Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa
File: 50C07FEE992611EC94DB646EC4F9AE02.roa (raw, json)
Hash identifier: YZmd2iLNXNJxv6AncAala+XytTYlnd/yuwwFnEreN6c=
Subject key identifier: CC:7C:94:9B:7C:CC:2D:B4:D6:CF:01:B9:9E:07:6E:2E:FD:BC:EC:F7
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 07C4
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa
Signing time: Thu 27 Mar 2025 07:24:24 +0000
ROA not before: Thu 27 Mar 2025 07:24:24 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55766
IP address blocks: 43.243.238.0/23 maxlen: 24
43.252.96.0/22 maxlen: 24
103.22.184.0/22 maxlen: 24
103.24.242.0/23 maxlen: 24
103.27.152.0/22 maxlen: 24
103.224.210.0/24 maxlen: 24
115.165.172.0/24 maxlen: 24
118.107.144.0/24 maxlen: 24
118.107.151.0/24 maxlen: 24
175.184.192.0/24 maxlen: 24
175.184.194.0/24 maxlen: 24
175.184.198.0/24 maxlen: 24
175.184.218.0/24 maxlen: 24
175.184.219.0/24 maxlen: 24
175.184.220.0/24 maxlen: 24
223.29.240.0/22 maxlen: 24
2400:f280::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4
Validity
Not Before: Mar 27 07:24:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67e4fd28-c79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:b4:6c:cc:d3:b2:35:fe:5c:b3:cd:74:a0:
c6:04:78:d6:32:85:8f:e3:a5:a6:c9:22:34:be:cd:
20:43:5c:3f:3e:4f:cd:96:9a:c8:6b:dc:2b:1c:cb:
09:a0:43:57:28:0e:d1:40:29:e1:5b:eb:63:76:1b:
6b:2d:06:a9:07:3f:38:83:55:af:b0:c0:7a:b7:21:
29:88:68:ca:3b:c3:e0:c5:15:e9:20:b8:b3:0e:93:
e2:91:19:57:76:1a:5d:01:6d:dc:64:cf:6c:a4:28:
42:ca:60:79:73:6b:14:d3:59:99:8a:ab:ac:98:ed:
f4:ef:01:31:d4:f8:0e:6d:35:f0:e7:e6:39:0d:83:
7a:77:ee:cb:a9:f2:08:c4:87:ec:b5:bb:89:b6:82:
7e:ec:66:79:b3:5b:7b:41:3b:37:0d:86:b8:28:63:
28:32:45:31:56:1e:f9:0e:1d:3e:e9:4b:34:21:87:
18:66:23:f7:4f:e7:52:e4:dd:34:e7:40:ba:ca:a1:
ef:8a:f7:7d:b8:79:95:60:6b:36:b1:30:cf:f3:55:
c4:5f:ef:1c:21:1c:04:95:1b:02:24:bf:a6:6c:f7:
16:c2:99:29:d3:29:26:96:5c:e6:8a:92:9c:d2:13:
55:da:24:21:56:7e:bb:c1:6b:3b:f3:7e:8c:35:6e:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:94:9B:7C:CC:2D:B4:D6:CF:01:B9:9E:07:6E:2E:FD:BC:EC:F7
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.238.0/23
43.252.96.0/22
103.22.184.0/22
103.24.242.0/23
103.27.152.0/22
103.224.210.0/24
115.165.172.0/24
118.107.144.0/24
118.107.151.0/24
175.184.192.0/24
175.184.194.0/24
175.184.198.0/24
175.184.218.0-175.184.220.255
223.29.240.0/22
