Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/D4F6CECA7B3F11EDA3BE281FC4F9AE02.roa
File: D4F6CECA7B3F11EDA3BE281FC4F9AE02.roa (raw, json)
Hash identifier: OaZk3D+gEU1PseQI4dz52EJWG1RglZgOC7X/0hkS2Oc=
Subject key identifier: 8F:68:2A:AE:A1:2E:F0:F3:6D:E9:FA:CC:7A:EF:A0:4A:FD:3A:3C:3E
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 0265
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/D4F6CECA7B3F11EDA3BE281FC4F9AE02.roa
Signing time: Wed 01 Feb 2023 04:14:07 +0000
ROA not before: Wed 01 Feb 2023 04:14:07 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2001:df0:45c4::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Feb 1 04:14:07 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63d9e70f-a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:20:22:66:72:63:27:3f:e9:dc:aa:26:0c:
90:ac:c2:6e:e8:59:03:2d:37:36:36:b3:2e:2c:42:
37:68:94:d5:65:07:8f:d5:73:d5:e0:b7:94:49:d5:
9d:ed:99:86:48:3f:2e:32:ab:8c:ab:8a:fd:89:ce:
bf:ae:b9:5d:26:98:46:fc:60:56:4c:28:bf:2b:f5:
8d:b4:83:1f:ee:f4:27:79:6e:d8:b6:f7:40:7a:13:
c5:55:9c:bf:ea:a8:f4:92:f5:e4:c5:c2:ae:f9:f1:
43:a1:7f:90:1d:eb:1a:36:38:d3:f0:43:2d:4e:46:
ad:e2:ee:67:f8:69:86:53:d0:27:9e:e5:b5:ce:b8:
88:b8:43:f3:98:ed:1d:35:84:7b:74:ee:4f:db:37:
90:f3:2a:6f:35:bb:3f:03:20:c7:06:83:02:02:39:
ec:e8:aa:4e:02:01:a4:c6:f5:d9:01:f9:5c:ad:0b:
1e:9b:f8:88:6a:6a:b6:b9:0c:a8:a2:7a:19:78:ca:
06:09:94:d5:67:27:12:8d:aa:85:14:b6:11:0e:79:
26:d0:9d:d6:23:10:68:6c:a6:14:54:c9:a1:3e:63:
fa:74:1e:63:51:28:77:4d:68:51:92:25:5c:e7:4f:
8f:5b:cb:ed:52:c7:12:9f:0b:a7:f6:22:dc:46:c6:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:2A:AE:A1:2E:F0:F3:6D:E9:FA:CC:7A:EF:A0:4A:FD:3A:3C:3E
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/D4F6CECA7B3F11EDA3BE281FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:45c4::/46
Signature Algorithm: sha256WithRSAEncryption
9b:9a:e5:59:67:83:76:86:18:f2:46:96:84:59:c7:a8:4b:20:
0b:ce:ab:d2:89:1a:a1:8c:cd:50:27:b8:e7:07:63:28:93:65:
18:f6:c0:57:db:72:eb:d6:73:2b:01:84:1c:f5:83:19:b4:22:
49:94:55:76:bf:74:ba:4a:59:de:d3:f8:32:f3:6a:e0:05:51:
0a:42:f6:82:17:fc:df:ca:fc:45:78:98:7f:d7:87:51:3d:98:
de:02:d9:b6:8c:2c:f7:9a:f3:39:13:e3:41:42:e5:06:14:5a:
bc:2a:24:72:0b:4a:51:94:4c:9a:72:bd:73:d8:8f:d3:80:93:
3a:4c:96:fd:8c:3e:72:08:2a:39:e5:4d:0e:5a:37:45:9f:c8:
10:0f:75:f8:2b:38:97:8d:32:65:2c:d2:f6:99:e3:bd:9a:96:
a9:c6:34:a0:08:3b:75:83:a8:12:27:5c:de:21:73:25:00:13:
1e:a4:ad:03:0d:d6:fc:80:c7:6f:3b:71:85:e2:ca:c1:37:e6:
99:eb:1f:81:90:15:3d:b5:2c:23:33:7a:3f:67:bc:23:89:10:
cc:ef:59:76:56:f0:07:7b:14:a1:c0:62:56:e1:df:38:30:9a:
3c:ac:c1:b7:3f:f0:24:20:75:df:9f:cf:a2:c5:de:8e:52:8b:
f7:bc:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org