Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EC307840BD11EE9423EE47C4F9AE02.roa
File: 63EC307840BD11EE9423EE47C4F9AE02.roa (raw, json)
Hash identifier: 5TL1X1rmZ0+KNyPlx8tyQ4TrqGBV+c0LSzb6tPJmUAI=
Subject key identifier: AB:44:02:E5:3E:A6:5B:B2:95:0D:9D:4D:23:09:F9:C1:52:8D:32:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 782E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EC307840BD11EE9423EE47C4F9AE02.roa
Signing time: Tue 22 Aug 2023 07:27:46 +0000
ROA not before: Tue 22 Aug 2023 07:27:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132323
IP address blocks: 45.116.116.0/22 maxlen: 24
2001:df2:9ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30766 (0x782e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 07:27:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e46372-8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:35:88:63:12:d2:ed:07:3d:78:01:2b:fc:
6f:70:12:6c:06:13:b1:23:f2:04:c8:04:27:05:1c:
06:b8:50:68:2f:cb:46:eb:da:e8:2d:c8:23:32:41:
3c:57:c6:a7:d1:ae:51:a1:00:44:af:7d:52:58:03:
50:94:dd:1f:fe:8c:5d:1e:04:c7:61:01:82:70:b7:
96:6c:1d:ba:e3:65:3e:fa:1c:88:cd:aa:3e:69:bf:
a6:3b:ef:16:d1:5c:6d:bf:14:c7:2b:d0:de:d6:c8:
06:21:5f:60:5a:89:ae:a1:90:b9:c5:f8:74:2b:34:
ec:3c:2f:ae:b7:6d:6a:96:43:af:14:ec:2d:e1:0a:
1a:13:35:cb:40:1e:66:0d:1f:cf:d0:67:1f:dd:24:
9e:96:6d:ff:dc:98:07:70:b4:fd:ec:c2:fc:74:63:
cb:cf:c4:c6:ea:c1:9b:b4:30:07:40:e7:33:df:43:
02:63:d3:00:54:fc:80:c6:bb:71:e3:58:17:df:c0:
15:6d:69:2c:30:4b:47:0a:27:ea:cc:8f:05:8b:cd:
2f:71:ef:f3:26:09:ef:24:64:5d:71:72:3e:37:bc:
6c:29:59:0d:e8:30:e5:6f:91:6d:61:fd:83:0e:9c:
7a:53:ef:65:21:df:93:5f:cc:a1:fb:5d:80:5b:bb:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:02:E5:3E:A6:5B:B2:95:0D:9D:4D:23:09:F9:C1:52:8D:32:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EC307840BD11EE9423EE47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.116.0/22
IPv6:
2001:df2:9ac0::/48
Signature Algorithm: sha256WithRSAEncryption
a4:0a:6d:7e:99:cc:3b:2d:e7:0e:3e:52:c9:67:c7:ad:c5:76:
ab:52:4e:c1:fd:43:9e:3a:f8:ae:2e:4a:50:dc:ee:d0:d9:61:
c1:3e:a8:be:1f:64:a1:2e:ce:a5:cb:30:ad:d1:9c:87:71:01:
1b:ec:50:29:d4:cc:95:16:ef:f0:8b:59:b9:cb:fb:82:6d:ae:
e7:cb:1e:c7:7e:d5:19:99:0e:f7:bd:42:e4:4f:23:d1:a4:4d:
94:dc:c7:9a:a3:21:2d:15:ca:33:43:f7:a9:a1:4a:18:d9:84:
6f:b1:cb:98:02:5a:9c:6e:bd:17:b1:47:16:c7:bb:a7:66:bd:
e9:99:3f:bf:f9:a7:ec:06:15:81:c0:4a:3a:06:aa:a1:33:59:
9c:4f:d6:5c:87:0b:c4:2b:68:42:76:42:df:9c:3b:a1:e5:94:
77:a7:92:8f:88:69:44:62:56:a2:09:a4:37:b5:19:86:3a:4b:
49:6a:8d:a8:aa:f9:d6:31:18:22:74:97:07:f1:13:31:b4:0d:
b4:7b:37:3b:5d:28:34:e0:10:d3:e5:e4:84:b7:8d:40:87:9c:
76:6d:96:b7:34:92:df:47:10:14:51:45:20:86:85:38:33:12:
b2:8d:14:8d:e3:23:9c:35:4e:ea:a9:21:6c:12:86:e3:36:b5:
b9:ac:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:29:03 2025 by rpki-client