Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/1779873C5AAD11EDBBEF9E3AC4F9AE02.roa
File: 1779873C5AAD11EDBBEF9E3AC4F9AE02.roa (raw, json)
Hash identifier: 70ZCeR9BEV9k7JCJXACPjsT2h3obVKhiD4azeXEyfsk=
Subject key identifier: 46:C5:96:60:A7:82:BD:EF:89:CC:87:B9:2D:4F:78:AE:13:C9:E4:2B
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 037F
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/1779873C5AAD11EDBBEF9E3AC4F9AE02.roa
Signing time: Wed 28 Dec 2022 12:23:20 +0000
ROA not before: Wed 28 Dec 2022 12:23:20 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 38846
IP address blocks: 2407:d340:7110::/44 maxlen: 48
2407:d340:7310::/44 maxlen: 48
2407:d340:7410::/44 maxlen: 48
2407:d340:7510::/44 maxlen: 48
2407:d340:7610::/44 maxlen: 48
2407:d340:7710::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Dec 28 12:23:20 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63ac3538-63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f8:86:64:2b:d2:7f:ad:c7:aa:3c:a4:22:95:
b4:6a:b7:99:57:11:e1:7e:b3:da:3c:e4:5c:c7:f5:
bf:49:56:00:37:10:a0:67:83:0a:65:5f:d9:bf:cc:
f5:88:56:95:c3:9c:57:a4:cd:fd:a0:bc:f7:00:f0:
25:73:41:5f:7c:72:b5:05:14:c3:57:4c:56:1f:fc:
f0:44:c2:66:c7:6d:a2:79:88:3a:2d:dc:b4:2e:f5:
91:17:f0:76:cb:68:be:44:15:c3:48:20:e7:22:f8:
5c:ea:61:00:e4:20:61:07:8b:a9:f3:61:fd:e1:4a:
c1:8c:78:d1:fc:1e:52:23:fc:f6:4d:cd:61:3d:5b:
1d:37:ab:ec:3d:23:6b:e4:f5:7d:fc:b4:86:54:65:
e6:dc:03:dc:ba:22:e7:8d:78:78:ce:de:4d:d3:36:
5a:3a:f6:ef:73:4e:3c:c5:28:3b:da:2c:fc:4f:df:
d3:d0:3f:4b:d2:7e:0e:00:7a:b3:87:d1:b2:fe:67:
34:b9:0d:3c:35:6d:0c:6e:84:4e:16:25:27:08:ea:
bc:40:a2:68:e0:cc:9f:7a:c7:81:41:cb:ab:3b:3d:
9b:8b:84:b0:a7:8d:cb:28:d0:3f:db:fc:ae:26:23:
6e:50:f2:60:82:55:02:d5:70:8d:07:23:2f:3b:3f:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:96:60:A7:82:BD:EF:89:CC:87:B9:2D:4F:78:AE:13:C9:E4:2B
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/1779873C5AAD11EDBBEF9E3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d340:7110::/44
2407:d340:7310::/44
2407:d340:7410::/44
2407:d340:7510::/44
2407:d340:7610::/44
2407:d340:7710::/44
Signature Algorithm: sha256WithRSAEncryption
20:1d:f3:4c:50:42:ad:32:c6:ad:15:ba:7b:40:0c:e5:eb:33:
b7:89:a3:7b:95:43:22:48:0a:0b:55:ba:56:5b:fa:c1:fc:be:
34:50:90:41:ab:bf:c2:95:45:25:50:1c:15:ff:d0:69:fa:62:
f2:7f:55:59:1c:e2:d6:0c:72:fe:ad:ff:52:57:72:ea:93:cc:
ce:83:31:28:50:e2:89:1f:0b:2b:03:ea:39:a1:0c:1b:db:c2:
5e:20:54:b6:31:eb:bf:63:06:4c:39:7d:31:83:a8:b7:56:62:
03:5b:9c:e3:12:6d:06:50:9a:de:41:61:12:ff:ac:9b:59:7d:
01:40:e7:15:ce:71:59:75:e3:e0:aa:b3:d6:ae:54:fb:80:d0:
80:e2:a9:6c:97:88:4c:64:50:d3:e9:ea:02:c7:b3:7d:0c:ec:
2f:c3:48:71:47:e5:e8:12:07:3e:54:2b:a0:d1:a7:f9:40:8d:
b0:4e:c0:9a:21:07:52:d7:19:c3:c1:82:f6:ea:4e:e7:a5:36:
51:26:d5:e4:a7:a1:2d:59:99:e9:a6:3d:5a:e4:a8:d0:e4:d5:
6e:ca:3b:35:69:94:33:e1:83:16:67:a0:c9:b0:4d:88:81:6e:
b6:18:90:99:24:3a:af:1f:61:ce:a1:af:ed:28:2b:4d:05:e0:
5a:25:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:40 2025 by rpki-client