Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa
File: 27417E7AC57F11EEB0E1FE57C4F9AE02.roa (raw, json)
Hash identifier: hoxcY/toLvvg/Njx3O6+f8ZVfz5t1CD1YYlKXtkW5uI=
Subject key identifier: 86:F1:3E:C1:A9:EA:9E:1E:48:A4:9F:2A:6B:37:94:22:C2:9A:CB:47
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 07DE
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa
Signing time: Thu 04 Apr 2024 18:26:13 +0000
ROA not before: Thu 04 Apr 2024 18:26:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133866
IP address blocks: 45.118.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Validity
Not Before: Apr 4 18:26:13 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660ef0c5-c057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:df:b3:cb:a8:d6:bc:7f:02:ac:de:70:fc:
ed:cc:77:b5:dd:97:44:5b:0f:7f:96:bf:8a:e3:5e:
4d:95:a9:b4:59:e9:d1:bb:5d:09:ea:2c:68:c4:26:
fb:7b:d9:5c:6d:e5:bd:69:13:d0:8c:05:0b:1c:98:
c6:80:11:50:d8:e0:57:a9:ea:4a:67:45:fd:b3:bb:
de:63:ce:14:42:fa:c5:25:00:f2:74:18:50:f7:b3:
db:58:d9:43:1d:eb:f6:19:1c:1a:a4:89:1a:97:be:
74:a5:ba:2d:9a:00:6a:f5:95:75:d4:e2:f7:f4:69:
9c:4b:ca:d0:26:74:38:01:f3:d2:3b:09:e0:31:ff:
3d:47:71:da:72:27:4a:c4:c4:7b:a6:84:25:f2:13:
a7:3d:d1:20:0a:af:b3:6d:85:7f:84:d1:c6:57:a1:
1b:f7:1d:a4:c9:28:db:17:99:a5:f7:8a:d8:42:12:
f0:6d:31:5d:5d:c0:e0:0f:91:26:42:26:46:cd:2f:
fe:ef:f6:36:c5:ae:55:df:07:96:c5:15:75:5c:99:
a2:81:61:c9:fa:75:05:12:08:ba:c0:3f:bc:7a:82:
6a:87:18:33:20:2e:36:bc:ce:41:7d:89:06:da:f0:
09:dc:20:e8:12:2e:0d:d4:27:f0:04:08:35:b9:8f:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:3E:C1:A9:EA:9E:1E:48:A4:9F:2A:6B:37:94:22:C2:9A:CB:47
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:75:af:7a:a4:d3:c2:c5:08:86:a5:34:3a:24:67:76:6f:df:
72:e3:92:39:9b:00:58:cf:4e:a6:75:f8:fe:bf:8f:9b:f8:c1:
3c:27:d1:51:9d:a6:4d:7b:1a:61:1b:f9:2a:86:d3:f1:16:12:
25:0b:e2:d1:41:c6:58:69:72:35:92:5c:08:f3:ef:55:80:8e:
8f:7f:82:df:de:66:ea:07:0a:3c:6a:5e:36:b3:a2:f5:44:f9:
70:62:b2:e4:80:32:8f:f3:40:5a:20:0a:4a:38:fd:ef:d1:1e:
bb:6a:e8:ef:67:4e:6c:dd:95:4e:41:ea:28:87:19:06:79:f6:
f0:3c:2d:f7:67:d7:52:42:75:47:37:6a:56:8a:8c:2f:50:1c:
d1:3a:9a:b2:43:57:4c:01:6e:e7:bb:ad:f2:c7:2c:2d:c3:8d:
c0:34:0f:b7:bb:a8:19:24:8c:0c:aa:24:4a:9a:eb:60:42:97:
26:a9:22:bf:64:09:48:d2:12:00:ab:9c:5a:e1:97:44:80:55:
b7:2e:a3:d7:c3:64:97:f3:20:69:ec:20:03:53:41:97:bb:50:
e7:2b:2c:44:9d:dc:22:4f:d6:a3:2c:77:2a:44:f0:e0:e7:ba:
6a:8d:e9:58:5d:99:bf:af:f9:41:25:75:f1:70:11:f2:cd:0e:
94:c1:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:11:42 2025 by rpki-client