:15:fa:ac:f1:8f:ce:07:
6a:90:12:23:e0:f6:72:2b:66:00:ba:43:a6:3c:78:
14:16:a9:e1:e2:8e:57:97:21:02:f2:b0:26:8b:fc:
d4:ae:34:37:7b:0e:6e:c0:87:18:57:b6:01:fc:b7:
88:ea:aa:68:f2:00:cc:7b:c8:34:2d:59:2c:e8:82:
9c:43:6b:48:5e:35:7b:24:46:89:f2:63:1c:6f:6c:
90:50:c8:06:ad:5d:5d:eb:30:dc:b1:57:3b:77:d6:
dd:01:38:91:6d:af:df:0b:f8:c3:b1:5d:e3:a2:a0:
91:98:c1:8c:53:ad:27:02:ca:00:58:e4:00:d6:f6:
cc:21:0f:4f:10:90:f1:d1:a1:c7:af:e2:0d:db:ea:
35:96:46:87:a8:73:b6:43:a2:25:de:83:77:c3:c8:
2a:80:64:e5:c7:cc:21:d3:7e:eb:5b:17:ba:6e:5a:
7d:be:fe:38:2b:db:24:0d:86:07:55:4a:b8:13:cf:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:3E:B8:D0:ED:EC:17:EF:A4:97:5C:01:C1:51:E3:F3:FF:F5:93
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/EB5EBC3A341D11EEBE89FE2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.33.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ee:34:de:93:66:6f:b5:e1:e3:f7:b1:fe:75:c7:1e:6d:c6:
41:c1:25:2e:f8:4d:11:63:62:6f:0c:80:13:29:50:af:99:48:
78:8a:d1:88:7d:83:92:04:41:f0:18:e2:00:43:5f:19:0d:7b:
cc:96:4d:9b:7b:b1:ad:db:85:44:32:32:18:f4:3a:ad:d1:e7:
f8:3b:a9:df:60:69:62:a4:2e:ee:10:a5:d6:5d:28:04:3f:02:
b7:cc:6c:6b:a7:e1:1e:b5:7c:63:ab:19:bc:b6:b4:3e:81:4a:
53:c7:75:9d:96:6e:a3:33:85:23:89:0f:9d:eb:6c:d9:5f:2d:
14:8d:cc:0c:1c:52:17:74:30:53:3b:59:60:62:8f:b8:c6:f9:
26:4c:f3:f3:2c:e6:ca:45:ed:06:a4:62:2e:e0:c7:cd:6c:26:
f2:2a:c7:b2:b4:31:26:42:b8:79:fc:6e:f9:c9:ea:a5:9c:0b:
ed:44:79:b7:a9:28:7d:46:87:61:0e:93:c4:ba:69:72:9a:00:
62:f1:7d:c4:d7:43:15:fa:de:43:9d:7d:d0:f4:1e:a8:8d:8b:
46:36:0d:61:38:9e:3b:81:3a:ae:01:7a:83:fd:73:c0:20:ba:
36:34:77:ca:7e:36:c4:16:8e:c5:19:cf:b9:06:ba:b1:64:3c:
96:b6:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:03:14 2025 by rpki-client