Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
File: 4B24492A9BE211EDA44C435CC4F9AE02.roa (raw, json)
Hash identifier: jLeCdOvCT0YWDa76Bu36KAxzIE7/89ek8yRkoHjKTgw=
Subject key identifier: E5:18:CE:79:1E:E8:21:82:1C:2D:AB:DA:B7:E6:04:D9:17:8C:FB:86
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0AF0
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
Signing time: Tue 24 Jan 2023 12:26:14 +0000
ROA not before: Tue 24 Jan 2023 12:26:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150731
IP address blocks: 182.161.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Validity
Not Before: Jan 24 12:26:14 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63cfce66-f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:3b:19:8a:57:3d:2e:0d:0a:8d:81:5e:76:
c9:c7:f6:0c:24:d9:2c:8c:06:85:fa:cc:3d:92:18:
36:ce:fb:c1:5c:70:c7:b5:71:ae:d4:f2:90:ec:9e:
b4:de:22:2c:cf:11:9c:9d:d7:74:04:87:ff:92:49:
53:d9:bb:85:a4:47:60:3e:d5:11:6d:cc:3c:b3:8d:
eb:d2:2f:fe:aa:f6:6f:ce:23:2a:12:f8:7f:4a:6d:
92:6c:78:b6:40:cf:90:af:bc:7d:d8:90:db:1c:b2:
e2:0d:7e:59:f0:72:79:ed:4f:83:71:8d:8a:5c:e2:
66:74:df:eb:0d:6a:7c:bc:3c:8c:84:59:58:fc:a1:
19:7f:c8:81:b5:1b:a1:ae:e3:8a:fc:ce:5f:2a:b5:
57:8b:9d:e5:6e:74:b4:b5:85:9f:ae:af:a7:50:7e:
f6:f1:f0:4d:36:59:24:21:05:09:a3:e3:f5:16:6a:
61:10:79:fd:86:48:5e:b4:2d:6d:e8:b9:17:d8:f3:
82:f1:bc:3a:81:47:11:03:e5:27:a5:26:21:a0:df:
e7:d4:80:f6:5c:22:bb:97:41:dc:30:23:34:04:0c:
de:2d:aa:ef:ce:e2:ef:34:0e:ee:d9:5a:d7:b0:df:
50:ab:40:58:87:1a:6a:2d:7e:7c:44:7a:ec:dd:11:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:CE:79:1E:E8:21:82:1C:2D:AB:DA:B7:E6:04:D9:17:8C:FB:86
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.161.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ce:03:c9:6e:f3:03:ca:0a:54:28:76:f4:2a:ef:04:91:6d:
d0:e8:32:c7:36:89:0a:04:52:50:8e:73:0b:d7:bf:c9:28:64:
04:72:19:49:3e:42:85:84:62:be:56:a5:f9:95:a6:c4:17:f8:
bb:15:54:b3:e4:8d:4b:cd:b5:b2:64:92:50:ba:94:63:ca:07:
df:ed:1e:cb:a6:3c:b6:bd:25:47:a2:ee:b8:9c:e1:60:d5:61:
1f:f1:ac:85:f6:35:08:c2:18:fa:70:c9:a0:d7:f6:11:a6:be:
9a:96:eb:41:b7:04:c7:4c:86:5a:94:23:75:0a:9f:ce:65:a4:
92:df:cb:a2:0e:83:7c:45:eb:82:bf:22:db:39:1b:e4:92:b1:
bd:a7:d0:53:f1:03:9d:c8:51:97:71:aa:93:c9:cc:f9:5d:29:
cb:1b:64:dc:c7:75:23:fc:7c:12:94:69:5a:e3:b9:e3:81:96:
01:0d:ca:3c:94:58:ef:e7:91:96:c0:96:8e:cb:53:84:ea:11:
41:ac:de:37:d4:d7:5d:bd:23:14:d6:0a:50:ca:c3:2e:b5:49:
34:aa:1d:12:86:3b:86:1b:4e:2e:a8:c3:30:d0:aa:8f:72:8c:
28:f5:55:6f:94:8c:35:43:8c:ea:35:f2:df:2d:e6:1e:a5:34:
fa:c9:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:02 2025 by rpki-client