Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A002E9405B3E11EDA645054FC4F9AE02.roa
File: A002E9405B3E11EDA645054FC4F9AE02.roa (raw, json)
Hash identifier: bSiz0Pa0ho7SQeuIf5UIO1kMJvhGbUba5oTx4le4rDI=
Subject key identifier: 22:7E:7F:CF:CD:FA:9F:67:6F:07:FF:60:33:86:39:BE:22:39:E5:7C
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 01FD
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A002E9405B3E11EDA645054FC4F9AE02.roa
Signing time: Thu 03 Nov 2022 06:13:25 +0000
ROA not before: Thu 03 Nov 2022 06:13:25 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 150404
IP address blocks: 2400:58a0:1800::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF
Validity
Not Before: Nov 3 06:13:25 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63635c05-8a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:4f:98:9c:39:0e:bf:48:9a:37:7b:bb:8f:
49:e0:d8:38:43:be:aa:b4:67:1f:cc:12:33:56:ad:
fb:d1:fe:14:51:62:ed:6c:5c:21:bd:9c:09:59:3f:
a2:0b:8a:94:5f:7e:10:7f:fb:68:c5:7d:df:d1:28:
ad:0f:0e:18:15:d8:7f:59:fb:77:b4:3a:61:b2:46:
cf:82:51:7d:fd:c0:14:10:e7:77:74:f6:dc:46:1b:
d2:17:89:7c:ac:bf:16:a7:07:0f:08:d0:9f:09:d9:
88:87:65:1f:15:f0:0b:b8:ae:0e:99:58:b1:83:aa:
51:cb:cb:2e:8a:28:95:9f:8b:51:15:2b:63:ad:8e:
16:e0:ab:ca:8c:84:cf:13:1e:c9:8d:9f:f9:76:69:
a5:4b:17:4a:d2:01:1c:2c:ed:ec:28:c6:d8:f2:eb:
08:40:88:a4:45:e3:a9:88:68:fc:1f:d2:6e:d4:b3:
f4:39:98:2b:44:07:c2:4f:fd:16:6b:97:44:5c:46:
4c:8f:a6:0a:13:e2:16:c8:fb:6e:31:99:f2:ab:f5:
fe:2d:90:8a:f1:63:f7:69:fd:84:3d:56:85:65:d0:
50:20:81:16:ac:b5:07:4a:ff:c8:f5:10:a7:98:fb:
3b:e8:4c:cb:6a:dd:f4:c4:6f:c1:ba:52:2f:0d:06:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:7F:CF:CD:FA:9F:67:6F:07:FF:60:33:86:39:BE:22:39:E5:7C
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A002E9405B3E11EDA645054FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:58a0:1800::/44
Signature Algorithm: sha256WithRSAEncryption
18:08:12:4d:f1:57:1d:6e:12:46:ae:eb:2a:a8:71:e7:17:17:
21:da:d5:64:2c:c7:2e:72:9b:3a:41:14:17:fa:5c:dc:c8:50:
20:30:ed:4a:64:2b:52:32:0c:fc:10:a4:6d:d4:ed:ba:2b:cf:
ce:33:2b:4e:14:8c:1b:c2:93:9f:1d:40:4e:99:12:bc:d8:a2:
90:d1:df:06:77:a2:a4:48:d9:74:f1:a2:f4:a3:61:0a:72:a6:
74:46:5d:e1:63:1a:9e:23:09:84:4c:a2:29:0b:52:56:62:88:
ae:51:9a:f5:67:28:2c:80:f8:fd:61:ec:cd:06:59:c9:a5:57:
24:8b:23:d6:4f:24:fc:b7:53:9b:32:1a:29:9f:f2:d0:47:ca:
d9:a4:10:b9:ec:7d:d8:17:5e:fd:a1:ad:c1:3b:83:2e:22:02:
f1:c5:e9:89:06:7e:d7:fd:74:c1:6d:3c:a5:13:ee:e1:99:55:
ed:00:24:20:e5:59:d8:5a:f8:17:2c:32:fc:bc:dc:c9:80:9b:
9b:11:47:1a:04:66:60:20:1a:cc:50:c0:8e:a4:5f:34:b8:74:
a5:c5:c8:8a:2a:d5:0e:3f:79:09:8f:eb:12:25:09:c2:ed:24:
7b:2a:ca:71:98:59:a9:52:16:00:a5:52:2e:c6:6f:5a:fc:7c:
72:4d:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:10 2025 by rpki-client