Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/128ABF10A03C11EC921B3C40C4F9AE02.roa
File: 128ABF10A03C11EC921B3C40C4F9AE02.roa (raw, json)
Hash identifier: o95VaM9sr9OWihC3OO92cBgNsmHIQwluC15F/qw6waY=
Subject key identifier: DB:5D:58:00:6D:88:B3:B4:E5:DE:88:23:11:57:66:A5:7B:88:BA:54
Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Certificate serial: 02
Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/128ABF10A03C11EC921B3C40C4F9AE02.roa
Signing time: Thu 10 Mar 2022 06:34:01 +0000
ROA not before: Thu 10 Mar 2022 06:34:01 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 7582
IP address blocks: 161.64.0.0/16 maxlen: 17
161.64.32.0/22 maxlen: 22
161.64.36.0/22 maxlen: 22
161.64.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26
Validity
Not Before: Mar 10 06:34:01 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=62299bd9-2924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:9b:b0:d3:41:df:29:13:3a:31:09:3f:7e:
2b:94:71:53:c5:b8:b3:b4:32:f5:c7:a8:b5:c7:c5:
87:bc:b5:a2:89:7c:f4:ae:f6:95:c8:5b:31:a2:f5:
ce:04:c8:8d:7a:7a:20:bc:30:07:e4:e0:55:7d:ce:
f3:fd:80:8e:1c:79:76:36:ef:08:33:e8:40:e2:6b:
3d:60:fe:9d:2a:92:d9:60:e9:a1:6d:f8:f7:b9:34:
af:5e:7f:f7:b2:6b:eb:9c:c8:14:d9:63:d4:11:23:
8a:96:63:5b:ce:d0:3f:8f:0b:27:ba:60:09:5a:ac:
39:6b:0a:11:a2:ed:bc:09:19:5a:e8:bd:57:3f:fd:
18:1e:c7:06:d1:ed:7a:e2:91:54:bd:3b:17:48:c0:
3b:cf:50:3c:e6:3b:38:f0:04:3c:ec:e0:46:46:a0:
a2:26:d0:36:9e:4f:88:21:a1:bf:c6:74:3b:de:d8:
33:ad:4b:d4:e1:38:5c:be:ab:bf:1d:df:b6:2d:ef:
0f:da:a5:cf:6f:47:fb:af:ca:b2:39:80:d5:62:29:
2f:4e:72:9f:ce:33:58:44:66:fb:81:2a:f2:56:e8:
b0:0a:08:8a:a0:8f:26:3b:e3:2a:77:03:65:6b:74:
b5:f4:05:49:e9:b2:d9:6e:11:56:ba:44:7b:9b:6f:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:58:00:6D:88:B3:B4:E5:DE:88:23:11:57:66:A5:7B:88:BA:54
X509v3 Authority Key Identifier:
keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/128ABF10A03C11EC921B3C40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:c7:0c:38:67:95:83:c3:36:7c:a1:c9:d4:89:3c:db:a5:18:
21:1b:b0:19:31:4c:45:bc:34:dd:de:45:b7:b7:20:df:ad:bd:
2f:3e:66:78:72:91:45:bc:8b:ee:1c:01:78:0f:7e:98:96:83:
34:8d:f3:b0:85:13:f6:41:6d:dc:3f:a0:8b:46:80:e8:67:16:
83:8b:c3:a5:83:33:40:85:ec:af:99:e8:10:87:c5:f5:a0:f6:
f6:c5:bf:88:2d:10:54:bf:2b:27:07:36:ad:29:dc:06:b5:85:
13:c6:ba:a2:ce:70:f0:14:89:fc:ae:ca:c4:8f:32:e4:b5:13:
cd:97:a3:2f:be:65:bd:25:db:07:00:6b:08:9e:3e:5c:d0:4f:
5d:55:c4:e5:7b:92:49:73:e5:c4:64:6b:9c:73:c0:30:66:3b:
3a:da:e4:c8:58:b2:d7:a3:36:37:a9:2f:12:f4:b8:e7:55:ea:
ae:1b:2f:81:89:46:d3:f5:21:5e:91:f7:30:0a:d9:4f:fb:ad:
95:80:15:14:91:f8:d7:4f:35:d0:ad:70:7c:80:b3:c0:5a:3d:
c0:a1:9f:6b:da:c9:ee:cf:58:fb:f8:03:24:9e:d3:96:34:c3:
ad:23:82:30:76:2c:b5:1e:bb:88:06:4a:e5:26:21:2f:9b:05:
3c:a6:cd:fe
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QUNGMTExMC8GA1UEBRMoRUM4NEQ2MEY3OTZCRjQxNkY4RjgxRDE4QkFEQTJGRkY4
N0MxNUYyNjAeFw0yMjAzMTAwNjM0MDFaFw0yMjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyMjk5YmQ5LTI5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyHpuw00HfKRM6MQk/fiuUcVPFuLO0MvXHqLXHxYe8taKJfPSu9pXIWzGi9c4E
yI16eiC8MAfk4FV9zvP9gI4ceXY27wgz6EDiaz1g/p0qktlg6aFt+Pe5NK9ef/ey
a+ucyBTZY9QRI4qWY1vO0D+PCye6YAlarDlrChGi7bwJGVrovVc//RgexwbR7Xri
kVS9OxdIwDvPUDzmOzjwBDzs4EZGoKIm0DaeT4ghob/GdDve2DOtS9ThOFy+q78d
37Yt7w/apc9vR/uvyrI5gNViKS9Ocp/OM1hEZvuBKvJW6LAKCIqgjyY74yp3A2Vr
dLX0BUnpstluEVa6RHubb+AxAgMBAAGjggKUMIICkDAdBgNVHQ4EFgQU211YAG2I
s7Tl3ogjEVdmpXuIulQwHwYDVR0jBBgwFoAU7ITWD3lr9Bb4+B0Yutov/4fBXyYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBQ0YxLzg2ODM1NTA2QTAz
OTExRUM4QTFGMUMyM0M0RjlBRTAyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN0lUV0QzbHI5QmI0LUIwWXV0b3ZfNGZCWHlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi8xMjhBQkYxMEEw
M0MxMUVDOTIxQjNDNDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAKFAMA0GCSqGSIb3DQEBCwUAA4IBAQA0xww4Z5WDwzZ8ocnU
iTzbpRghG7AZMUxFvDTd3kW3tyDfrb0vPmZ4cpFFvIvuHAF4D36YloM0jfOwhRP2
QW3cP6CLRoDoZxaDi8OlgzNAheyvmegQh8X1oPb2xb+ILRBUvysnBzatKdwGtYUT
xrqiznDwFIn8rsrEjzLktRPNl6MvvmW9JdsHAGsInj5c0E9dVcTle5JJc+XEZGuc
c8AwZjs62uTIWLLXozY3qS8S9LjnVequGy+BiUbT9SFekfcwCtlP+62VgBUUkfjX
TzXQrXB8gLPAWj3AoZ9r2snuz1j7+AMkntOWNMOtI4Iwdiy1HruIBkrlJiEvmwU8
ps3+
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:11 2025 by rpki-client