Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2D1FA8B0B43411EDBBC3B973C4F9AE02.roa
File: 2D1FA8B0B43411EDBBC3B973C4F9AE02.roa (raw, json)
Hash identifier: RUPqerN9EYeuHO2MMxENYfT5xGx5Gs5ivsHckOAVyi0=
Subject key identifier: B4:2D:F4:0C:7C:22:80:B0:BC:A8:AF:FC:85:1E:CF:D8:E7:89:AB:0A
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 03ED
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2D1FA8B0B43411EDBBC3B973C4F9AE02.roa
Signing time: Tue 02 May 2023 13:22:58 +0000
ROA not before: Tue 02 May 2023 13:22:58 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 206003
IP address blocks: 2407:d340::/36 maxlen: 42
2407:d340:7522::/48 maxlen: 48
2407:d340:8001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: May 2 13:22:58 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64510eb1-4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:6d:8d:da:8c:ee:49:7e:54:32:d2:b0:4a:
a2:68:6a:05:c1:c6:64:25:83:0a:1e:cc:00:4a:7f:
b2:16:40:1f:9a:1c:8f:76:e5:ea:80:ae:f9:82:b9:
10:a9:2e:21:4e:96:fc:bb:c4:ab:cb:35:ba:10:0f:
19:e6:db:ef:71:c3:54:dc:a2:21:0a:14:1b:f7:3f:
f8:c9:a7:6b:4f:75:72:6b:f3:3f:32:da:2d:a6:92:
83:b5:15:4b:99:56:7f:29:99:65:13:7c:a2:d1:09:
f8:e8:49:4b:3c:1c:f7:bf:4a:e4:12:d8:c7:01:54:
0b:78:31:9e:d4:2a:6b:d4:25:12:db:07:e5:d7:6b:
f5:d5:13:fd:e9:79:94:94:16:98:39:77:ce:87:8f:
8e:2c:d9:d1:9b:0f:d3:d3:e8:be:25:85:f4:48:43:
18:65:e4:93:f5:5d:4d:a9:8a:92:c4:b3:4f:77:2e:
54:93:96:dc:c1:ba:28:44:44:e4:6b:99:cb:ae:8d:
13:33:2a:0d:92:dc:2a:03:c2:f1:b6:13:8f:13:a7:
97:63:7f:c7:9c:80:45:0c:b9:90:38:0d:76:f4:72:
14:24:ad:ab:3d:6b:b7:0f:1f:da:a2:a6:f8:63:a2:
61:08:81:33:ba:46:c0:46:6f:5f:a0:20:39:5e:90:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:F4:0C:7C:22:80:B0:BC:A8:AF:FC:85:1E:CF:D8:E7:89:AB:0A
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2D1FA8B0B43411EDBBC3B973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d340::/36
2407:d340:7522::/48
2407:d340:8001::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f6:e0:64:ec:d5:d7:50:88:c1:f5:9c:63:c7:d9:bd:81:b3:
00:3e:17:6b:75:a0:d7:26:ae:9c:2a:fe:ef:45:16:b7:c5:80:
5c:dc:45:75:30:82:16:8b:3a:ad:f8:2d:68:cd:47:2a:28:19:
27:91:67:ba:c4:ed:10:80:42:61:0d:37:76:11:85:f9:19:55:
29:db:b5:62:e9:02:67:1e:99:ce:05:1b:9d:25:a7:2f:de:08:
dc:4b:3e:2d:bf:ff:3a:5b:16:73:68:89:57:f2:6f:fe:0e:3b:
af:df:03:95:af:d4:65:75:c5:d2:dd:b9:f9:ef:9b:6c:71:fd:
8e:7a:3d:b3:56:da:fe:5f:4a:a2:28:6b:72:8c:3a:4f:c1:9a:
11:f1:95:66:ca:c5:58:1f:ea:d1:0b:df:c9:e0:c3:cd:96:8a:
2d:10:a1:b2:9b:22:d9:f6:83:dd:ac:6c:bc:50:5c:41:66:dd:
ce:c7:4a:b4:2e:49:e9:0d:72:01:64:d4:21:0b:bd:54:e0:34:
f4:95:40:ff:84:1b:18:c5:48:8e:98:a4:30:16:d6:4f:a8:52:
da:8d:7a:8e:a0:88:ef:89:52:07:60:64:56:c0:4d:3a:b0:d0:
00:4e:ea:c3:f1:89:e5:4a:82:fc:e3:f0:ba:4c:73:5b:b9:e8:
a9:a0:25:96
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjMwNTAyMTMyMjU4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxMGViMS00ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwixtjdqM7kl+VDLSsEqiaGoFwcZkJYMKHswASn+yFkAfmhyPduXqgK75grkQ
qS4hTpb8u8SryzW6EA8Z5tvvccNU3KIhChQb9z/4yadrT3Vya/M/MtotppKDtRVL
mVZ/KZllE3yi0Qn46ElLPBz3v0rkEtjHAVQLeDGe1Cpr1CUS2wfl12v11RP96XmU
lBaYOXfOh4+OLNnRmw/T0+i+JYX0SEMYZeST9V1NqYqSxLNPdy5Uk5bcwbooRETk
a5nLro0TMyoNktwqA8LxthOPE6eXY3/HnIBFDLmQOA129HIUJK2rPWu3Dx/aoqb4
Y6JhCIEzukbARm9foCA5XpBevwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLQt9Ax8
IoCwvKiv/IUez9jniasKMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvMkQxRkE4QjBC
NDM0MTFFREJCQzNCOTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgACMBoDBgQkB9NAAAMHACQH00B1IgMHACQH00CAATANBgkqhkiG9w0B
AQsFAAOCAQEAjPbgZOzV11CIwfWcY8fZvYGzAD4Xa3Wg1yaunCr+70UWt8WAXNxF
dTCCFos6rfgtaM1HKigZJ5FnusTtEIBCYQ03dhGF+RlVKdu1YukCZx6ZzgUbnSWn
L94I3Es+Lb//OlsWc2iJV/Jv/g47r98Dla/UZXXF0t25+e+bbHH9jno9s1ba/l9K
oihrcow6T8GaEfGVZsrFWB/q0QvfyeDDzZaKLRChspsi2faD3axsvFBcQWbdzsdK
tC5J6Q1yAWTUIQu9VOA09JVA/4QbGMVIjpikMBbWT6hS2o16jqCI74lSB2BkVsBN
OrDQAE7qw/GJ5UqC/OPwukxzW7noqaAllg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:32 2025 by rpki-client