Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa
File: C7E33F14260211EB8B2D4373C4F9AE02.roa (raw, json)
Hash identifier: j89tF1klgTISWWtFUzaOjvYdu6yc4H8ECiRL+BcoFpQ=
Subject key identifier: 65:42:6B:52:BE:A7:60:81:59:41:9C:A8:3B:E4:D2:0E:4F:FA:4A:44
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 296F
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:52:53 +0000
ROA not before: Tue 31 Dec 2024 15:52:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136897
IP address blocks: 49.229.92.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10607 (0x296f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:52:52 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741354-1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:d3:0c:75:48:46:d7:f9:62:07:9d:1b:93:
0e:4a:9a:c1:ea:ad:8d:59:41:7d:48:ed:b2:8f:f1:
42:d0:73:6e:1e:ef:e0:43:03:6c:0f:e3:30:03:cf:
9c:28:8c:40:25:b4:61:6b:d2:07:a7:30:43:4b:89:
6a:71:64:a1:e0:d1:f1:6f:8a:19:0d:f3:4a:af:b7:
f9:bd:85:e0:d4:98:b3:4d:55:7b:6f:55:23:c1:8a:
8e:99:12:f5:b8:6a:21:47:54:04:31:90:ea:4e:10:
34:07:18:4d:f1:1a:74:a6:ec:48:ac:08:03:65:10:
48:e7:b5:2e:21:d6:93:06:72:68:ce:d2:5e:ec:67:
54:5e:78:a5:6d:b4:b5:7a:36:36:83:e0:d8:05:80:
ae:a0:81:e1:a4:bc:8b:f2:5f:48:33:cc:57:d4:fa:
6c:68:f8:3b:b8:78:cd:3b:a2:36:f3:50:e1:2a:4c:
4e:04:46:12:64:4c:d2:e7:08:2d:25:56:7d:cb:12:
7e:ab:7d:5c:a8:66:09:62:d6:29:3a:74:e7:00:1f:
cd:56:60:a1:c0:a9:b9:81:b7:ac:30:89:b0:97:15:
f6:09:62:5a:e9:d2:8d:f7:16:e3:74:ec:09:11:0c:
c9:7f:e6:4b:59:71:be:9b:b5:22:72:cb:00:5e:f6:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:6B:52:BE:A7:60:81:59:41:9C:A8:3B:E4:D2:0E:4F:FA:4A:44
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.229.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:78:45:e5:60:7f:46:be:f1:ff:06:5b:10:9d:0f:3a:0d:bc:
8b:95:45:c5:92:01:4a:91:9d:a7:48:13:06:94:d4:aa:91:4a:
78:84:9f:f5:ea:c8:f5:9a:a5:67:ab:f7:59:5d:e5:3a:0b:2e:
7e:0e:a2:f1:63:1f:02:b8:27:02:ea:92:e3:6d:85:39:b8:c3:
db:49:d3:6d:5c:be:2d:a3:70:f2:85:4b:8d:95:aa:db:2a:ce:
12:db:c7:6f:1c:32:b6:23:2d:72:41:93:0b:dc:ce:f9:cc:3b:
80:1f:c3:4e:28:b6:b7:29:03:f1:0e:56:ae:d2:db:d8:f4:7c:
14:7d:2b:5a:35:ae:9d:82:95:f9:d5:29:8f:6b:37:11:ff:e6:
68:59:4e:dc:e8:71:33:32:93:fc:d7:1e:ea:b8:9b:c5:6d:75:
83:d1:83:e6:89:77:00:25:f2:9a:0e:3e:88:3d:d5:84:f6:f2:
54:b1:83:59:3f:c1:62:96:0f:ce:93:db:45:59:e0:2c:74:54:
53:7e:4d:ce:17:85:5f:08:0f:77:b4:10:4d:e3:df:f1:df:16:
4a:bc:14:d1:9f:cd:6f:5e:4f:89:f6:d5:81:13:04:34:52:72:
ab:6f:1a:c2:c7:39:84:69:2e:d9:a4:68:c2:db:8a:5e:3f:70:
e9:97:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:32:16 2025 by rpki-client