Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa
File: A061E19A482511EFAE9AB069C4F9AE02.roa (raw, json)
Hash identifier: JMYd6U9nh2pgtA11Q3UJtsWRslMYYwMX9vg7LqHuPBE=
Subject key identifier: EA:FB:F6:24:56:AB:47:14:AA:B3:B8:52:8E:1D:A9:AF:B2:B5:F2:B7
Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Certificate serial: 0F68
Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa
Signing time: Mon 22 Jul 2024 12:38:23 +0000
ROA not before: Mon 22 Jul 2024 12:38:23 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9498
IP address blocks: 128.185.0.0/16 maxlen: 24
152.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3944 (0xf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Validity
Not Before: Jul 22 12:38:23 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=669e52be-d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:ea:f0:d6:06:70:18:aa:6e:35:e7:09:ee:
55:27:ad:54:6a:ad:61:81:bf:3c:73:cf:78:6d:ae:
e1:a0:91:4f:11:47:80:2b:23:69:ec:f3:f2:6f:47:
a6:39:10:d4:80:4d:01:51:26:8d:2c:75:c3:c7:70:
56:63:e7:a9:0a:e1:12:76:54:8f:51:d0:6e:99:91:
15:9b:87:fc:17:62:90:96:59:16:b5:dd:68:86:c7:
b7:77:a0:93:60:d3:10:c0:bf:1b:fd:5b:4a:3a:ae:
22:aa:07:90:e1:33:9d:42:34:97:41:64:82:65:ed:
71:07:ff:5b:d6:0c:75:b7:1d:ec:c8:52:4f:65:2f:
8e:ec:93:68:22:bb:fc:e5:3d:e1:70:4a:d8:6c:59:
d8:31:ad:c4:91:f1:3a:94:87:63:1e:58:de:b5:79:
07:39:7e:06:e0:42:52:a7:5b:c6:52:20:c0:7f:ee:
45:dd:bc:cb:4a:1b:ea:5a:cd:8a:3c:9b:f9:5f:52:
73:82:62:d4:26:8d:94:45:ff:ee:6b:d1:f7:2d:70:
ac:90:7b:d4:dc:c1:4d:61:39:e4:92:83:6f:96:16:
47:8b:bb:fc:14:18:85:c0:f1:df:1e:92:06:89:74:
20:9e:09:bc:b9:d0:9f:b6:a5:cb:40:9d:f0:5d:5d:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:F6:24:56:AB:47:14:AA:B3:B8:52:8E:1D:A9:AF:B2:B5:F2:B7
X509v3 Authority Key Identifier:
keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.185.0.0/16
152.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:28:24:ca:6f:68:56:f6:0b:86:36:a4:cf:f0:67:2a:a1:31:
12:d8:89:72:e5:f4:cf:b2:15:1d:c7:99:28:28:f8:95:0e:9f:
0d:53:1b:96:df:5c:a0:ee:e5:03:e5:95:a1:04:13:29:e1:aa:
21:74:17:1a:47:66:7d:fb:7f:74:50:99:d9:dc:ca:ec:0a:c7:
12:3a:11:bb:9f:64:b0:c0:c5:58:8d:3a:8a:25:ae:e9:a4:fb:
02:df:44:b4:ad:93:a2:a9:a7:2f:15:1e:a0:1f:38:c6:3f:6d:
88:49:77:7e:75:5a:98:b7:76:f1:df:e3:8b:0d:58:24:40:19:
df:dc:76:05:72:6a:4e:7c:ee:9d:36:d5:8a:9c:09:08:2b:e5:
f2:92:15:8a:7d:96:1c:5f:51:d2:ca:c8:f7:bb:f7:6b:b3:c8:
d0:a4:09:ba:85:3d:04:fd:0a:f5:b5:12:09:51:72:f7:d6:27:
96:99:cb:a7:f9:df:cb:2f:be:b8:3c:29:0c:fa:c4:da:ce:14:
6f:7c:59:ff:10:a6:93:d7:a0:65:ad:a9:03:ef:c1:ce:e7:74:
45:9b:93:2d:47:e2:30:1a:10:c7:ee:f9:90:be:36:27:0e:f6:
26:3b:2d:26:6a:2b:9c:f8:dd:cf:db:b3:fe:e0:60:48:5c:de:
8f:ce:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:38 2025 by rpki-client