Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4B46AF7ABA1611EFBE63EF7EC4F9AE02.roa
File: 4B46AF7ABA1611EFBE63EF7EC4F9AE02.roa (raw, json)
Hash identifier: E45rVCcuOt1HJq5RroUOjLIjecXNLNj8yKcRkwbk/5w=
Subject key identifier: 02:B4:52:6F:FC:83:98:E4:89:E3:37:8A:CA:21:F1:31:AF:70:42:9D
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 298B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4B46AF7ABA1611EFBE63EF7EC4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:18 +0000
ROA not before: Tue 31 Dec 2024 15:53:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45254
IP address blocks: 110.49.97.0/24 maxlen: 24
110.49.111.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10635 (0x298b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:53:18 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774136e-eac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:00:19:92:1c:72:03:77:15:97:0d:b0:0e:
b0:7d:67:58:78:f4:0f:aa:ba:75:ba:25:71:9b:60:
bd:55:46:3f:89:c1:76:ea:f5:fb:7c:5a:58:b5:90:
d9:2a:a5:bb:bc:f6:65:64:75:5f:90:6c:e4:67:0b:
27:8c:67:87:32:f4:44:51:fb:83:ad:c6:11:ae:0d:
bc:8d:d9:cc:22:68:85:0d:a6:c3:ed:3e:94:a1:6b:
88:06:bf:28:2d:31:35:2e:07:72:53:f0:cd:1a:60:
e1:b9:c6:b7:ae:b1:b1:ae:63:c1:26:85:7d:93:1a:
18:95:c6:ec:3d:ee:e5:a5:b6:28:f6:26:3a:e7:db:
42:f1:d9:4d:67:7c:c8:e4:69:0e:86:32:56:08:35:
65:71:04:9b:ce:28:ba:9e:b9:f7:03:74:1c:08:33:
e2:d6:7f:51:3f:68:97:49:d2:40:2e:3e:40:0f:87:
78:1c:33:be:26:13:e4:f4:15:ef:4f:b7:17:c0:fa:
a0:35:39:49:9b:76:14:7d:86:02:67:8d:16:5e:a0:
22:44:66:09:3a:66:1e:ab:d5:21:84:7f:f2:fb:4d:
f8:8d:98:a8:a3:7c:d8:16:bd:b6:2c:17:c2:74:c9:
34:ac:37:25:af:86:fb:04:64:91:a4:f6:33:3e:3c:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:52:6F:FC:83:98:E4:89:E3:37:8A:CA:21:F1:31:AF:70:42:9D
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4B46AF7ABA1611EFBE63EF7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.49.97.0/24
110.49.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3c:8b:f1:2b:02:0b:57:a3:1d:38:2f:50:f8:ac:7a:94:1c:
7d:be:f8:f1:77:a8:28:4f:0c:52:92:33:96:f2:48:50:bb:96:
44:c0:28:36:63:8e:08:8a:da:e4:b4:76:72:30:7a:f4:af:2c:
da:1e:4c:8c:eb:d3:c5:de:64:88:80:81:2f:d0:cd:d8:9f:f2:
ea:d4:2a:21:d3:37:95:d3:89:92:92:97:e6:1f:e0:d2:f7:ab:
94:44:b8:c4:15:31:ff:01:6a:63:50:db:58:70:b3:52:3d:51:
7f:72:6c:b7:86:fc:4c:bf:14:87:ea:50:45:d9:68:96:48:9f:
36:47:75:19:79:db:46:87:9e:09:9f:ba:d7:6f:7a:ec:9b:f6:
96:a1:e9:b8:73:b9:e0:68:e7:4e:6b:60:35:30:e7:33:d5:ae:
d4:6f:84:a7:c8:e7:c6:fd:16:32:d3:87:b4:b2:7c:ab:0c:cc:
aa:be:8f:5b:d9:cd:55:8c:0b:6a:92:5e:d8:94:b8:64:4f:d0:
66:a5:37:0c:5f:a5:77:c6:64:6b:39:af:f3:90:3a:6d:5e:73:
0e:7d:90:a9:00:3f:66:6f:8b:4b:f2:1c:b7:9d:04:35:83:f8:
23:2d:37:dd:80:c1:db:4d:ad:0a:ea:dd:9a:cb:80:d2:17:bb:
2a:a4:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:02 2025 by rpki-client