Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
File: 93E68E1CDB0C11ECB433A842C4F9AE02.roa (raw, json)
Hash identifier: Gjll4P8hnwXn6rOhXZQX9z4VK44OiD9OpwnvSowW6jE=
Subject key identifier: 9B:C2:38:8B:E8:D2:D3:3F:47:16:E0:6A:50:97:59:32:3C:08:FC:73
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 02
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
Signing time: Tue 24 May 2022 02:52:41 +0000
ROA not before: Tue 24 May 2022 02:52:41 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 16509
IP address blocks: 2407:30c0:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304
Validity
Not Before: May 24 02:52:41 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=628c4879-52e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:a6:01:3d:fa:3b:a7:af:be:2b:b8:d9:44:
78:4d:34:d1:25:20:9c:e9:17:89:f1:7e:e7:00:3e:
e1:b0:e4:da:3d:be:2e:f0:c4:2a:cb:97:b3:68:6b:
ac:e2:f1:75:82:cb:9d:b3:7f:0b:c8:84:cb:8e:20:
7f:3e:b6:12:9a:85:27:f6:ef:92:5a:2f:85:52:98:
ff:fb:b3:dc:a0:bc:b6:e0:5a:2b:ec:54:74:40:81:
29:ea:aa:35:de:f8:0a:35:c8:1b:a3:72:82:04:3e:
b2:24:ba:68:92:69:ee:81:d4:40:42:59:c2:09:b5:
a3:c2:af:63:b3:41:cb:82:ed:01:af:e0:3e:a9:bb:
26:4a:83:95:c3:f8:52:05:46:32:76:c7:bb:cf:7c:
a8:a5:ef:c8:93:21:b9:0b:83:f4:6a:15:a6:21:ae:
3f:cb:c2:cf:12:8e:4a:fe:04:f0:2a:20:f4:a5:fa:
63:a3:e2:92:97:3a:fa:0b:ab:5d:a9:07:17:b1:95:
2a:b1:f8:55:fc:14:20:1b:0a:55:56:53:f8:25:a8:
8d:54:7f:45:62:9b:bc:1c:73:8b:de:ef:eb:c4:a1:
24:a2:f4:cc:70:82:99:97:69:a9:ef:8d:c3:54:97:
18:ee:40:f6:02:e1:12:d7:18:10:f5:e1:f9:1f:b0:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C2:38:8B:E8:D2:D3:3F:47:16:E0:6A:50:97:59:32:3C:08:FC:73
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
39:5d:60:a8:40:93:be:66:60:04:33:5c:fa:ba:9a:f6:5a:f3:
a9:18:1e:a5:dd:80:ce:e7:c3:59:7f:19:b3:ee:bc:c3:18:a5:
21:66:e3:6c:71:a0:72:31:85:c4:01:70:a3:12:00:c5:4f:93:
0f:00:71:a6:f7:a0:bd:3d:3d:28:71:d2:36:c3:41:26:44:71:
a5:36:48:ac:04:e4:d4:4a:01:7b:ce:87:2a:5d:b0:fc:ef:0b:
4a:f3:09:f5:48:b0:bf:7f:71:b8:19:8c:e7:4d:d0:2e:00:ff:
c9:a5:26:4f:07:f8:62:41:ad:d4:e0:05:7e:5e:2e:4d:82:46:
ed:50:6c:e6:f5:3d:42:fc:ed:5b:bf:b4:58:4c:63:85:87:69:
de:62:eb:59:9e:47:02:07:e1:4e:3d:f9:a9:7d:4c:b5:a2:e3:
69:ad:10:a7:f7:0d:f7:49:60:13:99:15:8d:4d:7a:67:11:ba:
1d:75:c7:d4:75:fb:59:c0:47:a8:70:f0:c1:a9:1e:38:84:0c:
91:60:f0:a8:a7:48:af:d5:9b:00:98:37:9b:85:37:2c:0e:79:
8a:3a:41:9c:d5:68:8c:37:01:84:59:98:82:24:90:b9:bc:48:
53:cb:9f:ac:ff:ef:ce:db:4f:07:0d:51:00:54:ba:39:e2:4e:
8d:54:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:28 2025 by rpki-client