Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/ED0C0766853311EDBEA1C650C4F9AE02.roa
File: ED0C0766853311EDBEA1C650C4F9AE02.roa (raw, json)
Hash identifier: EAroypioXX/xw8RA6fQ3zxkNB2imic49tuY7/PMdQPk=
Subject key identifier: 30:7D:B0:25:07:B7:4B:DF:DB:01:5C:15:A4:F5:13:C2:DB:57:7F:20
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 036E
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/ED0C0766853311EDBEA1C650C4F9AE02.roa
Signing time: Mon 26 Dec 2022 15:42:39 +0000
ROA not before: Mon 26 Dec 2022 15:42:39 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 212168
IP address blocks: 2407:d340:f000::/40 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Dec 26 15:42:39 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63a9c0ee-7886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:bc:36:9c:4e:3d:4d:a3:43:cd:8a:c6:c2:
c4:44:e2:9a:c8:b5:7b:e3:e0:24:2e:19:bb:27:b8:
3a:f0:c8:ee:71:ea:27:93:84:4e:a8:74:27:2c:6c:
62:5a:16:cf:87:e7:db:23:87:46:d3:32:77:47:ad:
de:89:db:f5:94:50:41:13:f5:2f:db:59:7f:cc:0a:
ba:5f:85:fe:28:5b:06:e4:31:05:74:2e:23:2b:54:
12:ac:d2:53:7d:0f:e5:38:06:d1:31:d5:fa:a3:27:
88:7c:0f:eb:d0:20:a8:3e:07:f7:50:32:9f:6a:b6:
52:e1:b6:e3:49:10:02:4f:0e:84:9d:ec:9c:1f:dd:
5c:54:bc:f2:c7:74:30:0d:5c:e2:56:39:46:4e:00:
88:2c:14:e6:a2:4f:24:e0:fc:33:55:1e:fa:ca:e7:
df:9b:32:01:47:bb:c6:05:c1:d4:57:ac:df:f3:2a:
c0:7e:a1:9c:54:8d:e9:cb:8d:9a:26:de:5b:cc:d8:
ca:cd:5d:57:47:ca:e9:5d:52:f3:9a:cf:ce:9b:80:
a2:f5:29:51:16:f3:42:67:6e:a5:3b:34:b5:03:1c:
42:90:2b:dd:8e:25:6e:5d:ae:26:0e:23:f5:91:75:
6b:b1:39:4a:35:06:ab:fc:9f:0e:8f:35:16:65:a1:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:B0:25:07:B7:4B:DF:DB:01:5C:15:A4:F5:13:C2:DB:57:7F:20
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/ED0C0766853311EDBEA1C650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d340:f000::/40
Signature Algorithm: sha256WithRSAEncryption
72:4c:ff:0b:c9:63:7b:fc:76:82:7f:2a:84:95:a0:4b:45:04:
e3:e7:4e:b0:0f:02:87:e1:8b:7c:6a:b8:f2:c6:51:36:48:fb:
54:44:9a:a7:5f:cb:57:91:94:19:8d:18:0a:b1:2c:35:8f:5b:
fd:e6:40:09:c9:b6:f9:b8:df:9c:6a:ce:10:4f:bd:08:89:c8:
f5:9b:3e:03:78:af:6b:7a:81:28:e9:8a:22:5c:c4:b9:6a:41:
e9:48:06:32:50:5b:f9:71:7e:98:d7:19:e6:5a:a3:23:bb:00:
6d:12:e1:2a:dd:32:8f:1f:0c:3b:6c:ef:5f:6e:89:b1:da:4f:
a3:0d:96:97:d1:17:46:a7:be:89:51:0f:07:50:b1:46:67:d7:
c3:bb:05:44:4b:b2:b0:29:4c:53:ba:32:11:ad:a7:13:73:22:
74:a3:ce:4c:87:30:0b:8b:c3:26:0f:f3:21:c2:a6:c1:99:a9:
e9:7e:e5:d4:43:e7:0f:1d:df:39:de:82:07:c7:62:0d:7d:95:
ab:6a:4c:59:2d:dc:d2:68:23:a3:4c:a4:4b:e5:d9:66:1a:ed:
17:bf:38:80:6a:a5:d0:d6:70:76:cc:d7:31:94:29:06:8f:ab:
f3:1d:ff:38:cc:c5:0e:bc:ee:85:07:af:27:86:25:05:63:db:
70:95:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:40 2025 by rpki-client