Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/EF8F40847F5611EEBC5BA557C4F9AE02.roa
File: EF8F40847F5611EEBC5BA557C4F9AE02.roa (raw, json)
Hash identifier: vHEI787kuISiScttpJfOJGBeadDbj9u7oLw6dXqfM9I=
Subject key identifier: 54:77:E4:FD:9A:45:7F:2D:D9:70:63:83:48:F0:53:CB:D5:00:59:18
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 35
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/EF8F40847F5611EEBC5BA557C4F9AE02.roa
Signing time: Thu 09 Nov 2023 23:23:06 +0000
ROA not before: Thu 09 Nov 2023 23:23:06 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 151633
IP address blocks: 45.249.226.0/24 maxlen: 27
45.249.226.0/25 maxlen: 28
45.249.226.128/26 maxlen: 28
45.249.226.192/27 maxlen: 28
45.249.226.240/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Nov 9 23:23:06 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=654d69da-a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:3e:05:54:b8:41:cf:88:b2:e8:21:cc:ce:
3f:bd:f1:7a:70:7a:e5:d5:49:b0:04:eb:e9:3d:ff:
a5:df:3c:18:6c:74:e8:9c:14:58:3c:16:59:3c:21:
4a:0f:0d:2d:b1:f8:8c:cd:c0:26:19:f4:36:65:a2:
2c:21:a9:d7:99:d1:b9:05:42:ca:3b:05:1d:d2:50:
88:c7:61:59:1b:64:3e:c6:79:ce:75:f3:69:b3:1a:
f8:f9:3d:e0:fb:51:48:0c:6a:42:31:4d:72:84:d9:
64:25:f0:5e:41:b4:90:9b:74:18:a7:2d:6f:1c:a8:
af:52:3d:ab:82:f3:1d:19:1b:9e:53:71:ab:f3:b6:
e5:72:a8:1a:94:b5:fd:fe:09:19:47:3e:14:b3:50:
e7:78:71:56:6f:15:20:27:14:4f:19:e3:fd:be:b1:
a5:b1:4d:fd:35:d8:a7:6f:18:30:60:d3:fc:2e:45:
c2:6b:29:dd:75:58:93:ed:a6:e5:75:a3:fd:df:fc:
27:bf:b3:2d:59:ad:3e:59:d6:4d:b2:18:86:1e:9c:
98:e5:31:3f:0c:9f:c5:74:59:5c:84:14:ed:08:b3:
f5:b3:49:51:d8:51:ed:1f:a2:6f:94:f0:ad:ca:39:
f5:f9:e5:fc:25:45:05:20:7f:e1:60:fa:a5:ce:69:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:E4:FD:9A:45:7F:2D:D9:70:63:83:48:F0:53:CB:D5:00:59:18
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/EF8F40847F5611EEBC5BA557C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d6:66:c2:03:b7:f7:48:3c:4d:7f:79:23:fe:16:dc:cd:35:
e2:94:a0:27:61:ef:d2:8e:b3:66:0a:53:82:6f:62:3b:df:3b:
67:9e:08:5a:b5:a6:c8:6e:94:bc:53:7b:00:ff:22:8c:fd:6e:
1c:06:ab:94:b1:8f:b5:bd:ed:08:3d:38:94:a3:e1:1a:74:24:
4b:a0:dd:86:72:3e:25:9e:70:3e:b2:e6:d0:dd:5e:7f:fa:f3:
83:ad:19:d5:0b:7f:cf:7b:20:ae:a3:e6:45:76:9e:b0:97:9a:
ee:37:b1:9c:2f:3c:09:a7:81:5c:23:d9:35:62:64:08:0d:22:
d0:d9:2e:52:ec:bd:d9:63:9b:94:e0:50:25:22:18:d3:7d:e4:
53:4f:24:17:1a:86:7a:3a:86:3f:cb:83:d9:dc:fb:80:b2:6b:
f6:85:da:ac:c0:a2:eb:59:10:14:e2:b7:72:cb:8a:cc:ac:f8:
2e:ef:5a:d8:56:c5:29:06:69:39:87:b1:30:20:9e:75:44:d6:
85:b1:dc:16:fe:ac:63:16:2d:7c:12:23:60:75:24:d5:79:ee:
13:9a:2c:74:d3:4c:f5:f5:c0:21:72:a1:e7:f9:2d:ec:db:70:
f1:24:09:01:b8:20:64:35:1e:2a:4b:af:83:fd:ef:30:f2:a3:
58:9b:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:15 2025 by rpki-client