Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/A012780EA96011EDBC8EBB57C4F9AE02.roa
File: A012780EA96011EDBC8EBB57C4F9AE02.roa (raw, json)
Hash identifier: YAKDn7/OlaaK66s0deYsry9spfB1lzfxZJZmslL+X1o=
Subject key identifier: F3:57:84:B9:E7:D2:7C:B8:C6:4F:79:0C:8F:F6:B9:9B:58:A8:30:83
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 03AD
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/A012780EA96011EDBC8EBB57C4F9AE02.roa
Signing time: Fri 10 Feb 2023 16:33:19 +0000
ROA not before: Fri 10 Feb 2023 16:33:19 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 199932
IP address blocks: 2407:d340:7921::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Feb 10 16:33:19 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63e671ce-ae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:b5:83:33:0d:d6:da:8b:7b:20:88:8c:1a:
06:60:fb:03:3b:62:a3:e9:e8:14:0f:2a:02:75:61:
bd:85:53:89:90:de:87:8c:84:82:67:30:2f:c9:10:
75:05:25:53:8b:67:9d:6d:bd:53:f5:8d:82:63:69:
32:4b:bf:f9:07:42:fa:5f:dd:12:b6:13:40:22:22:
77:db:bb:e5:1c:7d:ca:5c:bc:d5:12:34:10:23:e6:
69:20:12:f4:ec:8e:c9:2b:0b:5f:86:a6:9c:6c:88:
b1:55:77:5c:a3:08:db:f6:35:1b:64:6f:55:4b:16:
35:bd:e9:3c:f3:5f:20:9c:ba:a5:cc:dd:b9:d2:32:
f8:c6:54:8e:88:45:f4:1c:f0:5c:fc:a8:7b:b2:5b:
be:a4:8d:17:2e:9f:be:41:ba:f6:0e:ce:03:b8:0e:
a1:5d:d7:27:9f:5c:c0:f7:4b:31:c0:cf:4d:c4:97:
74:a5:fc:2d:8d:e2:11:35:a9:de:0a:1b:ba:0f:ff:
87:3b:f7:7e:f2:07:29:81:4a:b0:d1:53:24:20:35:
8b:50:c7:ae:5f:62:4c:a6:40:54:87:95:f6:5c:83:
bf:ba:dc:8b:bf:b1:36:be:bc:f3:07:5f:bd:54:39:
26:2a:d6:18:cc:65:cc:b6:4f:00:2e:cd:aa:a2:5d:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:84:B9:E7:D2:7C:B8:C6:4F:79:0C:8F:F6:B9:9B:58:A8:30:83
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/A012780EA96011EDBC8EBB57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d340:7921::/48
Signature Algorithm: sha256WithRSAEncryption
1e:cd:f2:f2:de:22:dc:9c:83:cd:ee:f9:61:ec:31:21:98:3a:
fe:91:c1:7c:b7:29:8a:ab:79:d3:26:0a:ea:da:82:c5:c1:e5:
e0:87:99:74:4e:7a:c5:1c:81:05:31:1f:c6:da:de:f4:14:79:
35:bb:e0:2f:ef:ce:06:db:dc:44:11:52:ee:d6:bd:60:a2:de:
2a:79:d5:b7:02:a9:da:20:cb:df:f6:6d:5a:9c:7c:0c:37:9a:
96:68:75:e9:9b:72:ae:d9:42:e9:42:7b:85:8b:43:e5:c7:eb:
65:08:e2:42:48:93:fb:09:ae:7a:a5:ef:00:f3:d8:db:c3:71:
0a:ce:c6:9f:97:c5:d0:65:34:c4:5e:42:0b:77:f5:ab:db:b2:
a0:f3:b6:15:06:f3:ab:06:96:6c:e6:74:24:e9:af:52:eb:b0:
db:1a:34:9b:3c:4a:ad:88:85:18:f4:c7:c3:2a:ca:c6:7f:4b:
aa:25:4f:49:70:73:79:82:7d:c8:30:94:39:cd:43:da:01:6f:
73:85:ed:21:e3:10:27:10:99:8d:7c:ca:67:46:96:87:ab:a6:
4d:25:4a:fc:ca:15:d9:0f:98:f1:e5:6a:65:d4:ca:7a:36:7d:
b7:11:57:f2:56:ec:a6:76:76:1d:d2:97:5e:46:43:1d:21:6a:
5e:6a:8b:a7
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjMwMjEwMTYzMzE5WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2U2NzFjZS1hZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+y1gzMN1tqLeyCIjBoGYPsDO2Kj6egUDyoCdWG9hVOJkN6HjISCZzAvyRB1
BSVTi2edbb1T9Y2CY2kyS7/5B0L6X90SthNAIiJ327vlHH3KXLzVEjQQI+ZpIBL0
7I7JKwtfhqacbIixVXdcowjb9jUbZG9VSxY1vek8818gnLqlzN250jL4xlSOiEX0
HPBc/Kh7slu+pI0XLp++Qbr2Ds4DuA6hXdcnn1zA90sxwM9NxJd0pfwtjeIRNane
Chu6D/+HO/d+8gcpgUqw0VMkIDWLUMeuX2JMpkBUh5X2XIO/utyLv7E2vrzzB1+9
VDkmKtYYzGXMtk8ALs2qol1vqwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPNXhLnn
0ny4xk95DI/2uZtYqDCDMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvQTAxMjc4MEVB
OTYwMTFFREJDOEVCQjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkB9NAeSEwDQYJKoZIhvcNAQELBQADggEBAB7N8vLeItyc
g83u+WHsMSGYOv6RwXy3KYqredMmCuragsXB5eCHmXROesUcgQUxH8ba3vQUeTW7
4C/vzgbb3EQRUu7WvWCi3ip51bcCqdogy9/2bVqcfAw3mpZodembcq7ZQulCe4WL
Q+XH62UI4kJIk/sJrnql7wDz2NvDcQrOxp+XxdBlNMReQgt39avbsqDzthUG86sG
lmzmdCTpr1LrsNsaNJs8Sq2IhRj0x8MqysZ/S6olT0lwc3mCfcgwlDnNQ9oBb3OF
7SHjECcQmY18ymdGloerpk0lSvzKFdkPmPHlamXUyno2fbcRV/JW7KZ2dh3Sl15G
Qx0hal5qi6c=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:20:39 2025 by rpki-client