Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/33750762DB9A11E99FEBB04BC4F9AE02.roa
File: 33750762DB9A11E99FEBB04BC4F9AE02.roa (raw, json)
Hash identifier: Nj5NxSyByFRXSr3seo9Y6jyZSR2GzfRM7sa5j+/xwIs=
Subject key identifier: 20:D7:B8:B8:B5:0D:8F:52:7F:D1:E8:B8:A7:E5:4A:38:43:E4:58:E6
Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial: 1B6D
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/33750762DB9A11E99FEBB04BC4F9AE02.roa
Signing time: Tue 20 Sep 2022 04:53:30 +0000
ROA not before: Tue 20 Sep 2022 04:53:30 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 45204
IP address blocks: 180.149.64.0/18 maxlen: 21
180.149.69.14/32 maxlen: 32
180.149.90.0/24 maxlen: 24
180.149.91.0/24 maxlen: 24
180.149.93.0/24 maxlen: 24
180.149.94.0/24 maxlen: 24
180.149.95.0/24 maxlen: 24
180.149.96.0/24 maxlen: 24
180.149.97.0/24 maxlen: 24
180.149.98.0/24 maxlen: 24
180.149.99.0/24 maxlen: 24
180.149.100.0/22 maxlen: 24
180.149.112.0/24 maxlen: 24
180.149.117.0/24 maxlen: 24
180.149.118.0/24 maxlen: 24
2401:d600::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7021 (0x1b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Validity
Not Before: Sep 20 04:53:30 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6329474a-90e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:69:a8:37:26:dd:0b:cf:6a:87:94:24:90:
1e:8d:d1:c0:ae:ac:6d:2a:54:0d:5a:f7:db:86:5b:
8d:d7:ab:e0:2e:6f:e7:53:d1:99:ef:8c:7c:b8:df:
bf:0f:71:2b:cf:93:87:01:0f:5e:4c:c7:10:61:26:
b1:d7:5f:2f:c7:d9:1b:29:3c:f7:40:43:72:2a:77:
a1:ef:ed:7b:be:e4:08:16:86:12:7d:ab:aa:85:aa:
c1:af:e9:03:03:1d:dc:12:3c:87:9c:23:15:57:5b:
d4:f4:99:87:4d:78:94:62:ce:33:f9:7e:bd:72:c0:
d1:5c:73:61:e7:a8:15:2c:2a:5d:9f:e7:3f:ca:ff:
8d:63:27:76:7a:c1:81:1c:10:b4:ef:fb:c5:c3:15:
3f:17:5a:0b:6b:cf:19:be:c7:4d:fd:78:13:ff:1f:
34:42:25:9d:28:93:20:73:fe:3a:0f:c7:80:3c:b0:
02:a6:ed:39:ff:7b:b2:44:25:c3:7b:68:8b:2a:7e:
e4:c6:67:5e:cf:73:bb:63:19:a2:66:03:ff:38:8e:
a7:e0:6b:8e:79:40:0f:f5:e1:2f:9a:9f:c9:b7:25:
68:01:32:bc:2b:58:95:02:2e:3f:7e:5d:7b:f3:6f:
e1:16:e2:71:a2:33:c5:19:a7:dd:cc:ac:a0:9f:68:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:B8:B8:B5:0D:8F:52:7F:D1:E8:B8:A7:E5:4A:38:43:E4:58:E6
X509v3 Authority Key Identifier:
keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/33750762DB9A11E99FEBB04BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.149.64.0/18
IPv6:
2401:d600::/32
Signature Algorithm: sha256WithRSAEncryption
06:79:88:6f:9f:66:de:29:7f:22:7e:7d:a9:9b:16:8a:f6:27:
c9:07:e3:ba:a8:b7:d3:05:23:30:c6:4d:ff:4d:d8:c3:74:2e:
4f:1e:ea:e6:f5:7c:79:09:0e:84:3b:e6:71:4c:29:9f:f3:36:
94:6d:cc:af:e8:99:b1:7c:2b:45:2a:e3:64:f0:97:d5:f9:4e:
95:73:e7:5b:27:e7:3d:f1:1a:6f:60:14:46:7f:a0:38:bf:b2:
09:50:76:58:f0:c5:e0:52:b4:4c:8f:bf:2b:9c:1e:c2:f1:d9:
f8:c8:7f:98:7e:f7:4a:63:bd:5a:64:01:38:22:ea:a0:be:21:
e5:bb:16:91:5f:ec:6b:6d:c7:ca:37:68:25:ea:21:a2:cb:4b:
e6:55:37:e7:dd:e8:b9:72:12:74:54:6e:d8:f6:d1:87:00:d4:
72:5a:13:aa:40:b0:44:d9:c1:67:e3:bd:64:89:c3:0c:fd:86:
7f:ec:c0:db:9a:a3:38:01:8f:28:f4:a5:84:c7:ec:d8:3c:0a:
e9:9e:48:38:c8:82:ca:9f:ba:8c:78:4f:50:a0:56:d5:de:34:
a6:c1:05:73:d3:e4:1b:7f:fd:11:a9:54:03:12:fc:4a:1d:a3:
4c:07:24:69:5b:92:22:73:d1:98:33:eb:0b:63:47:95:e4:6e:
56:57:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:12 2025 by rpki-client