Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6D53C810DDD611ECA03EBA36C4F9AE02.roa
File: 6D53C810DDD611ECA03EBA36C4F9AE02.roa (raw, json)
Hash identifier: dvEcujSYjZWIDqG9o0L1GYKaq6w32y6MzrYgssoc2Uo=
Subject key identifier: FB:54:FE:0A:EC:06:8E:3F:67:73:74:E2:30:4D:FB:64:7C:87:79:42
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: E0
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6D53C810DDD611ECA03EBA36C4F9AE02.roa
Signing time: Fri 27 May 2022 16:02:37 +0000
ROA not before: Fri 27 May 2022 16:02:37 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 4750
IP address blocks: 2404:b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: May 27 16:02:37 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6290f61d-89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:55:05:fa:99:38:dc:38:03:1f:06:42:7c:
38:4e:6c:c2:7f:df:94:7c:a4:20:65:81:7b:45:5d:
87:f7:c8:2e:21:ec:9d:28:e9:0b:9a:52:9b:65:7c:
6d:98:bc:4f:c6:dd:6f:d0:20:47:c8:48:a3:ff:1a:
df:0b:91:d8:d8:c3:57:2e:b6:44:3e:26:4d:e6:7d:
ca:e0:63:f3:1f:c9:64:76:e4:f3:23:d1:cf:98:a4:
4e:7e:bd:87:4e:2a:13:f5:17:29:80:a3:70:75:1b:
7e:a0:e3:9a:6a:da:b0:6f:ea:36:89:55:a9:cd:89:
a4:45:0b:25:b0:0d:2a:0b:50:82:60:54:0c:10:34:
3d:f9:ed:1c:09:b0:ce:65:73:2e:d0:cd:71:8f:d5:
49:e1:cf:59:b3:34:da:54:69:66:50:02:df:1b:b8:
c1:72:47:71:ae:c3:ae:eb:c3:a6:df:17:6c:2d:88:
93:de:20:d8:e8:cd:06:b0:ea:4c:1e:49:bb:24:13:
57:7e:7c:2a:c5:37:7c:c8:f6:69:82:57:8f:55:8e:
49:ef:03:5b:79:a7:10:62:a4:e3:4a:f4:9f:b6:d1:
02:55:47:85:15:5e:79:7e:a9:ce:aa:41:9f:b2:58:
7a:34:7c:d5:6d:1d:7e:d9:19:d8:47:1c:29:eb:33:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:FE:0A:EC:06:8E:3F:67:73:74:E2:30:4D:FB:64:7C:87:79:42
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6D53C810DDD611ECA03EBA36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:b0::/32
Signature Algorithm: sha256WithRSAEncryption
95:ff:8a:71:3d:39:24:89:29:69:d5:cb:b9:74:49:73:28:a9:
f8:90:d1:87:75:d0:a0:e6:6b:ed:68:c5:90:1a:6e:a9:27:05:
be:43:15:66:68:66:6e:f5:a1:5e:6a:52:92:53:93:fc:89:1d:
1a:85:7c:d7:5d:77:dd:29:f1:30:f7:89:da:fd:e9:58:d7:c2:
20:c4:e4:6b:b1:02:03:cd:83:42:ff:87:5a:e4:0a:3d:1a:d0:
bf:94:58:94:5d:63:b0:9d:dd:81:8c:89:29:69:61:13:fb:76:
1a:d8:d8:1d:4f:8a:3a:ca:46:6d:d9:9c:4f:7b:57:50:94:17:
a7:73:5c:c2:6d:6d:52:5f:a1:08:f7:65:0e:3b:a8:01:d8:43:
72:3b:24:92:6b:6e:5f:9a:9b:f2:f1:32:ed:9c:cf:9c:e7:69:
19:de:99:d3:dc:20:54:bc:e7:f8:68:b8:d3:f5:e4:cb:01:eb:
7c:59:83:3f:ba:c2:33:c0:61:b5:d1:99:fa:3e:e7:8f:80:a5:
cd:ed:c6:21:97:8a:12:f8:3d:35:bd:33:61:3d:9f:ea:18:6a:
83:6b:2e:3d:02:3d:66:ab:10:2f:1b:b6:a4:f9:a5:de:b1:25:
77:3a:67:13:cf:4a:b6:0e:ae:de:60:4b:63:35:ca:64:de:aa:
64:db:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:42 2025 by rpki-client