Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
File: 1E812B043A9611EB8CD4224BC4F9AE02.roa (raw, json)
Hash identifier: 2rloIWspoTdsayqQCE8TDyVLzZgtkvVp6yhHBSi7B7A=
Subject key identifier: 04:7E:E6:AC:57:16:ED:0E:97:50:D7:86:DC:CD:E4:97:3A:05:76:5F
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 06FC
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
Signing time: Fri 14 Feb 2025 23:20:24 +0000
ROA not before: Fri 14 Feb 2025 23:20:24 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 18200
IP address blocks: 43.224.192.0/22 maxlen: 22
43.224.195.0/24 maxlen: 24
61.5.208.0/20 maxlen: 20
61.5.208.0/24 maxlen: 24
101.101.0.0/18 maxlen: 18
103.43.156.0/22 maxlen: 22
114.69.192.0/19 maxlen: 19
114.69.192.0/22 maxlen: 22
114.69.199.0/24 maxlen: 24
114.69.200.0/22 maxlen: 22
114.69.204.0/24 maxlen: 24
114.69.208.0/21 maxlen: 21
114.69.216.0/22 maxlen: 22
180.214.96.0/19 maxlen: 19
180.214.96.0/22 maxlen: 22
202.87.128.0/19 maxlen: 19
202.87.129.0/24 maxlen: 24
202.87.135.0/24 maxlen: 24
202.87.138.0/24 maxlen: 24
202.87.140.0/22 maxlen: 22
202.87.144.0/22 maxlen: 22
202.87.151.0/24 maxlen: 24
202.87.156.0/24 maxlen: 24
202.87.159.0/24 maxlen: 24
2404:2200::/32 maxlen: 32
2404:2200:10::/48 maxlen: 48
2404:2200:17::/48 maxlen: 48
2404:2200:22::/48 maxlen: 48
2404:2200:24::/46 maxlen: 46
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15
Validity
Not Before: Feb 14 23:20:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67afcfb7-fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:5b:25:11:1a:dd:94:f4:df:76:c3:e6:59:
1a:ba:4b:cd:02:ae:48:ff:01:7e:39:6a:63:9b:70:
70:4b:cf:61:81:20:eb:d3:f5:a2:a4:f0:11:0c:d0:
63:26:e2:7d:ff:d3:1c:8f:ac:d1:cd:d5:0a:2d:03:
57:77:99:30:a7:a3:f2:03:fe:22:45:2b:53:83:4c:
58:e5:56:cb:74:93:46:30:3f:c7:91:0a:3b:82:1c:
92:35:e2:bc:2a:a3:ff:92:8d:b1:fd:0e:8a:da:64:
08:17:64:de:f1:ce:61:72:58:81:7f:bb:95:8e:af:
49:18:6d:d2:04:16:b4:9b:9a:a0:49:63:14:9e:de:
62:b5:52:1f:87:ac:d7:56:ab:37:f8:2a:a0:e3:be:
36:4e:e7:4a:53:bd:80:c9:1c:2e:28:d1:3e:48:69:
8b:8c:c8:d5:2b:1b:2d:75:fb:f4:0e:6e:45:5f:33:
7c:eb:c9:c4:17:3d:dc:24:71:d0:ed:6a:8d:59:e8:
fc:6c:fd:13:3d:f6:23:a7:76:4e:e0:a8:5c:e6:5d:
cc:cd:e1:af:ef:c2:19:ab:e8:d6:b1:0c:9f:81:05:
62:d7:2b:75:1b:8f:24:29:65:b1:21:9c:37:51:c6:
a8:7f:dc:d3:51:cb:8d:72:53:92:00:cd:ac:64:48:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:E6:AC:57:16:ED:0E:97:50:D7:86:DC:CD:E4:97:3A:05:76:5F
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.192.0/22
61.5.208.0/20
101.101.0.0/18
103.43.156.0/22
114.69.192.0/19
180.214.96.0/19
202.87.128.0/19
IPv6:
2404:2200::/32
Signature Algorithm: sha256WithRSAEncryption
2c:2e:e0:25:77:0b:a8:9e:61:00:6c:b8:a4:ce:10:52:9f:67:
76:eb:93:97:d0:fe:da:21:38:d2:da:37:33:69:c3:eb:21:d8:
47:7a:22:4b:75:de:54:b7:10:06:91:a4:87:74:e4:f1:3f:1c:
a2:72:48:da:6d:43:31:52:d3:6f:be:18:32:3b:da:2f:0d:5c:
ca:b0:7d:17:73:8f:c9:47:90:a4:ef:36:6b:74:29:04:54:8e:
47:dc:31:9e:b6:06:22:4f:32:bf:fc:bd:a3:12:ce:14:30:3c:
f2:50:2c:05:49:ef:a9:ce:b7:3e:97:b1:ce:5b:4a:39:5b:94:
16:7a:57:fc:24:47:cb:ba:cb:99:2d:25:e6:90:b4:9a:eb:be:
29:dd:b1:09:ac:c6:fe:c1:c0:f5:ef:7e:2f:ec:6b:77:ce:8c:
18:a3:ee:e5:05:68:ea:42:cd:9d:cf:7a:9b:f3:ff:97:e1:79:
5d:4f:4a:0d:21:8a:d0:f3:4e:30:e9:7b:bd:ca:3b:9d:62:4b:
aa:ae:43:36:73:2d:c1:49:61:7f:cc:c3:8e:39:00:e7:15:7a:
b1:f0:4e:f2:c7:6a:78:a5:e8:ef:5a:02:50:cf:3b:74:86:0a:
48:9e:ee:f8:dc:f7:f9:e8:3c:a5:28:55:95:b7:f4:2a:49:dc:
d1:5f:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:46 2025 by rpki-client