Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
File: 1C12F510A05011ED8B25FE52C4F9AE02.roa (raw, json)
Hash identifier: laRjE/FXZyosfdYzs+KrogqerFEbxpe5tdAHX5rLq2Y=
Subject key identifier: 78:DB:D1:73:40:DF:34:01:64:CA:E4:A5:73:FC:57:B0:71:07:4C:65
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2979
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:01 +0000
ROA not before: Tue 31 Dec 2024 15:53:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 147187
IP address blocks: 49.231.72.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10617 (0x2979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:53:01 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774135d-8a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:ce:9d:b2:7e:6d:39:a1:bc:d3:ff:28:05:
75:76:df:45:78:df:6c:a0:91:ff:75:a4:5b:43:5a:
45:f4:99:67:ed:27:86:6d:19:53:ba:13:eb:8e:b2:
7c:7f:9e:02:f0:c3:c7:28:13:f1:9a:80:29:7b:93:
d7:86:7f:f3:0c:9d:f6:d0:b0:12:c9:9e:87:c4:cc:
76:59:2f:d3:8b:68:7f:d8:90:54:1c:87:98:5d:5f:
75:a5:4d:24:82:e9:37:fd:ab:d3:c8:76:9a:d5:0c:
99:e8:f9:52:88:18:72:fc:9b:c1:3e:11:8b:e8:20:
8f:a2:c3:48:05:92:85:52:d8:1d:1b:19:21:6a:d7:
d5:3e:35:b6:dc:30:d2:4d:31:9e:4c:e2:28:e3:73:
d1:8e:b0:eb:53:eb:f5:06:b4:60:f0:ae:58:6e:a4:
69:aa:6a:04:31:4f:c4:6b:1d:90:03:fc:d5:66:fc:
5b:4c:ff:26:05:c4:21:58:cf:62:40:76:a2:49:0e:
64:3a:06:7a:72:d9:31:4b:59:b4:bb:59:c9:e3:62:
fe:70:2d:ae:62:f6:04:bf:4b:7d:78:a8:fc:4e:55:
a8:e3:24:b6:54:1e:4c:0a:80:8e:14:c8:65:e2:50:
69:c7:0a:30:91:c0:a2:49:ba:ca:df:44:51:e8:05:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:D1:73:40:DF:34:01:64:CA:E4:A5:73:FC:57:B0:71:07:4C:65
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.231.72.0/24
Signature Algorithm: sha256WithRSAEncryption
47:64:65:99:92:98:b6:8d:0e:69:25:45:64:bc:91:3e:f1:b2:
3c:61:1d:89:7c:a3:0d:dd:10:f4:6d:6b:b6:47:61:f5:3e:6a:
fb:62:5f:0d:d8:ad:72:30:34:fb:a4:30:c0:70:bc:c4:37:61:
49:f3:4b:17:43:b7:af:be:04:04:1d:51:4b:3f:25:b8:22:59:
8e:84:62:b2:2c:a2:5d:99:72:c2:c0:ff:e5:fc:73:bb:17:fc:
1e:76:95:b7:5f:91:54:83:0f:c6:66:3e:91:7e:25:df:5f:95:
ad:f5:29:b8:11:e1:c0:31:5c:be:f2:2f:59:f6:17:21:bf:ef:
90:20:b9:17:e9:1c:c1:ab:3b:a0:e6:13:a2:b0:92:23:db:e3:
60:95:fb:f3:64:b8:d5:3e:b0:2d:4d:7c:f0:a6:58:23:c4:63:
1f:e1:05:c6:24:be:f0:93:94:27:ea:53:f2:bd:18:d0:6a:a4:
fb:4b:b6:87:77:e6:03:6f:64:f2:3c:c3:0e:07:01:ed:8d:7d:
ba:dc:84:5a:7f:9f:5e:a4:b1:08:9f:4a:78:c9:7b:43:3d:ef:
f8:5c:c3:f2:22:20:98:8d:b7:71:06:25:aa:20:8f:17:63:c9:
4f:e0:9c:9e:58:5c:74:4c:c9:ab:1e:0a:c8:9a:b5:79:0d:0d:
48:71:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:42 2025 by rpki-client