Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
File: CC6C1E70AA9011EC85962A36C4F9AE02.roa (raw, json)
Hash identifier: a6Avpt/p6RDbcWz9CWexz/2Hwe2y5FOjRRP3N+ySxRY=
Subject key identifier: 9F:DB:3E:49:33:D6:7E:83:48:D2:A2:4D:E3:81:2A:16:C9:8D:D7:1D
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1CCD
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
Signing time: Tue 20 Dec 2022 16:53:16 +0000
ROA not before: Tue 20 Dec 2022 16:53:16 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134729
IP address blocks: 43.92.128.0/18 maxlen: 24
43.92.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7373 (0x1ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Dec 20 16:53:16 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63a1e87b-b2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:e0:01:3b:27:05:93:2a:f8:79:be:58:27:
e7:c3:aa:25:b5:3c:08:fd:e2:4b:71:b8:ac:76:03:
55:ee:0c:b6:e3:75:03:04:3b:39:ba:3b:eb:5b:18:
97:eb:06:d4:9a:2e:db:c6:df:24:b6:df:03:5c:cd:
5b:ca:78:00:e7:1b:91:5f:e4:b3:5a:02:5e:80:81:
20:b8:57:34:5b:96:0e:47:d8:2a:6a:7e:ae:18:ad:
85:37:d1:14:e2:ea:8f:1c:1f:1f:94:51:8e:1c:ca:
83:03:ac:63:b0:98:ee:02:aa:ab:93:a7:12:10:df:
3d:a4:39:6f:14:24:ee:82:14:a3:7b:d6:2b:3f:37:
51:0f:fc:c1:3d:4d:fb:ac:9a:89:e2:58:ce:e5:14:
c6:19:b1:e6:90:d2:06:62:e8:42:9a:4e:22:2a:d9:
72:5b:0d:ad:80:15:e3:0e:a6:f5:d9:a0:66:99:f0:
3f:ba:5b:b4:44:b3:0c:49:7a:d9:08:4d:60:3f:aa:
de:75:5c:f6:e5:8a:f7:bb:fe:16:50:6f:96:6f:fa:
0b:05:4b:09:11:8d:81:8c:69:dc:01:99:3b:0c:c8:
c5:4d:8d:82:24:06:46:68:b3:4e:f6:fb:4f:dc:77:
66:c2:2a:78:37:c1:e3:63:bf:b4:d2:e2:27:21:22:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:3E:49:33:D6:7E:83:48:D2:A2:4D:E3:81:2A:16:C9:8D:D7:1D
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC6C1E70AA9011EC85962A36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.92.128.0/18
43.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
51:5f:7e:fc:82:40:41:72:2f:d2:8e:8c:06:4b:f9:1f:62:f3:
7a:cf:4e:32:5c:ef:40:b8:a5:1e:36:1a:bd:85:2b:fb:25:28:
20:c4:98:28:18:63:41:4e:b9:c1:bd:e0:23:9a:64:7b:25:73:
17:1f:1e:81:3e:62:57:25:cf:ba:21:5a:5b:2d:ca:2d:6e:b9:
a9:91:d7:3e:9a:be:af:dd:4e:95:85:54:67:61:e0:f9:87:1d:
f8:2c:a0:0f:e3:24:a9:53:52:a1:b5:ca:bc:03:b7:8a:46:43:
75:8f:e5:1d:12:50:5a:97:cf:41:ba:1a:c4:d8:68:d6:ba:6b:
c7:42:2b:28:34:16:70:04:9e:7e:ed:ef:3f:7e:e8:f2:dc:24:
1a:4f:a0:de:46:52:47:27:dc:0c:20:18:02:cd:e3:aa:60:b2:
fa:2f:72:61:95:1d:6a:11:47:3a:c1:95:33:69:16:95:2e:98:
ac:52:e3:fd:38:15:f0:a1:6d:37:14:bb:43:8b:7e:41:c7:99:
10:e0:62:96:38:82:7f:69:6e:4e:e8:11:ce:b3:67:20:13:2a:
76:c4:1b:71:b8:a4:5f:35:f0:fb:11:91:af:22:41:01:de:f4:
31:6b:98:64:5c:ed:7c:5d:8f:1e:b7:93:5e:b7:61:62:88:ec:
e7:b1:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:14:39 2025 by rpki-client