Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/E16B209ED14B11EE9D149A78C4F9AE02.roa
File: E16B209ED14B11EE9D149A78C4F9AE02.roa (raw, json)
Hash identifier: wky/b9ZVJM63omkxYXI5J3+lQPOQ1y1guzbyGVdU1WQ=
Subject key identifier: 01:AD:8A:72:AE:93:86:9F:C2:2D:0C:FB:B2:29:9D:E5:27:CC:D9:2C
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0315
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/E16B209ED14B11EE9D149A78C4F9AE02.roa
Signing time: Thu 22 Feb 2024 06:30:33 +0000
ROA not before: Thu 22 Feb 2024 06:30:33 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 133410
IP address blocks: 116.204.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Feb 22 06:30:33 2024 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65d6ea09-d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:94:82:46:ef:43:cd:eb:aa:19:40:8e:13:
ef:1a:fb:bc:09:a6:5a:60:f9:37:1c:3d:b2:fc:e3:
46:47:9f:d7:ef:de:25:ad:72:01:92:8d:c6:05:9f:
dc:08:83:4a:a1:6e:0b:36:42:85:d6:c9:63:12:90:
4b:9e:ef:53:46:42:1a:18:19:ed:94:4a:4d:8f:78:
f1:02:51:22:44:4d:81:1b:f9:a1:6b:ea:5f:65:df:
2d:cc:ab:f3:ba:d2:aa:bb:b5:db:37:a9:5a:eb:8c:
f8:81:21:b7:a7:6a:aa:1f:d3:a2:9a:70:3b:fa:e8:
e2:f9:ee:d5:44:05:d3:8b:21:ed:e5:2d:67:05:97:
f9:a7:d5:b2:25:6e:3d:bc:71:8d:1d:ee:3e:cb:03:
ad:9a:16:d3:23:3f:6c:9c:37:cc:67:22:03:b6:30:
a1:a5:1b:7d:72:61:61:58:1f:f2:26:71:8d:f5:c8:
18:3e:f3:57:96:3c:5b:4b:ac:94:1d:97:7e:de:a6:
84:1e:84:db:fa:c0:fa:48:07:13:f1:68:81:f0:56:
ba:5a:08:46:bc:98:ee:5b:9b:a6:f5:0b:1b:8e:95:
83:e8:3e:53:95:3c:f8:0f:ad:11:20:7d:9d:89:f6:
48:05:54:5d:c1:65:83:aa:10:da:0b:e9:51:d2:4b:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:8A:72:AE:93:86:9F:C2:2D:0C:FB:B2:29:9D:E5:27:CC:D9:2C
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/E16B209ED14B11EE9D149A78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:eb:e4:89:65:88:23:0f:e5:bd:18:f5:c3:65:dd:ce:75:9f:
20:6b:6f:8e:51:0c:9a:18:fa:ae:0b:2d:5d:74:ef:bf:d7:4c:
03:5b:5f:18:31:cb:ba:dd:b4:86:46:58:6a:c7:37:bf:e2:96:
78:0b:f6:35:67:8b:88:d6:3c:30:7a:3d:48:ce:3f:92:46:25:
32:2b:0e:a3:ce:ba:df:f5:0f:aa:c2:ca:24:b9:88:39:5e:05:
f4:8e:3e:2e:31:d0:b0:52:d6:71:ec:56:83:2e:60:b9:aa:40:
d8:84:27:b3:30:bf:75:4a:e6:a2:01:f3:63:13:dd:e3:40:68:
50:62:a5:cd:a9:ba:b6:0b:8a:fa:d5:7c:5b:cb:e2:cb:39:3f:
43:ae:c2:14:a4:d5:cb:69:e6:7c:d9:1b:99:be:ea:ce:de:c2:
5c:87:50:53:e0:cc:78:93:14:d8:78:0f:d5:1b:77:45:a9:97:
7c:89:b6:3a:4a:1d:18:bb:d0:c3:ec:72:33:bf:a8:a9:66:56:
05:6b:90:41:3f:8f:6f:56:67:66:db:dd:cf:68:43:56:c3:46:
e8:dc:e8:e2:f2:82:75:88:b9:b0:dd:58:4d:78:06:9f:55:17:
2d:83:24:ef:36:83:f1:9f:09:96:89:11:ad:34:e2:d6:d5:02:
4c:b2:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:35:48 2025 by rpki-client