Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
File: A278209A459511E9A18A751DC4F9AE02.roa (raw, json)
Hash identifier: 1ekJKn+UiPvxVSzmR3qh+QKI7BxGbC5xNocBxNAwrtc=
Subject key identifier: D2:4B:9F:85:D0:BE:46:4D:CE:05:EC:8B:99:3C:77:04:14:EB:69:87
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2628
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:12:51 +0000
ROA not before: Sun 06 Aug 2023 16:12:51 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 138558
IP address blocks: 2402:9e80:46::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9768 (0x2628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:12:51 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc683-f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:6d:0a:39:49:b7:2f:0f:b3:c2:e1:40:47:
67:89:9e:92:6b:7a:45:63:b1:a1:8e:5a:5d:d6:d0:
5f:ae:59:68:6e:af:ff:9e:f7:23:e0:51:ce:87:db:
7b:98:7f:3c:71:9e:20:54:4b:10:f6:91:81:f2:40:
7f:4e:ae:df:6f:f5:95:e3:47:54:fa:76:aa:b4:ff:
2e:64:2c:bc:ef:de:cd:2c:9d:2b:bc:26:d7:76:20:
4b:8e:1e:4f:d0:87:ba:97:b6:0f:95:f0:db:81:31:
64:20:e6:93:d4:c9:e0:97:81:3b:bc:15:34:56:20:
71:b9:a4:32:39:cc:b1:96:49:de:f3:37:ce:0e:77:
25:f5:67:9d:83:4b:6e:13:b3:43:cc:e6:a8:31:64:
03:10:4d:0f:33:68:b7:4c:f8:eb:8a:76:92:05:aa:
07:cb:ea:a1:6c:17:48:ec:86:0f:8a:96:31:c6:d9:
45:2c:12:f4:fc:2f:f1:c4:52:46:fe:44:3b:b3:5f:
64:5b:ef:d4:68:02:ea:ab:f5:42:50:e8:a4:07:7b:
20:9e:38:35:5b:03:b5:ba:5b:6b:c5:b2:1b:6b:82:
ee:8d:76:a8:80:46:24:d1:bd:7e:bd:3f:4b:9f:a7:
29:c7:05:55:a8:b5:c8:37:0c:24:98:b8:f5:b4:37:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:9F:85:D0:BE:46:4D:CE:05:EC:8B:99:3C:77:04:14:EB:69:87
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:46::/47
Signature Algorithm: sha256WithRSAEncryption
76:3e:ce:6c:4c:4c:aa:24:0c:2d:5f:d2:3f:dd:89:51:e9:dc:
30:ac:0c:2b:e9:53:e5:24:13:d8:69:80:6f:85:15:d1:0d:70:
da:97:00:25:9f:10:be:2c:7b:97:ab:16:88:8e:f7:bc:48:84:
e6:2a:00:5c:0d:4a:29:98:04:04:e3:18:53:08:36:86:52:51:
04:95:f1:6a:45:7a:d0:2f:86:81:f0:95:ec:b3:89:0a:2f:a0:
1a:32:01:71:92:b2:80:81:e8:60:8b:b7:28:f4:d9:40:77:82:
c0:51:2f:a9:e8:58:60:ca:39:42:73:3f:34:db:e6:2a:20:7b:
aa:14:42:9d:57:ea:de:b1:d6:e0:18:14:f3:ff:f0:7b:57:b3:
68:d0:f1:21:42:f4:72:14:d9:e7:fb:cb:aa:80:57:2f:95:59:
7e:1c:ee:7e:4d:5e:0b:af:0d:0a:e9:e9:1e:f1:df:99:de:0a:
50:ce:b6:0f:a3:74:37:25:1f:df:cd:02:58:aa:66:48:fe:e9:
c9:0e:fd:bd:ee:d6:98:6f:a1:01:a6:18:be:1d:67:55:2b:b4:
02:0b:ba:39:7b:aa:ad:bd:01:11:3c:51:dd:0d:95:b8:59:86:
a2:6a:55:90:03:33:0f:d5:8c:61:1f:10:98:5b:b1:89:4c:10:
e5:45:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:42:53 2025 by rpki-client