Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/9B30C508D31A11EFA0A9AC80C4F9AE02.roa
File: 9B30C508D31A11EFA0A9AC80C4F9AE02.roa (raw, json)
Hash identifier: HoYPyXpEWhC++aTqvXNF8A/W6v4noecXRriawLzNu6U=
Subject key identifier: 6E:C2:23:A2:72:FA:34:9F:4D:CB:73:B7:4E:BB:A5:2A:03:36:CA:B5
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 14
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/9B30C508D31A11EFA0A9AC80C4F9AE02.roa
Signing time: Wed 15 Jan 2025 08:27:50 +0000
ROA not before: Wed 15 Jan 2025 08:27:50 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 4764
IP address blocks: 36.50.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Validity
Not Before: Jan 15 08:27:50 2025 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=67877186-1d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:bb:d4:bd:0e:7b:ef:76:2b:d7:88:c8:c7:
a0:fe:b2:6d:ae:d5:05:cb:c8:4a:d8:4e:af:a4:9b:
48:ed:53:c2:f0:ec:f8:ed:8a:0f:4e:b6:5b:df:db:
fc:bd:ac:21:d7:0e:5a:5c:94:e0:a3:10:cf:39:11:
58:a0:9c:b1:f1:dd:03:d8:cf:9e:59:15:df:c1:cf:
d6:6d:60:ed:07:1b:2c:fc:23:3a:67:07:82:a2:9b:
cd:80:dd:ac:ff:3e:b8:a2:a6:ae:f1:97:8e:ba:0d:
70:3b:ed:67:61:be:a7:f6:e5:57:41:27:21:8b:ec:
62:19:93:f7:95:c5:91:d8:b4:b3:5c:31:11:ca:ef:
6f:18:c8:5b:c9:2b:3d:30:7e:06:65:22:bb:d6:4f:
b7:29:2a:01:90:ba:0d:08:d3:9a:ec:c1:5e:7d:f6:
35:0e:e6:ad:c3:3d:7d:9e:ab:ad:78:b7:2c:71:87:
ef:33:e8:90:68:04:78:92:31:3e:f1:d9:de:7b:f3:
ac:d8:55:fa:73:3b:72:a5:39:9e:9e:60:b1:20:ee:
53:d4:6b:c6:d1:d6:1c:40:db:41:25:77:64:23:92:
fa:c2:80:e2:f9:ee:9b:db:7f:5d:5e:0b:ab:61:87:
3f:7e:1a:ec:41:02:ac:f8:1d:fe:f4:03:bd:6a:8a:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:23:A2:72:FA:34:9F:4D:CB:73:B7:4E:BB:A5:2A:03:36:CA:B5
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/9B30C508D31A11EFA0A9AC80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.144.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:60:57:fc:dc:a0:07:46:3d:53:ba:86:42:04:f2:88:9e:8b:
f0:b2:0c:66:01:1d:f9:d0:9d:48:0f:fe:56:0c:83:32:0e:3f:
ab:70:1c:d2:0d:34:0a:32:ab:51:84:ba:05:15:cc:4d:82:ca:
e1:25:01:47:b3:27:11:ea:56:13:ed:68:12:b1:d3:d7:bd:73:
30:b0:66:9a:ce:f8:3c:b6:87:cb:e7:2d:41:44:4c:c4:32:4e:
70:9c:90:c0:4c:71:1d:67:2d:e4:3a:7d:2e:10:d4:76:1c:54:
c4:91:0c:05:e8:44:60:f4:87:b3:94:bf:15:50:8a:99:a6:a5:
78:25:e7:31:fc:d8:9d:25:ea:dc:b4:76:43:6a:79:ea:6b:2f:
65:2f:41:b1:1e:d2:36:5e:62:19:34:74:84:4c:6d:f8:03:2a:
f0:3a:f1:6a:ad:f2:8e:9f:77:69:8f:b9:77:34:aa:80:0d:19:
27:d7:73:89:e9:20:ca:b9:f4:9d:01:4e:1d:79:d6:5e:c5:1c:
ea:ea:f3:c5:41:3b:00:bb:a5:4d:4d:a6:19:90:13:72:2d:a0:
65:7b:4b:2e:66:cc:b0:f8:cb:11:a4:5b:0f:2f:db:7f:3b:5d:
2e:7b:ff:e9:d3:2f:68:d3:46:f0:2e:60:75:86:1d:e8:55:b8:
8e:b3:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:38 2025 by rpki-client