Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/E1F9AFD2088E11F0BC714F5BC4F9AE02.roa
File: E1F9AFD2088E11F0BC714F5BC4F9AE02.roa (raw, json)
Hash identifier: 3h6nLXTceX/wF05WFNA3RlbPikPnjhO2opac2OLMDxQ=
Subject key identifier: 5E:4A:DE:92:F2:E0:49:4B:22:7A:40:7B:9A:89:4F:B3:2D:9E:6F:47
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 07BD
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/E1F9AFD2088E11F0BC714F5BC4F9AE02.roa
Signing time: Thu 27 Mar 2025 03:26:54 +0000
ROA not before: Thu 27 Mar 2025 03:26:54 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132907
IP address blocks: 175.184.193.0/24 maxlen: 24
175.184.195.0/24 maxlen: 24
175.184.196.0/24 maxlen: 24
175.184.197.0/24 maxlen: 24
175.184.199.0/24 maxlen: 24
175.184.216.0/24 maxlen: 24
175.184.217.0/24 maxlen: 24
175.184.221.0/24 maxlen: 24
175.184.222.0/24 maxlen: 24
175.184.223.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4
Validity
Not Before: Mar 27 03:26:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67e4c57d-2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:32:f0:84:26:9f:d5:d9:da:1b:aa:c0:32:
d2:4f:16:2e:df:f5:e4:c4:54:6a:6f:3f:45:6a:04:
d3:1b:d8:17:f2:4f:1b:63:2c:27:df:9b:bb:e3:e8:
16:af:61:80:60:4f:6b:c1:68:d1:90:44:8e:1f:7c:
53:81:97:f5:86:07:aa:28:07:98:26:c0:1b:d7:d3:
f6:23:50:e0:05:54:1e:42:e3:ae:bc:71:d5:24:07:
65:ad:57:24:aa:fb:c3:15:54:c5:04:6d:42:38:63:
91:3a:0d:e1:b0:87:be:ef:0a:27:7b:c2:f3:79:3b:
26:04:38:5b:c7:fc:b7:62:ab:be:0c:9d:21:9a:0f:
2d:6d:22:f8:6e:fa:6c:9d:34:16:7b:47:67:32:54:
4d:e8:80:44:2d:cd:79:c5:7e:aa:67:b6:0c:d5:a6:
22:9d:26:8f:d5:cc:67:6d:90:8a:31:0a:98:6d:2e:
7f:08:56:bf:e1:4a:91:06:0f:fb:da:94:b0:c5:89:
46:77:60:dc:94:fa:a0:f8:ae:a1:ce:42:cd:9e:0e:
95:0f:7b:11:e3:52:63:97:e1:d3:58:12:53:88:76:
91:bc:af:90:23:88:27:8b:32:5a:ab:59:f8:d1:25:
10:04:a4:85:75:73:ae:0a:d8:32:9a:f7:f8:f6:63:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:DE:92:F2:E0:49:4B:22:7A:40:7B:9A:89:4F:B3:2D:9E:6F:47
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/E1F9AFD2088E11F0BC714F5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.184.193.0/24
175.184.195.0-175.184.197.255
175.184.199.0/24
175.184.216.0/23
175.184.221.0-175.184.223.255
Signature Algorithm: sha256WithRSAEncryption
1e:16:d6:f9:67:88:eb:3a:0a:99:c0:33:59:cc:fa:b9:8b:fb:
1c:c3:51:0a:ad:99:2f:5e:34:e5:6c:d0:fe:ed:4b:4b:e7:3d:
cd:e0:7c:ca:94:ea:a2:85:f3:8a:b1:6b:61:d8:8d:ca:af:46:
50:12:76:f0:c0:70:c8:86:d3:78:b9:b1:f4:4b:15:6f:74:cf:
8e:75:a5:46:dc:03:3b:73:15:bb:7a:91:11:f4:4a:1a:81:09:
1c:26:e3:bf:3c:40:2d:72:5f:5f:7d:0e:74:1d:5b:61:86:05:
66:6b:d0:f6:40:a6:4e:89:de:5a:be:83:5a:94:29:1a:ad:28:
8d:4c:08:88:98:04:70:a3:fc:ee:76:40:11:15:57:86:3f:62:
01:8b:9e:22:68:e6:2f:f6:20:90:c4:2b:ef:4b:a3:0e:fb:40:
da:6b:cf:32:ea:41:e3:bc:48:02:47:3c:b9:d6:e3:3d:64:32:
2d:6f:1d:00:10:a3:db:0e:55:4f:8e:e8:56:2a:78:d5:cc:70:
35:4d:9e:fe:25:ee:68:11:81:57:15:0d:b9:44:01:f8:34:81:
96:ab:34:4d:d6:a8:aa:f2:42:4e:06:b1:c5:f4:a9:08:df:fe:
57:43:b6:65:e0:ee:2e:4d:be:4e:68:eb:ce:a7:e0:97:74:0c:
d4:d9:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:51 2025 by rpki-client