Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
File: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (raw, json)
Hash identifier: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A=
Subject key identifier: 76:42:D0:4B:DF:B9:5E:C4:77:BF:40:E9:AF:45:B1:70:45:29:CD:B2
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 0536
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
Signing time: Sat 31 Aug 2024 01:04:00 +0000
ROA not before: Sat 31 Aug 2024 01:04:00 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 29473
IP address blocks: 2001:df6:cd80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8
Validity
Not Before: Aug 31 01:04:00 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d26c00-66a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:f3:22:78:bc:8f:23:1c:16:17:4a:2f:8f:
35:0d:f7:ed:c8:b0:76:fc:b7:49:2e:78:07:c7:e6:
4f:a2:e2:8c:68:cc:b7:17:54:98:d4:0f:2c:5e:61:
bb:b7:d2:0f:08:7a:f2:20:bf:04:ab:bd:45:34:2e:
a0:00:9f:8b:8b:d7:c8:9e:76:98:85:66:2c:d8:10:
8a:26:38:25:e7:f2:76:0a:7a:89:2e:ff:97:03:7a:
0f:8a:8e:b0:ef:8d:42:fe:51:17:d7:7b:49:d4:95:
ce:22:61:41:8a:22:cf:89:b3:c7:11:ca:55:73:d2:
68:de:70:b2:09:54:ce:5b:63:9c:d5:fe:f7:2d:d8:
71:c1:69:c7:64:33:21:1f:f0:01:71:d7:f2:e8:0c:
be:84:b0:fd:29:a3:87:c7:25:82:5e:37:fa:38:d9:
fc:cc:fc:3b:fb:1a:4b:89:d0:8b:d5:44:99:5e:b1:
a7:9c:c7:4f:79:10:2d:9d:e8:b8:47:37:d7:3e:2f:
f6:f7:0b:46:ae:b2:67:ff:be:61:b2:11:60:c5:53:
78:50:e5:e4:ef:49:15:d6:76:be:dc:73:d1:ee:81:
d6:ec:b7:04:1c:78:9e:63:ed:13:3f:57:73:0e:5c:
3e:6f:37:f1:5a:8b:41:60:81:5d:fa:ab:09:49:d0:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:D0:4B:DF:B9:5E:C4:77:BF:40:E9:AF:45:B1:70:45:29:CD:B2
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:cd80::/48
Signature Algorithm: sha256WithRSAEncryption
39:d2:8c:76:bb:ac:f0:c4:7b:e1:3d:2d:7f:42:43:70:82:db:
7b:f9:5f:3a:6d:40:29:d8:66:d7:d2:14:2e:2f:e6:4f:3d:22:
67:f8:0a:79:d5:6d:e7:60:a8:1a:77:48:1b:ce:3c:56:48:c3:
28:b3:b2:a4:a9:bb:e0:49:52:2d:2f:c6:3c:32:30:f4:df:52:
2c:c2:e1:43:ed:2d:be:65:2a:a9:c8:ba:81:70:76:4f:03:5a:
93:02:56:5e:83:df:69:38:18:fb:05:28:63:1c:c0:b8:77:96:
09:a8:58:07:84:32:4c:f5:b7:e3:0c:76:f9:b7:88:40:7a:82:
3b:32:57:c8:9a:de:cd:e6:72:c6:9a:51:7d:20:6a:5a:d8:ec:
e8:14:21:39:da:98:e2:b4:bf:55:be:ec:74:11:37:04:e3:8a:
63:37:69:6a:37:97:8e:f5:2e:aa:7d:7d:3c:e6:f0:e0:fe:b2:
77:b9:ff:f2:b2:31:b7:41:38:53:a8:c6:4f:19:2a:32:23:fa:
d8:19:cf:34:d0:5f:17:b9:40:94:82:18:db:7c:d8:f6:3a:c3:
47:c6:57:7f:9f:f3:24:7c:42:d6:73:e7:1d:a8:01:0c:58:d8:
87:6b:8a:25:f0:1b:47:26:2f:32:02:3e:c3:29:ca:ef:fc:6d:
6e:0a:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:23 2025 by rpki-client