Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa
File: 3FC1B85E431811EA84E68121C4F9AE02.roa (raw, json)
Hash identifier: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=
Subject key identifier: 70:4C:9D:CD:52:23:48:B4:4B:0C:F9:A6:01:0F:D4:FF:49:46:F7:AC
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0A9F
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa
Signing time: Thu 24 Oct 2024 19:58:24 +0000
ROA not before: Thu 24 Oct 2024 19:58:24 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 17408
IP address blocks: 58.84.4.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2719 (0xa9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC
Validity
Not Before: Oct 24 19:58:24 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671aa6df-7a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:64:ec:e9:e6:4b:0c:f5:20:28:fe:68:68:
90:bb:e2:56:2f:da:0b:1a:61:a6:19:85:7c:b7:ff:
35:1a:56:44:b9:21:22:1f:c1:52:9a:10:48:04:e2:
8a:37:c2:46:b7:ea:52:9b:59:81:8c:9e:40:02:34:
29:45:68:ea:83:b1:21:68:e5:2b:8c:8e:e9:56:b8:
a5:54:dd:16:e3:41:65:da:e0:2d:c9:9a:8c:53:1c:
fb:38:a1:63:eb:14:82:08:37:c9:b6:1a:be:37:8d:
2e:0a:a1:20:58:48:01:10:28:41:51:9b:57:4e:a4:
e3:70:56:d6:e0:de:a1:94:57:1e:89:d0:8c:07:cb:
82:44:fe:0b:4d:44:ba:ca:b9:05:c4:2a:2c:de:0d:
d0:b0:3b:c0:6d:6c:f5:ff:e9:95:f0:69:e3:69:08:
bb:01:fa:7f:b2:7b:3e:93:03:1f:48:e2:d6:c4:19:
94:d7:3d:2c:47:f7:49:cc:71:9a:0c:a2:94:93:2d:
ef:84:7e:69:44:f6:7a:eb:6d:20:ad:4a:50:37:7f:
dc:2f:2f:50:56:2f:fc:38:de:27:44:63:ad:90:82:
08:4a:39:ee:fa:fc:11:b8:4e:f7:15:ad:24:c1:13:
73:60:4c:c9:34:ea:64:98:c7:a6:07:ae:e7:8f:fa:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:9D:CD:52:23:48:B4:4B:0C:F9:A6:01:0F:D4:FF:49:46:F7:AC
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5f:35:ea:be:25:2c:bc:be:06:27:0c:53:76:fa:91:83:d1:
32:b9:56:ac:42:2a:02:dc:54:a3:b5:ec:1e:e2:96:64:2b:72:
26:ca:9c:2f:42:7b:4d:55:47:9b:e0:5f:b0:cc:7e:47:d9:66:
ff:00:55:0b:92:cb:33:be:22:16:89:d3:75:7b:01:d1:d2:4e:
b6:cb:c5:2f:37:8c:e6:b1:50:45:a2:5a:c9:16:e6:03:8c:eb:
cc:8b:d8:d9:84:47:c7:c9:dd:07:a3:e3:75:e1:4e:1b:f1:9f:
af:db:e5:55:5e:9f:6d:d3:6b:9c:12:45:a5:66:2a:fe:7d:f2:
4c:22:29:41:05:3f:4f:bc:40:3e:4c:da:38:fd:20:c9:ba:bd:
7a:0c:31:9f:7d:07:71:86:c2:35:e4:e9:c0:81:6d:4f:fe:ca:
35:9b:24:b2:64:19:6e:2a:41:6b:0b:2d:c2:fe:9a:3c:3d:ba:
0c:c1:53:97:eb:37:35:e1:fc:59:9b:dc:95:fa:e8:60:80:ad:
d8:bd:20:98:02:2f:39:76:fd:d1:b9:7c:2f:82:6b:5d:77:ed:
83:13:c4:98:36:f7:a6:ce:d5:d3:54:db:ab:79:fb:78:47:d1:
39:84:ee:3c:2e:85:83:07:87:b6:19:29:2f:33:6e:79:17:1a:
ee:2a:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:33:07 2025 by rpki-client