Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
File: C8E40D62260211EB8B2D4373C4F9AE02.roa (raw, json)
Hash identifier: ZDhi3GDj4Rx26cvMEZz82QZw6xeNeNAXctRFjtAy9QI=
Subject key identifier: EE:B8:50:94:7F:7E:3D:85:20:AC:7B:13:DD:0E:0B:FF:E1:B0:6C:7B
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 299A
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:32 +0000
ROA not before: Tue 31 Dec 2024 15:53:32 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9546
IP address blocks: 49.229.111.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10650 (0x299a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:53:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774137c-b5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:44:bf:f3:cf:77:59:79:4c:e6:15:7c:9a:
97:f1:b2:ca:4c:e8:52:57:24:de:36:8c:8f:bc:e4:
35:ba:aa:f9:91:b1:be:72:82:38:3e:fe:6b:4c:68:
d6:88:a7:49:3e:d3:61:72:15:01:10:55:61:db:70:
c9:5f:8b:2a:5c:2f:4b:75:f7:e7:a1:b7:06:70:23:
7e:2f:2d:01:be:de:dd:c6:77:39:8d:4c:4c:3f:6c:
37:f5:d2:ac:ec:26:5b:b2:cc:cc:13:f0:7c:80:72:
5a:fe:7b:d3:1e:ea:f3:b0:af:b6:ea:ec:92:0a:28:
94:11:1c:57:39:53:e4:55:5c:2c:63:a7:7d:2a:97:
ee:9d:b8:2a:2e:cd:1c:06:f5:4f:21:4a:41:0c:f4:
19:95:65:c4:51:75:3f:96:4a:c4:09:18:ba:79:18:
e9:86:da:e5:2d:73:f6:f9:9b:8d:5b:7e:85:4e:75:
0b:5f:22:c8:80:46:4f:40:e0:1b:cb:a3:2c:95:f9:
b0:43:ba:5c:cc:13:ae:9a:5f:85:17:cf:f2:4e:5f:
84:86:35:64:07:1e:eb:fc:3b:35:62:50:15:38:7e:
ae:2c:e4:28:59:02:7a:99:c4:61:d1:67:4b:2d:af:
df:bb:45:52:1f:0c:4a:9f:58:e4:c7:8a:74:1c:d1:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:50:94:7F:7E:3D:85:20:AC:7B:13:DD:0E:0B:FF:E1:B0:6C:7B
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.229.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7b:7d:f6:f1:8b:69:ad:de:18:e1:77:5d:63:4c:a4:e1:f2:
47:66:f8:15:0e:69:e7:93:17:ad:99:23:92:f9:1f:11:6f:64:
6b:bd:9c:72:5f:b7:e2:63:b2:26:74:09:b7:ac:97:0e:76:1e:
93:50:8e:c7:f6:bd:09:61:f5:6a:8f:37:03:9d:f4:cc:c4:e9:
7e:59:6c:15:05:67:80:1b:06:73:8b:2c:36:88:fd:38:6f:b3:
ea:e1:a2:96:e8:fb:5a:a4:c2:6e:92:01:9f:ca:51:8d:e0:d3:
72:dc:7a:bc:90:ce:d3:a6:cb:78:76:0d:54:a6:5a:3d:39:1a:
56:21:ae:e9:15:21:39:e4:ea:35:57:d2:79:0b:ff:07:90:71:
f1:8e:4d:21:e5:c8:72:07:ef:f6:f3:a5:06:8c:c0:1a:ee:fb:
5a:4e:08:c4:41:fa:ca:77:70:9c:b7:cc:22:a4:a8:ce:bb:97:
fb:ab:4e:44:dd:b4:e7:65:b0:d6:82:7e:52:56:14:76:2f:7d:
4c:9d:13:4d:a2:fe:77:b3:b7:5b:8e:dd:9c:39:b2:d9:57:ea:
67:75:0d:f9:3a:f8:60:8e:63:2b:44:a0:42:6a:24:03:c7:5b:
77:76:4d:77:1b:3d:e6:35:38:68:02:b3:f5:2a:cb:d2:3d:ca:
9a:56:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:08:02 2025 by rpki-client