Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa
File: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (raw, json)
Hash identifier: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=
Subject key identifier: 5A:9D:07:2F:54:B5:14:5C:09:A4:BE:D6:84:C0:D7:34:59:72:E8:21
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 040E
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa
Signing time: Mon 02 Dec 2024 09:26:48 +0000
ROA not before: Mon 02 Dec 2024 09:26:48 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 1239
IP address blocks: 113.20.48.0/20 maxlen: 20
223.29.128.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73
Validity
Not Before: Dec 2 09:26:48 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674d7d58-5c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:45:b8:f9:46:6d:f3:f7:91:d7:91:eb:78:
90:53:a4:2c:57:e0:d8:c3:7b:ea:b8:79:b4:cf:8c:
80:85:36:68:19:28:96:1d:03:79:d5:e1:db:2d:92:
d0:c9:75:78:33:6b:a9:07:20:59:d6:8f:25:44:e3:
3b:b9:ea:85:3d:8f:e5:e2:90:7a:01:02:af:aa:10:
d6:f3:f4:b2:33:c2:f8:94:64:bf:1f:42:74:5c:24:
ad:23:ba:75:db:89:3f:60:ef:fd:f7:f5:52:ad:de:
eb:9e:43:4b:11:bf:1b:14:cc:9a:e3:8c:b3:f4:32:
33:43:ca:e3:c7:dd:c6:dc:d9:a5:90:9e:9e:fe:0f:
bd:75:39:e7:4c:d6:eb:ce:70:6b:6c:64:be:a2:0e:
bb:fb:40:0d:ab:61:65:2b:7c:33:0a:b7:12:ec:bf:
a2:e0:f6:b9:5d:d4:cd:7a:2f:03:0d:79:d0:b1:e1:
ef:bd:76:b2:c4:98:0e:b1:25:21:6a:cb:77:72:f2:
3b:86:5b:f3:c6:4d:3a:5e:62:02:34:50:11:ca:f1:
e3:0b:ce:81:56:0a:18:1e:6d:30:99:fa:4b:fd:2a:
f4:58:15:88:e1:48:48:04:34:92:fd:be:78:16:fe:
46:9e:8c:62:5f:73:af:26:de:de:30:69:16:e4:81:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:07:2F:54:B5:14:5C:09:A4:BE:D6:84:C0:D7:34:59:72:E8:21
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.20.48.0/20
223.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:96:7d:fb:39:55:74:c4:f5:5c:ac:b3:03:76:3d:2e:0c:08:
82:0c:ee:06:9c:b5:2d:0f:3d:67:ce:da:37:03:b2:97:c7:db:
ed:76:70:66:bf:07:95:8e:f8:aa:9a:96:86:c3:1f:7d:11:21:
b3:98:f5:fd:67:5c:a7:65:ab:07:72:30:d9:6b:48:d2:4a:f4:
63:d9:de:4b:e7:2a:d4:20:f4:9a:34:d9:e0:31:7c:07:59:9b:
d2:e3:e0:1d:78:a5:70:a0:9d:04:cc:5b:2c:a5:25:fa:94:97:
e0:be:85:13:60:a7:05:b4:db:7f:73:61:11:9f:c9:75:a7:b4:
dc:e6:bb:8a:06:1b:ab:2d:11:1e:c6:16:fa:24:18:12:78:5f:
ca:92:59:fe:79:36:97:c5:74:98:23:54:ed:61:1c:5b:fa:27:
d4:07:91:d5:c9:e9:bb:a1:53:ec:99:47:e4:6f:14:08:57:70:
f6:70:bf:40:e3:8b:86:ff:10:a6:cd:3e:58:a5:7e:33:81:30:
e3:72:bd:bc:4b:22:c2:0d:fe:8d:a5:ab:fc:8d:26:1f:82:f9:
0c:e6:5e:c1:f8:86:46:25:04:09:70:e3:ee:db:6d:af:c6:4e:
94:1f:93:fa:54:f1:ab:bf:1e:49:1f:9d:98:b1:e7:af:8f:7d:
94:9b:ec:f6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjQxMjAyMDkyNjQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkN2Q1OC01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzaBFuPlGbfP3kdeR63iQU6QsV+DYw3vquHm0z4yAhTZoGSiWHQN51eHbLZLQ
yXV4M2upByBZ1o8lROM7ueqFPY/l4pB6AQKvqhDW8/SyM8L4lGS/H0J0XCStI7p1
24k/YO/99/VSrd7rnkNLEb8bFMya44yz9DIzQ8rjx93G3NmlkJ6e/g+9dTnnTNbr
znBrbGS+og67+0ANq2FlK3wzCrcS7L+i4Pa5XdTNei8DDXnQseHvvXayxJgOsSUh
ast3cvI7hlvzxk06XmICNFARyvHjC86BVgoYHm0wmfpL/Sr0WBWI4UhIBDSS/b54
Fv5GnoxiX3OvJt7eMGkW5IEA7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFqdBy9U
tRRcCaS+1oTA1zRZcughMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvOEUxMDc5REVC
MDhGMTFFRjhFM0M0RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEBAGqWffs5
VXTE9VysswN2PS4MCIIM7gactS0PPWfO2jcDspfH2+12cGa/B5WO+KqalobDH30R
IbOY9f1nXKdlqwdyMNlrSNJK9GPZ3kvnKtQg9Jo02eAxfAdZm9Lj4B14pXCgnQTM
WyylJfqUl+C+hRNgpwW0239zYRGfyXWntNzmu4oGG6stER7GFvokGBJ4X8qSWf55
NpfFdJgjVO1hHFv6J9QHkdXJ6buhU+yZR+RvFAhXcPZwv0Dji4b/EKbNPlilfjOB
MONyvbxLIsIN/o2lq/yNJh+C+QzmXsH4hkYlBAlw4+7bba/GTpQfk/pU8au/Hkkf
nZix56+PfZSb7PY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:17 2025 by rpki-client