IPv6:
2400:f280::/32
Signature Algorithm: sha256WithRSAEncryption
09:b8:86:8e:9e:89:61:70:bf:6f:a4:52:a3:a6:00:4f:f3:cc:
4c:fe:23:f7:92:7c:d6:d3:9f:f2:b3:ba:5e:80:dd:bf:a2:f5:
bb:01:79:f2:ef:8b:c6:89:52:0c:d1:e5:d1:96:e6:46:7f:d3:
8a:fd:c5:e9:af:47:9b:bc:30:c6:30:b7:50:a8:3e:99:38:80:
ec:4a:18:ca:a3:a8:c2:59:eb:ac:f9:e3:14:d2:21:00:17:5f:
07:0f:65:87:1a:22:d2:f5:b9:bd:02:2f:87:e2:b6:19:9b:1b:
70:fd:91:d6:11:7d:e3:79:89:30:d9:b8:72:23:4b:37:5d:78:
9e:d0:dd:2c:82:8c:eb:59:5b:9b:00:73:99:1d:95:5f:58:b6:
c1:8f:d7:22:ac:cc:65:5a:97:46:20:d7:0b:fb:5f:da:9a:83:
57:87:45:29:87:e3:f1:f8:fa:06:12:c3:05:5b:c9:20:9b:c2:
4f:b7:25:c6:4d:aa:88:9b:a0:91:58:21:d3:77:dc:72:70:cc:
37:ab:c9:b3:94:e6:e2:cf:5a:d4:31:84:e6:e1:87:fd:2f:b6:
41:3a:89:1b:fa:5e:c8:25:88:89:e3:62:2f:ac:6f:be:d7:e1:
ec:6d:ef:c3:2f:b2:21:0b:b5:7a:5d:8f:56:a0:0b:0f:0f:70:
f1:7b:6a:fe
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5
RDQyREIxOTgwHhcNMjUwMzI3MDcyNDI0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0ZmQyOC1jNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRu0bMzTsjX+XLPNdKDGBHjWMoWP46WmySI0vs0gQ1w/Pk/NlprIa9wrHMsJ
oENXKA7RQCnhW+tjdhtrLQapBz84g1WvsMB6tyEpiGjKO8PgxRXpILizDpPikRlX
dhpdAW3cZM9spChCymB5c2sU01mZiqusmO307wEx1PgObTXw5+Y5DYN6d+7LqfII
xIfstbuJtoJ+7GZ5s1t7QTs3DYa4KGMoMkUxVh75Dh0+6Us0IYcYZiP3T+dS5N00
50C6yqHvivd9uHmVYGs2sTDP81XEX+8cIRwElRsCJL+mbPcWwpkp0ykmllzmipKc
0hNV2iQhVn67wWs7836MNW6OYQIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFMx8lJt8
zC201s8BuZ4Hbi79vOz3MB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD
MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDUwQTQvREQ0NzM2OTgwQzM2MTFFQkE0RTQ5RTIxQzRGOUFFMDIvNTBDMDdGRUU5
OTI2MTFFQzk0REI2NDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYQGCCsGAQUFBwEHAQH/
BHUwczBiBAIAATBcAwQBK/PuAwQCK/xgAwQCZxa4AwQBZxjyAwQCZxuYAwQAZ+DS
AwQAc6WsAwQAdmuQAwQAdmuXAwQAr7jAAwQAr7jCAwQAr7jGMAwDBAGvuNoDBACv
uNwDBALfHfAwDQQCAAIwBwMFACQA8oAwDQYJKoZIhvcNAQELBQADggEBAAm4ho6e
iWFwv2+kUqOmAE/zzEz+I/eSfNbTn/Kzul6A3b+i9bsBefLvi8aJUgzR5dGW5kZ/
04r9xemvR5u8MMYwt1CoPpk4gOxKGMqjqMJZ66z54xTSIQAXXwcPZYcaItL1ub0C
L4fithmbG3D9kdYRfeN5iTDZuHIjSzddeJ7Q3SyCjOtZW5sAc5kdlV9YtsGP1yKs
zGVal0Yg1wv7X9qag1eHRSmH4/H4+gYSwwVbySCbwk+3JcZNqoiboJFYIdN33HJw
zDerybOU5uLPWtQxhObhh/0vtkE6iRv6XsgliInjYi+sb77X4ext78MvsiELtXpd
j1agCw8PcPF7av4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:33 2025 by rpki-client