Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa
File: A471289AEFC911EEA00D5753C4F9AE02.roa (raw, json)
Hash identifier: n/5DPIix0RybAVp2yqh6kceUDttY/mTN7qKSstDiHeg=
Subject key identifier: 07:C0:8F:47:0D:A2:FD:E1:DB:13:3E:1D:AB:D5:0A:5F:64:D2:2C:92
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0362
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa
Signing time: Mon 01 Apr 2024 01:46:22 +0000
ROA not before: Mon 01 Apr 2024 01:46:22 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141759
IP address blocks: 204.52.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81
Validity
Not Before: Apr 1 01:46:22 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=660a11ee-736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:70:16:59:d6:6e:9a:13:b9:b4:b8:ac:88:
09:22:9f:36:99:f4:9c:58:b0:05:35:eb:99:75:25:
b9:8d:81:a6:ca:67:41:1a:57:f8:22:67:86:c8:95:
90:7c:60:64:0b:3c:f7:84:b8:e9:d2:1f:2b:8a:d9:
a0:85:08:59:9c:a8:95:f1:15:ce:96:87:41:3c:83:
b0:17:90:1e:1b:7f:38:33:d6:31:d2:85:ab:eb:c8:
28:09:79:2a:5c:fb:9b:32:e4:8b:e3:b7:9f:82:f9:
9f:ad:f3:31:40:48:d2:7e:f6:eb:1d:5e:0e:2a:21:
4f:91:1a:0e:95:1a:62:bc:ec:c5:fb:db:ea:85:ad:
e6:4c:db:40:c4:0d:e1:63:45:e7:92:f3:80:07:d4:
16:0d:1d:65:19:99:77:e1:83:22:e6:e2:1a:81:7d:
c3:58:d9:16:cd:81:4b:9b:91:bd:9f:53:9c:5e:70:
06:39:b0:f7:41:0a:85:72:02:68:4e:95:47:82:a1:
0a:8d:06:ca:9f:07:2a:76:39:0e:2c:03:d6:96:36:
60:1e:9d:d2:f8:51:d4:b9:13:e2:35:61:e1:11:d5:
f2:e4:99:7d:1d:3d:b4:fc:93:48:29:4f:e9:5d:2a:
a9:b2:90:3c:40:fa:8b:23:c5:94:41:47:6b:1e:d6:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:8F:47:0D:A2:FD:E1:DB:13:3E:1D:AB:D5:0A:5F:64:D2:2C:92
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
46:80:01:42:a3:66:1f:d2:05:61:92:90:bf:7f:5e:88:7d:84:
1d:13:62:0c:f0:fa:7a:64:38:de:a6:77:99:7d:5d:18:fe:78:
4c:a1:fb:e9:ab:5d:b8:30:13:c3:57:29:35:67:e3:90:d0:73:
94:d7:44:b5:7f:71:c0:d1:9e:99:d2:0c:43:7a:b1:ef:c0:38:
dc:e1:da:c7:b7:d4:bd:b9:de:e6:33:2c:29:af:8f:ba:4b:92:
f8:48:59:cb:c4:49:77:c1:62:ba:64:3b:f0:ea:85:17:d8:04:
ca:c8:d1:05:85:92:3b:39:53:e9:c9:4b:b0:ae:b5:e0:4f:96:
a3:a7:4d:a6:37:09:35:05:f6:aa:1e:ff:a4:46:55:02:9d:aa:
07:93:14:c5:ec:84:0a:db:df:af:09:e2:c4:09:e5:df:3c:17:
bb:83:33:d1:df:f0:61:e4:70:ba:ac:57:0a:ce:23:a0:65:b7:
6e:1f:84:29:4c:03:40:d2:1f:50:04:a2:c0:af:15:d5:d2:f1:
1e:dc:55:1b:80:52:6f:ca:fb:7c:d1:eb:cf:91:56:bd:ad:bc:
5b:54:fd:cf:bc:a5:10:ec:b0:82:99:c4:c3:c0:ff:7d:2e:7d:
dd:31:32:5f:f8:b0:47:99:65:9a:99:f8:b7:b0:82:d0:fc:c8:
19:70:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:22 2025 by rpki-client