Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
File: 22F2C0647DCB11EEB9150234C4F9AE02.roa (raw, json)
Hash identifier: 0KwtvVvJORSXDZJXoDg8yH9MqNo0pSSAze/dXIycs7s=
Subject key identifier: BD:A3:48:DC:BA:1E:7C:CD:29:F3:4B:23:B0:80:EA:EF:6E:B8:A2:4E
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 30
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
Signing time: Wed 08 Nov 2023 00:09:51 +0000
ROA not before: Wed 08 Nov 2023 00:09:51 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 149875
IP address blocks: 45.249.226.224/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Nov 8 00:09:51 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=654ad1cf-4fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4b:14:e0:91:b5:cc:31:8c:c4:c9:70:27:2f:
17:72:a5:3d:f3:a1:97:1a:c3:30:12:8b:eb:83:37:
c1:3c:9b:b4:61:3e:de:76:30:20:4f:5d:26:fd:19:
ff:24:df:75:14:05:2d:cb:36:18:e8:d7:60:3e:a3:
5d:cf:f0:0c:17:14:c5:a1:54:ba:c1:7c:df:d6:b6:
3e:d9:b9:a8:5a:c0:18:80:c6:0a:29:ec:7f:f3:d4:
94:cf:d8:99:c5:ff:0c:a9:0b:47:b7:bd:d5:fc:ea:
14:e1:ba:31:7a:84:6f:ce:cb:10:5d:58:0a:7f:e3:
c3:37:48:a0:bd:e5:f5:4f:87:52:3e:2e:08:a4:0d:
7e:f8:bb:b5:ab:c6:51:12:00:83:f4:ea:6c:73:e6:
62:36:d3:a0:2e:97:19:dc:f5:2b:ab:3e:31:ba:dc:
7e:05:db:91:72:31:59:a9:c2:5c:6f:6c:33:0f:1c:
0d:51:c9:a7:ee:5b:a0:fa:cc:6b:fc:46:5f:fe:d4:
af:ef:b1:59:e4:b3:c3:ff:a3:56:ff:6b:f4:61:48:
b2:be:81:30:7f:88:e7:3a:1e:f6:32:b2:b3:e2:17:
bb:5b:93:15:2d:63:bf:30:69:b3:22:c8:ed:4a:8a:
c2:7d:ce:eb:cf:81:87:76:9d:eb:46:ab:e8:b4:2c:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:48:DC:BA:1E:7C:CD:29:F3:4B:23:B0:80:EA:EF:6E:B8:A2:4E
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.226.224/28
Signature Algorithm: sha256WithRSAEncryption
b9:5b:52:3b:30:73:86:6d:9f:4b:59:b1:70:38:43:1f:fc:ba:
41:49:50:a0:61:f9:1b:46:9e:b1:7a:4b:31:d9:2d:9a:95:e8:
94:8a:1a:11:ad:a9:4f:a2:43:0a:7f:f4:03:97:52:05:45:4c:
de:2d:e8:23:08:6f:cb:72:d8:dd:a7:ea:2a:dd:81:d8:a5:a7:
de:ea:9a:f0:a8:fb:d1:26:96:04:6a:32:37:a9:79:62:3b:3a:
72:ac:76:56:98:9c:8b:86:79:b2:ab:50:b4:95:77:36:5a:2a:
a1:58:91:64:c0:62:4a:a6:54:a6:52:d1:1a:70:ff:6b:db:2c:
f5:76:05:86:f1:2f:58:43:aa:4b:e4:e2:18:b4:ec:81:32:f5:
4e:7f:87:5a:f0:be:1c:37:4b:ee:4b:78:b5:39:11:d5:e4:c1:
00:4d:e3:21:a2:86:c7:fd:14:8f:6e:c2:a9:c0:6d:4d:54:82:
bf:b4:b9:40:f4:04:24:41:d7:07:65:bb:7d:2e:da:dd:45:d0:
72:55:2e:13:95:fc:be:c6:a9:39:6c:c1:f3:10:17:0e:4f:4f:
a0:83:9f:45:5b:ae:a2:33:75:a8:ea:c3:38:79:99:61:b6:0c:
58:e5:d8:df:93:01:94:1e:95:e9:68:64:01:f9:2f:e7:e5:22:
2e:9e:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:22:00 2025 by rpki-client