Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
File: F0F8C7EC84A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier: YpD2XPn27FGd8y3QhQ25I+nsaY7otnEMJOLFL2E+wd4=
Subject key identifier: AC:1A:5B:C3:F3:51:6B:68:51:4A:75:50:D2:6D:54:DE:9B:CF:79:59
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2974
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:52:57 +0000
ROA not before: Tue 31 Dec 2024 15:52:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140032
IP address blocks: 49.229.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10612 (0x2974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:52:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741359-b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:16:b5:c4:2b:8a:2c:a5:aa:fb:6c:50:e0:
09:1d:f4:a6:c0:3e:34:2e:ad:f0:37:e6:0f:86:95:
71:8c:17:59:75:49:59:f2:c0:53:9d:c4:eb:5c:70:
42:c8:77:b1:0a:f8:a9:58:ff:68:9e:f3:7b:67:47:
dd:cf:d6:16:6c:f7:4b:e6:66:34:a7:3e:0a:a6:aa:
05:17:be:fc:e3:fe:8a:ff:fb:1b:eb:50:54:0e:15:
e9:b2:76:72:3a:f2:51:b1:70:50:1c:58:0c:52:9e:
1e:2c:11:89:ed:39:ac:15:de:ec:01:8f:08:13:e7:
ee:5d:47:46:a5:54:0c:d9:17:9e:38:98:f8:9b:73:
c4:bf:53:28:47:50:92:25:fb:d6:61:cf:f0:f3:d1:
eb:56:d7:34:1d:c9:ee:1a:9e:b2:6d:e3:c2:bc:75:
50:9a:b8:1e:a2:46:c3:8e:cb:10:73:c3:c7:3c:01:
57:4f:75:5f:4f:e4:f2:9a:d6:5e:40:30:1b:46:e6:
19:87:15:62:b3:e8:39:66:62:b5:76:53:8a:83:69:
3d:d7:9e:72:3c:c9:a3:82:4e:30:fc:d5:6f:74:1c:
e7:3d:bf:52:d5:5a:fc:48:b4:01:13:d7:68:b5:bc:
1d:ea:89:55:8b:e6:17:92:ae:83:19:b3:4d:f2:74:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:5B:C3:F3:51:6B:68:51:4A:75:50:D2:6D:54:DE:9B:CF:79:59
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:27:0c:68:5a:ea:63:ef:bd:07:7a:07:05:3b:ab:a1:a2:
5a:02:43:e2:cf:85:84:7a:1b:15:08:35:03:f9:3e:25:e9:d2:
07:68:ec:ed:a5:92:22:28:fb:e3:5b:7d:e5:92:f1:68:69:4d:
7f:07:e2:3a:62:8a:31:bc:be:fb:31:a8:ff:b8:86:6b:d2:a6:
29:0c:88:83:90:fa:8f:f6:25:b0:bd:de:f9:bb:7c:2a:8b:d9:
30:0e:e5:08:1d:cb:d8:86:2d:75:84:e4:2e:83:e4:09:fd:52:
04:80:67:a6:6d:de:4d:15:2c:43:ed:c2:1b:a0:0d:95:58:c3:
aa:8e:e4:c4:e8:50:a5:57:5c:20:13:fd:be:cf:5e:ac:d0:11:
2c:ba:47:b7:0a:7a:09:ef:0b:1d:b0:12:72:1d:7c:50:69:59:
5c:65:fb:e0:1c:36:08:bf:23:68:a1:e4:ab:80:49:43:8a:5b:
66:73:b3:ee:d5:95:44:65:42:6c:59:e5:65:af:56:4c:05:8e:
df:0f:ee:e6:ce:ae:e4:41:f8:6f:a6:ce:8f:59:be:15:39:15:
b4:6f:7d:90:fd:d3:c0:05:29:4e:ce:57:67:6a:1b:f1:b6:52:
20:18:72:59:4d:fe:2e:bd:72:66:79:fd:23:c2:cb:ac:1c:09:
a6:a7:23:08
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjQxMjMxMTU1MjU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MTM1OS1iODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwckWtcQriiylqvtsUOAJHfSmwD40Lq3wN+YPhpVxjBdZdUlZ8sBTncTrXHBC
yHexCvipWP9onvN7Z0fdz9YWbPdL5mY0pz4KpqoFF7784/6K//sb61BUDhXpsnZy
OvJRsXBQHFgMUp4eLBGJ7TmsFd7sAY8IE+fuXUdGpVQM2ReeOJj4m3PEv1MoR1CS
JfvWYc/w89HrVtc0HcnuGp6ybePCvHVQmrgeokbDjssQc8PHPAFXT3VfT+TymtZe
QDAbRuYZhxVis+g5ZmK1dlOKg2k9155yPMmjgk4w/NVvdBznPb9S1Vr8SLQBE9do
tbwd6olVi+YXkq6DGbNN8nTCtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKwaW8Pz
UWtoUUp1UNJtVN6bz3lZMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjBGOEM3RUM4
NEE1MTFFQUIzMzU2MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAx5SwwDQYJKoZIhvcNAQELBQADggEBAIMtJwxoWupj770H
egcFO6uholoCQ+LPhYR6GxUINQP5PiXp0gdo7O2lkiIo++NbfeWS8WhpTX8H4jpi
ijG8vvsxqP+4hmvSpikMiIOQ+o/2JbC93vm7fCqL2TAO5Qgdy9iGLXWE5C6D5An9
UgSAZ6Zt3k0VLEPtwhugDZVYw6qO5MToUKVXXCAT/b7PXqzQESy6R7cKegnvCx2w
EnIdfFBpWVxl++AcNgi/I2ih5KuASUOKW2Zzs+7VlURlQmxZ5WWvVkwFjt8P7ubO
ruRB+G+mzo9ZvhU5FbRvfZD908AFKU7OV2dqG/G2UiAYcllN/i69cmZ5/SPCy6wc
CaanIwg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:12 2025 by rpki-client