Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
File: BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa (raw, json)
Hash identifier: +7MUVVvEuY5OsgtDzgNJy/HjcMOQosKrxTpEBqvh09g=
Subject key identifier: 7B:7B:D3:54:74:9B:5F:78:B6:21:E6:F1:64:5F:A5:DA:BF:D7:1C:2A
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0DE7
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
Signing time: Wed 03 Aug 2022 19:05:54 +0000
ROA not before: Wed 03 Aug 2022 19:05:54 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 141011
IP address blocks: 2404:f4c0:f5c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3559 (0xde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 3 19:05:54 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62eac712-4a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:5b:4c:3d:cf:fb:61:8c:f0:a8:35:d5:86:
37:f5:44:a0:27:7e:41:fd:fc:9a:b0:9f:61:11:9e:
a5:be:95:7f:99:f7:96:e9:e1:97:d5:5b:4d:55:29:
53:2b:51:73:b8:62:dc:cd:fa:2a:df:5e:c5:18:4e:
32:0d:a4:fd:d6:fb:1c:b6:ed:b6:c7:23:63:42:14:
2e:60:a9:ba:46:a8:2b:7c:a4:77:30:06:54:b4:88:
5e:92:b2:98:54:4f:02:89:6f:70:60:6f:29:97:95:
24:82:92:39:9f:b5:50:d3:5b:76:cd:ae:aa:07:af:
2b:05:66:49:98:65:50:15:1f:44:5b:38:f4:fe:49:
4a:16:83:02:96:d9:62:a3:96:c6:b4:64:2d:5a:b7:
0d:65:fa:39:e7:af:0c:b2:0f:a0:b5:7c:8a:2b:f4:
1b:0b:2d:a8:74:71:a6:a8:71:ed:72:fb:c9:8a:b0:
26:23:ac:f5:34:89:ca:0a:88:f0:62:7b:8a:23:34:
6b:6a:50:b6:2b:6b:41:65:b8:f4:47:dc:0c:b1:2c:
28:c8:79:26:c1:f6:13:88:71:21:f5:76:a6:87:b0:
93:b7:a0:83:7a:bb:1f:c6:37:e3:dd:3b:a6:1e:72:
9c:e3:f3:38:41:39:d0:d8:be:1f:ee:26:7d:85:8a:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7B:D3:54:74:9B:5F:78:B6:21:E6:F1:64:5F:A5:DA:BF:D7:1C:2A
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f5c0::/44
Signature Algorithm: sha256WithRSAEncryption
bb:e6:a8:9c:c1:af:02:d9:b7:a5:5a:82:ea:5b:32:dd:37:e6:
17:1c:ab:c9:5b:c1:f9:10:17:b9:4d:5f:47:af:fe:53:49:42:
b0:0d:d0:ec:53:b1:cb:8e:80:31:b9:31:02:c0:18:85:42:a9:
50:98:57:1d:0d:7c:cf:89:85:31:d0:8e:b5:d6:4a:cf:01:a4:
b6:f6:3e:f7:3f:d9:e6:1b:eb:54:a2:9e:70:da:68:70:5b:c3:
a6:1d:66:7c:7e:55:a7:89:e3:bb:64:96:94:d4:80:50:9e:f3:
5c:f9:91:c6:10:1b:0c:99:fb:6c:0b:8a:e1:3d:de:52:ee:dc:
8c:50:42:86:b7:fd:f5:d4:86:27:c7:39:4e:29:66:25:7b:8c:
03:f3:16:10:3f:c5:5b:19:ca:0b:6b:42:15:d1:ed:12:23:79:
dc:97:ac:2a:98:48:24:7f:d3:71:66:eb:51:f8:91:01:fe:05:
9a:2f:61:1a:fc:67:90:52:c2:b2:ff:f4:60:1a:95:be:65:1d:
88:d4:83:b9:f2:0a:85:bc:b2:ff:7f:e8:21:8d:09:8a:10:69:
0c:31:db:9f:b6:bd:f0:85:56:20:d5:37:2f:53:af:3c:30:d8:
4d:78:62:e8:ab:26:c1:54:a7:69:df:0f:c1:59:27:cd:d4:77:
82:02:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:05:17 2025 by rpki-client