Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa
File: A3C2B7D25DBC11EE80E75075C4F9AE02.roa (raw, json)
Hash identifier: UbiRQrcXWPQDb9wyaWz6Q8B0NnWEfYNSg692gny7rzo=
Subject key identifier: 02:56:D7:A6:67:94:F0:B2:73:4F:A2:FD:6A:E7:D9:23:32:7D:02:CC
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2962
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:52:41 +0000
ROA not before: Tue 31 Dec 2024 15:52:41 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132821
IP address blocks: 58.64.36.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10594 (0x2962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:52:41 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741349-6450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:33:31:a7:20:9c:91:ad:29:20:5d:50:a4:
4c:48:e6:7c:0e:9a:9e:59:a3:bb:af:4a:8d:49:fa:
23:8b:c3:8c:23:73:bc:95:43:9d:44:f5:5c:91:6e:
81:c1:ea:ac:fc:53:a6:7d:8b:7a:c1:38:9e:aa:5b:
58:ed:ed:4b:ba:e5:42:91:24:47:62:1b:54:8f:9f:
87:e9:8d:0c:9d:de:ff:ca:94:30:bb:c3:3b:59:bc:
6d:ef:c7:02:1d:f9:ff:c7:4f:58:fa:8a:d5:6c:97:
a5:fa:f4:ee:fa:8d:15:81:a8:d5:43:97:78:60:66:
f8:e1:34:f9:6a:2d:91:87:7a:b5:5a:30:d1:73:20:
1e:26:a7:47:8b:e6:e1:09:eb:25:3d:13:8a:1c:10:
8a:1d:09:fd:d2:8c:a6:2d:e8:7c:57:67:e7:45:5c:
64:cb:38:93:9d:0f:4d:c2:87:30:2b:b0:46:c5:1c:
78:57:1a:d6:64:49:d0:1f:42:74:8f:b2:ef:2a:d3:
27:bf:ad:bb:e3:86:af:93:e4:08:76:08:f1:63:67:
e4:5a:43:ce:22:b9:44:6b:d6:ac:c5:5a:07:96:26:
b7:f4:26:54:cd:93:8c:67:3d:56:17:ea:4b:b0:6f:
00:ef:e6:e6:a8:8b:2d:93:36:f3:be:92:0c:c2:8a:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:D7:A6:67:94:F0:B2:73:4F:A2:FD:6A:E7:D9:23:32:7D:02:CC
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.64.36.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d5:c5:e4:ce:a8:8d:63:72:9c:ec:4d:a1:c8:6b:42:2d:83:
66:a2:3e:b9:83:39:df:61:6a:15:4c:2d:85:6c:b1:7e:cc:c7:
ef:fe:eb:84:2a:a8:1b:59:35:66:18:6b:3c:6c:53:a2:28:50:
c7:51:74:ed:a0:60:30:9f:d4:38:7b:df:42:4a:ce:ea:b8:54:
46:ca:45:77:d5:17:ab:04:ae:01:88:07:b1:b7:cc:c6:00:cd:
87:ba:2c:95:28:f7:b5:4d:0d:8e:e1:07:9a:51:bc:9e:f0:07:
51:3c:29:2e:01:46:3b:da:f0:b8:ec:2c:1f:30:71:16:d8:f2:
16:8b:32:05:1a:6e:63:07:0d:f1:5f:af:c9:95:d0:66:ef:b6:
65:d6:1a:ed:09:1c:cf:8e:f5:30:0f:55:e2:e5:68:26:9a:aa:
65:c7:2a:a3:94:7f:2b:26:82:16:5e:68:86:7e:2f:bb:19:0b:
1b:53:d0:c2:7b:72:8b:e6:c8:ac:7b:08:b9:ee:f2:23:80:b2:
e3:69:bc:09:63:3a:c8:f5:5b:66:7b:d0:82:f6:ae:67:cb:63:
dd:5e:7c:e3:31:50:e8:be:17:fd:83:1c:a4:f9:0f:05:c3:45:
11:46:0b:ab:6e:d7:c0:3e:f0:08:61:27:15:f9:99:0e:b3:8c:
2c:df:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:48 2025 by rpki-client