Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
File: C0CA56A827DC11ED91B34848C4F9AE02.roa (raw, json)
Hash identifier: StXDtQlyp4UA03ND5ABgUhlHONH9pSFtI8CMH6O59vY=
Subject key identifier: 27:A1:87:DF:28:25:A8:33:40:11:EE:F3:B5:C9:06:4A:3E:6B:52:5D
Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial: 12AD
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
Signing time: Mon 29 Aug 2022 20:54:20 +0000
ROA not before: Mon 29 Aug 2022 20:54:20 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8046
IP address blocks: 2402:d240:1776:412::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4781 (0x12ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Validity
Not Before: Aug 29 20:54:20 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=630d277c-14f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:60:4c:7c:5c:2e:0f:71:0b:d0:88:3a:6d:
2d:37:8e:37:fc:1a:e1:27:6f:09:92:ae:99:f5:d8:
51:3b:09:8e:2a:25:07:75:8e:02:e8:20:22:a0:9a:
6d:21:83:8c:af:95:90:7a:d3:51:4e:7c:9a:da:67:
90:3f:11:e8:86:dd:e8:cc:c2:73:f6:78:26:78:7f:
3d:54:6c:0e:16:8e:5a:20:6e:62:c4:f9:6a:b4:dc:
ba:c9:52:bd:45:30:19:ef:f2:05:0e:5d:a5:ca:69:
09:c9:c6:0a:57:76:d3:89:55:34:43:00:b9:c4:97:
f4:0c:a0:78:08:4a:b3:8c:91:cd:76:4e:07:78:22:
22:6e:22:c4:f8:43:98:f6:a7:b0:43:76:5d:f1:ed:
62:00:8c:11:42:17:d3:27:02:7e:e8:e0:bc:0e:62:
ef:d4:da:dc:08:66:35:6d:3b:7b:8c:0a:e7:42:f4:
0a:3e:69:0b:50:1b:2e:18:e8:d9:58:82:fc:42:c0:
ce:a4:31:0e:a0:01:cc:30:09:e1:dc:d9:c7:df:98:
46:b0:5f:96:58:c1:fb:e2:96:6e:be:84:e5:90:8b:
97:cb:6d:2b:1a:58:8b:4e:b0:e5:f8:6d:24:fa:15:
5a:95:e4:1a:29:c9:53:0d:2c:97:8b:ee:09:63:26:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:87:DF:28:25:A8:33:40:11:EE:F3:B5:C9:06:4A:3E:6B:52:5D
X509v3 Authority Key Identifier:
keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:d240:1776:412::/64
Signature Algorithm: sha256WithRSAEncryption
c1:74:24:39:98:23:3e:6a:2a:35:79:58:09:03:1f:55:9f:a3:
a3:f5:b2:1c:b9:03:00:02:75:ff:79:e8:94:0e:70:e8:30:be:
5b:cb:02:df:7a:3a:55:8c:b7:dd:54:92:a8:0f:5f:98:de:64:
34:a7:b5:27:f8:b9:f1:c3:1d:9c:cf:99:1c:2f:2b:38:dd:f0:
3a:c1:39:37:bb:66:a3:23:b0:78:12:41:17:99:4c:7e:29:e4:
16:41:54:98:00:dc:6e:e6:42:56:33:8f:36:cb:a0:c5:cf:c7:
8e:dc:9f:f6:ce:d3:ac:ca:03:68:92:d4:f5:0f:50:b6:75:3d:
ef:9c:a8:e1:62:dd:bd:fd:ab:f5:54:68:40:85:d2:b0:36:e1:
5d:84:10:aa:4d:1f:40:e3:c7:b1:27:c7:10:7d:56:47:7f:e2:
a6:7a:2f:6d:01:ec:69:99:d8:72:c3:5c:cd:fa:52:d6:1e:a4:
08:f1:3a:54:62:0d:9c:37:8e:bf:d4:3c:c6:f0:59:8d:53:42:
43:72:46:39:68:0c:14:51:71:cf:e7:a0:09:50:3a:03:11:a9:
38:e3:db:68:f0:1c:4a:4d:bb:d4:b5:8f:7c:86:b5:55:31:3b:
cc:dc:d2:71:61:bc:58:66:6d:99:6d:95:73:61:42:25:78:61:
2e:3d:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:48 2024 by rpki-client on console-fra.rpki-client.org