Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D997857CF3ED11EF87EDD77FC4F9AE02.roa
File: D997857CF3ED11EF87EDD77FC4F9AE02.roa (raw, json)
Hash identifier: ecPoJsO0XSdZHeFTu2y6S2MdCbw5S6+l/87H0lwPXE8=
Subject key identifier: 54:6A:7C:31:40:05:8D:B9:4D:7A:BF:35:85:7C:D5:E3:47:02:15:E4
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 07A5
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D997857CF3ED11EF87EDD77FC4F9AE02.roa
Signing time: Wed 26 Feb 2025 03:00:36 +0000
ROA not before: Wed 26 Feb 2025 03:00:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.42.0/24 maxlen: 24
126.209.43.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.64.0/19 maxlen: 19
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.94.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA
Validity
Not Before: Feb 26 03:00:36 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67be83d3-5919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:0e:4f:3b:ab:e3:60:46:77:82:91:89:05:
00:c0:e3:a8:c8:7a:ce:5a:aa:ed:ef:87:0c:85:7c:
08:83:00:2f:7a:b7:fe:d0:8c:72:f1:a4:88:63:3c:
5f:6b:ca:c6:fd:7a:54:e2:60:9e:e9:6d:ab:f9:65:
24:fd:37:37:5f:60:aa:14:7d:92:3a:2c:2f:e9:b3:
b3:50:9c:c4:58:7b:49:a8:95:36:ea:cf:a3:83:ac:
d9:9e:f5:b7:ab:a4:66:c2:7a:bc:b9:4d:89:f9:16:
7a:b8:3b:07:e7:aa:33:c7:64:cd:71:45:66:73:d3:
7e:d1:10:ef:5b:e9:b4:57:96:42:22:17:2e:10:00:
f7:8f:61:35:91:a5:aa:00:09:3b:c1:6e:50:d0:1d:
7a:06:06:6a:ba:d7:f6:f9:d4:63:75:41:d5:21:1c:
31:b9:6c:cf:ac:03:3b:9a:d3:ae:69:50:ec:f1:78:
8f:42:f2:11:de:35:e2:e3:d2:57:f5:a7:6e:b6:d4:
32:a0:ed:fb:56:f2:7d:da:9f:f0:09:56:c3:82:0a:
7b:c8:a1:78:d5:88:9a:18:56:8a:0e:fc:5d:b4:f4:
7c:e2:f9:ec:c8:01:16:de:28:c8:ad:9e:ac:7b:fb:
05:3b:5a:09:4d:75:57:a3:ff:43:fd:c2:80:51:af:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:7C:31:40:05:8D:B9:4D:7A:BF:35:85:7C:D5:E3:47:02:15:E4
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D997857CF3ED11EF87EDD77FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.121.0-61.245.123.255
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.95.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
32:31:83:e3:c5:03:14:84:e4:f2:ee:4f:4a:b4:ac:0d:4f:ff:
fb:d5:58:d1:52:71:19:f8:0d:ab:99:60:ca:65:f3:30:ed:1e:
e6:f7:44:ad:79:2d:ca:b3:5f:c7:c0:fc:16:90:2d:56:96:d8:
ab:54:de:b2:dd:e3:d0:f6:96:08:45:ab:a3:c9:26:cf:93:32:
93:2a:bc:cc:6f:bd:a2:04:60:9c:0f:4b:52:a6:ca:36:54:80:
28:24:b0:9a:b3:f8:d9:15:02:15:96:d5:0f:21:cf:94:ad:31:
85:dd:09:d6:1d:b9:2a:ef:37:af:b3:54:10:d2:34:65:5e:58:
f4:26:b4:31:16:56:2a:0a:a0:0c:38:53:e7:9d:dc:6b:b4:e5:
f3:8b:4b:9d:b1:9a:13:4c:c0:60:f5:53:95:60:b5:51:0c:d9:
59:9a:c8:15:37:f4:a9:84:3e:2e:42:98:9b:f1:64:52:ff:fa:
1c:ff:4c:17:0f:e8:82:ae:bf:e2:a4:ab:26:23:c9:ea:49:b7:
15:6d:33:cb:66:db:2b:b3:e1:da:dd:9c:43:41:f3:49:32:45:
06:0f:fb:15:7c:39:17:ff:62:e8:0b:fb:27:6c:4c:bb:03:ed:
c1:1e:42:35:ce:cd:72:10:3c:1e:3e:53:72:93:b3:ef:9e:a7:
39:00:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:07:42 2025 by rpki-client