Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/CCCF7FF27BE411EE9E7BD032C4F9AE02.roa
File: CCCF7FF27BE411EE9E7BD032C4F9AE02.roa (raw, json)
Hash identifier: EOEXuqJWjkRBPm1sdG/NqZV3cbPN1kyn/X8vm2AcltI=
Subject key identifier: C6:84:20:8D:1A:09:A2:50:A1:B4:17:A4:DD:60:12:8B:AF:FC:83:D3
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 63
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/CCCF7FF27BE411EE9E7BD032C4F9AE02.roa
Signing time: Sun 05 Nov 2023 14:08:32 +0000
ROA not before: Sun 05 Nov 2023 14:08:32 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150368
IP address blocks: 2401:3fa0:100::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Nov 5 14:08:32 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6547a1df-4e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:d3:82:27:a8:b6:e4:6e:85:09:0f:65:0a:
b9:f7:18:12:31:2b:08:12:06:9c:32:80:d1:32:d9:
fc:3e:a6:73:cf:fc:59:0a:8b:98:e3:2d:4f:84:31:
4f:d4:2b:56:6c:4f:a7:65:82:cc:37:2a:76:7a:c7:
5c:42:ab:5f:21:65:55:c8:8f:32:4d:23:da:39:fb:
11:79:b0:00:38:25:b3:af:13:55:c7:65:50:84:99:
b1:4b:08:85:4c:75:25:63:6e:54:af:f9:13:c9:7c:
ee:7b:59:0a:f9:ec:c5:73:6f:1d:2c:0a:7b:d6:ca:
5c:ef:f0:b8:6c:6d:44:0d:fd:cd:de:ac:ac:ea:fe:
88:18:e6:80:b6:b3:59:a9:16:78:93:43:be:f0:a7:
5b:08:01:c0:42:ce:dc:35:17:67:c3:6e:bc:68:73:
34:e7:f9:f4:e3:41:1c:3f:fe:62:a1:a7:b5:33:f0:
8b:a4:5e:33:42:44:4e:f2:3f:0d:49:db:bc:42:82:
e9:77:de:c7:ab:5f:7d:a9:07:97:38:a7:c8:9a:d8:
f0:2e:87:da:d5:0c:d6:fa:89:a8:cb:ae:1b:37:b2:
fe:9a:5e:40:9c:33:17:c8:e6:4d:83:82:45:fa:89:
a8:ce:6e:46:db:51:36:71:50:3c:e4:19:c2:17:e8:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:20:8D:1A:09:A2:50:A1:B4:17:A4:DD:60:12:8B:AF:FC:83:D3
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/CCCF7FF27BE411EE9E7BD032C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3fa0:100::/44
Signature Algorithm: sha256WithRSAEncryption
97:35:62:cc:5b:d0:f2:b6:ae:b9:cd:29:d2:c0:ac:ba:4e:57:
e7:2c:fc:21:d2:e7:a4:06:4b:e2:ba:79:4d:86:ac:ce:7f:8c:
44:8b:d7:3e:af:b8:17:22:49:79:57:93:47:3d:96:c3:08:d9:
5b:48:b4:bd:d1:8e:39:a6:eb:0d:d7:c6:d3:48:98:79:35:9f:
b0:ef:66:d4:29:e0:d0:4c:31:0d:f9:df:d1:9a:1d:c3:cc:49:
df:71:11:c9:fc:52:19:27:ae:bb:a7:3d:13:a1:c6:e5:67:cd:
3c:9c:88:ea:55:ce:6a:92:2d:9d:0b:b5:72:f1:c7:a4:52:6f:
f6:cb:60:a2:24:c8:30:50:d1:f9:61:25:5a:6f:44:25:7e:0f:
d0:29:84:89:23:62:b3:d9:ec:ad:0d:28:24:1a:21:dc:8f:cb:
2f:67:63:43:85:5c:d5:6b:f2:d2:0b:1c:c3:07:32:bb:cc:6e:
27:92:e9:67:ce:4d:07:7e:6d:2c:f3:4d:a2:76:db:32:c3:dc:
8d:54:37:a2:48:3b:35:3d:6c:4c:33:d3:73:77:c4:30:10:49:
f3:48:79:e9:14:f8:b1:27:8f:3e:a6:4b:93:6c:f1:45:c0:a5:
b9:a5:fd:0c:f2:92:7a:4f:b3:bb:f7:5b:d3:c9:70:e6:6d:10:
03:d5:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:51:58 2025 by rpki-client