Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
File: 279A20FE771711E98C9E8245C4F9AE02.roa (raw, json)
Hash identifier: 4jQ/ws7PSDGCv0vCcZyZjNnVdiZBeMH1JQgqd/rsmys=
Subject key identifier: E9:77:45:22:3E:59:C4:4F:8D:9C:21:E3:61:F4:48:EC:40:7A:9C:B4
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 262F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:12:57 +0000
ROA not before: Sun 06 Aug 2023 16:12:57 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139058
IP address blocks: 2402:9e80:50::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9775 (0x262f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:12:57 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc689-2b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:31:c9:77:39:90:3b:df:3c:cc:20:22:b0:
0b:a3:6b:7a:98:6a:bc:b8:63:28:0b:23:49:1b:7a:
38:83:c6:5e:47:11:cc:2a:f3:f7:ec:b9:2c:3a:be:
4e:45:d7:c7:9a:0c:6a:98:b4:e2:2e:78:89:41:60:
98:23:55:10:86:58:3e:9a:75:f8:ce:aa:fe:15:b2:
78:ad:0a:a1:ff:27:b8:52:3b:57:2f:f3:03:8c:af:
ff:6a:a2:70:10:47:0d:7d:2d:87:da:53:39:8f:b7:
07:2f:f0:17:4d:56:3b:df:9b:bd:f3:c1:9d:b9:b8:
4b:2f:2a:0d:56:46:77:35:d6:45:eb:15:b8:47:c3:
02:97:38:86:cb:15:5d:bc:50:3e:fb:9c:d5:ce:cf:
6a:14:fb:de:49:48:47:b6:8a:6d:34:50:27:7b:8f:
e1:4f:93:09:45:d3:8f:f4:50:db:17:85:cc:2b:d9:
df:cd:1e:86:af:c3:9b:95:9c:d9:43:57:bd:ab:e3:
70:34:16:8b:15:ef:f7:44:cf:de:4c:a7:ef:96:2d:
e3:b5:db:84:6f:3d:c4:f4:0c:f4:22:de:7c:3e:3d:
d5:ae:b1:16:de:80:88:35:6c:11:c8:99:19:40:7a:
d7:4e:61:c9:27:db:cb:a3:d7:08:5c:df:7b:9b:86:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:45:22:3E:59:C4:4F:8D:9C:21:E3:61:F4:48:EC:40:7A:9C:B4
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:50::/48
Signature Algorithm: sha256WithRSAEncryption
76:ae:64:d0:8b:d2:83:bd:6f:9e:7b:b4:3b:e1:d8:ad:02:48:
ae:8f:00:c4:52:b7:eb:b1:94:6f:22:2e:9d:b4:62:70:6b:eb:
a3:eb:e2:bb:78:db:8c:c1:3f:6d:4b:4a:14:cd:58:cf:3e:61:
5b:9d:f7:27:90:71:26:d1:d5:b7:9f:ec:2a:59:b0:cc:5c:05:
25:49:a5:9a:0e:40:81:cf:bc:84:73:d7:cf:eb:9d:8e:51:41:
2f:d9:34:ef:af:e3:88:56:fc:d8:4d:2f:db:b6:fe:77:7b:fa:
09:89:34:df:c6:d0:4e:e4:11:e7:84:de:a1:86:01:91:c0:72:
1a:a5:21:d4:50:38:89:bd:13:61:8b:9d:d0:b5:fc:08:66:77:
7f:5b:d8:5f:e4:a1:77:3a:03:b5:ab:7e:6d:4e:75:f6:9e:c6:
f3:ab:07:c5:14:02:f8:fd:54:f6:84:f0:11:01:9d:65:85:82:
5a:dc:54:92:71:3d:5a:74:d1:b5:c2:59:b5:6a:fe:b3:b2:2a:
67:51:46:f1:f7:8b:5d:1f:88:c6:b2:26:a9:6c:4f:0a:5c:f9:
e5:3a:8e:89:4f:a2:86:49:ec:f7:9c:0a:4d:cf:6c:98:ef:ca:
e3:ab:a5:66:24:87:86:0b:41:ae:b2:1e:01:25:58:3f:a3:e4:
0b:23:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:46:15 2025 by rpki-client