Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A9D3AF040E211EE9F11DB65C4F9AE02.roa
File: 6A9D3AF040E211EE9F11DB65C4F9AE02.roa (raw, json)
Hash identifier: X1bhL0gFNveWcCsrPD70kTaghe/O8iRTbTTn0j4C4XU=
Subject key identifier: BF:0E:C5:1D:7B:C2:FF:04:52:C8:0D:49:B6:82:E6:1C:64:71:05:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7837
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A9D3AF040E211EE9F11DB65C4F9AE02.roa
Signing time: Tue 22 Aug 2023 11:52:49 +0000
ROA not before: Tue 22 Aug 2023 11:52:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151108
IP address blocks: 2401:1e20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30775 (0x7837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 11:52:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e4a191-3a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:bf:ef:b7:84:82:e2:64:2f:f6:df:87:c2:
7c:cb:66:50:9f:24:4c:8f:94:9c:54:da:f0:f2:fb:
f9:aa:2b:0a:cd:aa:86:db:5c:31:d1:2f:da:5c:43:
1c:78:e2:ee:60:3d:a3:7b:b4:bc:77:9e:11:e7:e9:
54:52:88:ac:33:ba:58:c3:01:8e:74:d4:1a:fb:63:
28:7a:c4:e8:cb:bd:75:5a:98:5c:c4:10:21:f9:53:
98:2e:26:41:59:32:2e:96:68:ba:a5:02:68:7c:c1:
f8:dd:0a:79:57:f8:72:c9:47:d4:5f:27:5f:9c:16:
5f:18:eb:b8:1d:0f:1a:16:24:6a:4f:98:14:ec:27:
fe:27:68:72:2f:e6:0b:e4:18:ea:75:84:55:de:b5:
c9:d0:54:94:cc:9f:6a:a9:bc:af:ef:41:c7:c8:e7:
b8:94:ac:64:c1:b1:63:a9:c4:2c:48:61:26:58:67:
3b:71:ca:01:2e:93:98:ae:d7:f8:a1:ed:99:98:58:
77:86:cb:6c:06:3e:61:06:81:4c:66:58:b3:af:d5:
7e:2b:f1:4a:48:bc:ae:7d:ec:4c:f7:0b:29:5f:6e:
bc:b5:3a:62:fc:ec:2f:3d:74:7e:3e:cb:94:66:99:
f3:0d:82:96:f8:01:dc:e0:76:54:a3:b6:c2:29:0d:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:C5:1D:7B:C2:FF:04:52:C8:0D:49:B6:82:E6:1C:64:71:05:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A9D3AF040E211EE9F11DB65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1e20::/32
Signature Algorithm: sha256WithRSAEncryption
a8:9b:15:aa:5f:9d:32:38:98:09:60:8c:dc:92:4a:ae:8c:30:
99:2a:81:3d:fe:80:8d:e7:87:09:f3:20:85:41:2c:8d:12:3f:
bb:c1:b2:5d:ea:c9:90:9b:0f:f9:ab:1c:94:a5:1d:c5:c7:5c:
3a:00:32:52:97:ef:22:9a:f4:a3:fe:7b:9d:5d:9a:59:c4:40:
a0:67:0b:db:0a:de:d2:12:b5:a8:65:e1:83:43:59:29:4f:c6:
02:51:15:8e:e0:b7:0c:c5:64:9c:23:bb:97:64:a9:6b:56:be:
f7:36:c0:14:34:34:cd:42:0a:da:d2:b4:d4:7d:54:0e:6e:6b:
86:82:bf:a5:3e:47:e2:72:ea:ee:16:3f:25:0a:04:b4:ea:5a:
82:47:4a:83:fe:3c:0d:38:16:68:1d:d1:00:21:49:9a:1a:50:
c3:e4:eb:69:64:28:60:a1:e7:ac:59:c6:dd:26:11:c5:3a:f0:
d4:a4:72:34:45:34:73:35:12:9c:e3:16:44:1d:4e:90:c7:9f:
b3:c1:9e:fe:41:94:e9:04:74:48:91:73:87:86:8a:b0:a3:ef:
e4:0b:e9:45:5b:21:7b:78:9f:cd:83:74:cc:26:76:32:79:f0:
8e:c3:dd:0a:3d:27:20:b3:89:02:9e:6b:4a:8e:cb:4c:0c:3e:
73:df:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:32 2025 by rpki-client