Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa
File: 7F9DD2F04EDF11EFADECB25EC4F9AE02.roa (raw, json)
Hash identifier: t/UKot4OzseaqVGTSbSCnK3mysWrzHb4pIJPoAJ2Adc=
Subject key identifier: 10:22:6C:6B:FA:15:A9:2F:6B:C9:01:CC:30:E2:E7:4E:9C:FC:EB:80
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1A30
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa
Signing time: Wed 31 Jul 2024 01:52:11 +0000
ROA not before: Wed 31 Jul 2024 01:52:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 3949
IP address blocks: 116.51.19.0/24 maxlen: 24
116.51.20.0/24 maxlen: 24
116.51.22.240/28 maxlen: 32
116.51.23.192/27 maxlen: 27
116.51.30.192/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6704 (0x1a30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Jul 31 01:52:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a998ca-cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:2b:d6:4a:8d:ce:ca:95:78:dd:71:c4:eb:
39:5c:5e:49:ca:e7:ed:c3:f8:9f:23:b4:2d:59:e4:
84:51:1f:ed:43:62:5b:f6:4a:3d:2f:90:cd:20:2c:
36:ec:87:51:8e:47:e8:13:9a:94:2d:a3:ab:0e:3d:
81:0e:20:74:aa:e3:ca:71:a3:1b:94:3c:02:15:54:
88:ea:4e:bf:11:a1:3f:3b:5c:6a:d9:93:30:e4:da:
9c:7a:74:1d:f4:d8:8b:7f:65:c8:e0:07:ba:e7:2f:
09:7c:66:21:ae:51:bc:0d:8e:49:a2:b4:91:38:dd:
68:e0:c4:63:3c:c1:81:d0:eb:a7:76:cd:14:ed:ce:
8f:44:24:f6:74:a6:6d:e4:63:f2:13:7c:d2:79:16:
f5:73:a3:c3:cf:e9:a4:68:cc:36:af:4b:8b:18:95:
b4:25:4a:15:c3:ff:50:25:86:f0:20:d1:51:b9:40:
aa:b4:b0:bf:2a:1f:4b:e3:85:ce:d4:a9:51:d7:99:
c8:f1:96:88:20:34:7e:7f:33:ff:a0:f5:79:77:af:
77:de:22:ea:19:d5:1f:78:c3:dd:c2:25:99:ed:8d:
01:8a:68:5f:d8:a8:26:07:13:ba:cb:0d:b7:62:dc:
06:33:06:1f:41:b7:b7:0e:14:2a:05:6d:1a:db:99:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:6C:6B:FA:15:A9:2F:6B:C9:01:CC:30:E2:E7:4E:9C:FC:EB:80
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.19.0-116.51.20.255
116.51.22.240/28
116.51.23.192/27
116.51.30.192/27
Signature Algorithm: sha256WithRSAEncryption
5f:1e:29:e4:55:e2:6b:36:7c:0c:9a:c6:e2:20:fa:2a:1f:29:
50:6d:e1:ce:23:d2:5d:cd:c6:0b:55:3e:13:2e:ae:59:32:b4:
17:78:5d:3e:3c:fa:3d:0a:11:21:2e:10:3a:ae:71:6e:10:e6:
35:fd:84:aa:94:57:ab:13:5b:0f:24:e3:57:80:05:e6:a7:e8:
71:ee:66:af:38:9e:da:48:fd:d4:82:e8:3e:8c:84:04:18:fe:
e4:f9:7b:1e:07:4a:36:77:d4:64:34:23:e7:e2:96:26:0a:81:
55:7b:61:c4:87:be:aa:ab:58:9d:19:ae:64:5f:3e:76:f2:7b:
d3:c6:b1:1f:70:b9:aa:b0:2b:12:33:ad:8d:ba:28:3f:00:d1:
22:0f:4d:b5:a6:bd:12:14:6a:67:60:85:0e:0a:df:aa:4a:4c:
ef:f7:c0:31:b6:d8:53:73:4c:cc:1c:fe:3d:0c:cf:34:b3:0f:
c6:60:33:cd:82:cf:fd:35:c3:d6:48:c5:46:c8:b8:62:e8:81:
68:04:64:33:66:97:78:01:ca:50:93:d8:7a:08:36:0a:69:92:
ac:fc:42:b5:98:9a:69:ac:e6:7d:2d:b4:be:02:78:c8:9f:e0:
83:01:1a:be:c0:b4:a2:e1:e5:ef:e4:f5:46:8a:b5:aa:22:bd:
c0:53:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:22:13 2025 by rpki-client