Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1769E754419811EAA268D964C4F9AE02.roa
File: 1769E754419811EAA268D964C4F9AE02.roa (raw, json)
Hash identifier: tzwU92sov9+HqfmilgzWyMjLqdd3OayUFRpjmjf/itA=
Subject key identifier: 7E:4B:39:C7:70:08:CC:A1:A5:C0:34:BE:99:A3:20:D7:B2:DB:1A:1F
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0680
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1769E754419811EAA268D964C4F9AE02.roa
Signing time: Mon 01 Nov 2021 09:46:40 +0000
ROA not before: Mon 01 Nov 2021 09:46:40 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 132827
IP address blocks: 45.125.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359
Validity
Not Before: Nov 1 09:46:40 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=617fb77f-a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:b9:0b:30:96:7e:4e:c8:5d:90:2f:a8:22:
59:43:14:a9:10:66:a3:ed:f0:fe:9a:6f:79:d1:99:
ab:b7:8d:7b:e7:b0:05:ac:fa:49:d4:3e:1e:fe:17:
22:18:a2:96:29:17:98:fa:44:ee:70:c1:71:d8:90:
d6:be:f6:74:a3:f5:3d:1e:f0:71:d7:32:33:b3:84:
cf:06:d8:c4:5f:6a:6b:1a:20:c8:16:80:c5:17:3b:
95:d2:97:28:ec:95:0f:1b:30:ba:75:56:15:35:8d:
e8:2f:17:11:d6:a2:9c:03:ca:f3:d1:07:a6:61:8c:
97:4d:64:99:f9:42:4b:7e:bf:35:91:1a:e8:7f:c1:
17:00:fb:da:6d:70:e6:cc:c2:dd:78:f7:e2:4d:33:
af:15:14:7e:0f:47:15:3f:12:59:0e:39:40:86:66:
dc:c8:31:13:2b:a5:a3:c3:d3:a4:6b:7e:c5:fd:0c:
33:f1:d1:dc:bf:b2:a3:ac:c3:33:90:00:87:f6:24:
d0:a8:86:50:38:7e:63:e8:21:06:e7:80:81:65:de:
bd:71:a4:b4:91:ad:50:d0:97:c6:0c:81:ce:4d:b9:
ea:62:9d:c8:6e:95:3d:93:ad:90:81:23:2b:6c:fa:
5a:ae:9a:92:ef:7f:20:e1:14:d5:19:63:01:44:9c:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:39:C7:70:08:CC:A1:A5:C0:34:BE:99:A3:20:D7:B2:DB:1A:1F
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1769E754419811EAA268D964C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:35:78:b2:ec:c1:49:1f:2d:78:2f:ba:75:fb:57:3e:64:d9:
7c:a8:88:7a:d4:2a:75:e4:35:9b:ea:fd:f6:6f:d6:a2:fe:e0:
b1:04:1a:0c:99:37:5d:c3:b7:ec:10:dd:c6:8c:95:4f:12:4a:
18:38:0f:48:cc:c3:ce:98:4a:d6:ca:6c:bd:c5:46:4a:cc:10:
be:86:fc:60:85:bb:41:29:b0:7c:33:33:66:4e:c1:da:e2:05:
33:b9:5c:e1:45:1e:a0:1a:e1:5f:05:03:db:52:c3:20:25:3b:
49:40:20:0e:0f:de:73:9a:cc:15:3d:9c:a9:e7:00:3f:24:b7:
ec:12:97:f9:83:11:3f:db:28:00:2b:56:29:62:0e:a5:71:07:
d1:72:16:57:82:3e:72:b8:dd:e7:26:95:3e:9f:ea:dc:a4:4f:
1c:de:2d:d3:dd:a0:1f:ba:39:97:38:5a:84:a9:ca:a3:bd:c5:
9c:e1:0b:c9:30:ef:8d:c6:f1:1d:cd:a3:50:14:bf:7d:e7:7b:
8c:c1:93:88:5d:85:78:3e:23:fa:35:f8:21:35:3c:ee:b7:7f:
12:ea:43:2d:aa:d7:00:18:d1:ad:05:29:af:5d:70:a0:15:87:
f6:e3:4f:e2:90:fb:70:fc:3f:46:f4:dd:8f:6c:80:26:ae:0e:
91:0c:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:38 2025 by rpki-client