Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
File: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (raw, json)
Hash identifier: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=
Subject key identifier: E7:DE:2C:53:81:35:C2:56:02:3E:27:97:84:13:4E:70:65:DC:9E:AB
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 34BF
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
Signing time: Tue 04 Mar 2025 15:31:04 +0000
ROA not before: Tue 04 Mar 2025 15:31:04 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45642
IP address blocks: 58.82.178.0/24 maxlen: 24
218.100.66.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13503 (0x34bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A
Validity
Not Before: Mar 4 15:31:04 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c71cb7-3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:55:f8:98:0f:84:f3:ff:d9:01:27:dc:62:
e3:53:59:16:69:19:98:1c:0a:73:53:29:07:98:2d:
2a:cd:ea:ad:dc:06:a9:17:cf:a7:7a:ce:79:86:98:
9d:f5:0a:c0:e9:fa:6c:90:bf:a7:b4:56:93:6d:09:
45:2c:c6:95:79:ab:a6:b7:b8:4b:8e:6b:61:a9:1d:
00:82:3e:1c:b1:c7:86:78:48:e4:b2:fa:26:98:96:
49:6f:8f:3e:83:c4:24:79:fa:85:58:84:69:3b:35:
87:b3:40:fa:0d:b1:d7:36:cf:95:7c:fd:f2:fb:0a:
97:95:4f:8b:35:ef:7b:d8:6e:d5:87:9f:b6:d4:d9:
19:47:35:db:dc:b7:b4:a8:49:54:67:99:d4:27:54:
9e:46:c3:f8:8f:40:c5:ec:51:1b:57:6d:a8:80:11:
67:df:6d:6d:56:84:b9:aa:b0:4c:90:96:ab:59:93:
0f:7b:b1:04:6d:80:d5:c4:73:e3:ee:4a:1c:2a:7d:
a0:1e:ee:01:e1:75:50:a9:b0:df:5e:88:5d:ed:9f:
36:85:cd:85:0a:40:ca:fc:0a:a1:16:54:78:de:d1:
af:28:75:f7:0d:b9:63:35:0c:70:38:fe:47:9d:b7:
62:0b:f3:0e:6c:8c:45:0c:a1:9f:8a:5d:17:18:56:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:2C:53:81:35:C2:56:02:3E:27:97:84:13:4E:70:65:DC:9E:AB
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.82.178.0/24
218.100.66.0/24
Signature Algorithm: sha256WithRSAEncryption
81:54:72:19:76:2c:41:d4:b3:7a:39:86:29:de:05:24:cd:fe:
8c:78:51:88:9b:3f:41:cf:ac:73:70:75:c7:1c:b8:72:71:8f:
2c:f2:b8:35:67:5f:3c:2e:13:9c:d7:a9:52:a9:12:db:79:0e:
79:07:ec:73:4b:c4:94:1c:15:a7:42:4a:08:57:f0:94:83:e7:
62:70:74:f1:28:d7:90:2c:5b:6a:74:99:39:72:eb:d1:5f:3a:
b4:0b:93:54:7e:65:b7:e8:cd:98:74:f1:d4:77:86:9f:2c:cc:
ee:92:2d:ae:14:94:19:65:46:cc:23:9b:59:a4:c2:bb:f9:e2:
d4:c2:a6:f3:37:26:a3:72:23:fa:ed:93:bc:3e:e9:c9:1a:0d:
08:04:9a:91:0f:65:66:24:e1:80:50:b0:7f:c9:cf:26:ca:5c:
c0:9d:32:88:a1:0b:21:f8:66:18:c2:60:56:90:d0:2a:be:e0:
97:ac:6a:de:ff:03:22:81:95:02:76:7c:ea:43:58:61:98:81:
07:ae:10:9e:60:e9:bb:e8:4d:00:1d:d3:58:70:f5:18:2f:a8:
62:30:5b:86:21:2a:db:14:f6:21:86:17:60:28:a3:db:38:eb:
a9:51:42:42:d6:50:36:88:f9:73:c8:cb:7b:08:b7:02:c2:ac:
e2:01:13:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjUwMzA0MTUzMTA0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M3MWNiNy0zOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRhV+JgPhPP/2QEn3GLjU1kWaRmYHApzUykHmC0qzeqt3AapF8+nes55hpid
9QrA6fpskL+ntFaTbQlFLMaVeaumt7hLjmthqR0Agj4csceGeEjksvommJZJb48+
g8QkefqFWIRpOzWHs0D6DbHXNs+VfP3y+wqXlU+LNe972G7Vh5+21NkZRzXb3Le0
qElUZ5nUJ1SeRsP4j0DF7FEbV22ogBFn321tVoS5qrBMkJarWZMPe7EEbYDVxHPj
7kocKn2gHu4B4XVQqbDfXohd7Z82hc2FCkDK/AqhFlR43tGvKHX3DbljNQxwOP5H
nbdiC/MObIxFDKGfil0XGFbfhwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOfeLFOB
NcJWAj4nl4QTTnBl3J6rMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvNTg2QjVEOUVE
OUY4MTFFOUE2ODc0RjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAA6UrIDBADaZEIwDQYJKoZIhvcNAQELBQADggEBAIFUchl2
LEHUs3o5hineBSTN/ox4UYibP0HPrHNwdcccuHJxjyzyuDVnXzwuE5zXqVKpEtt5
DnkH7HNLxJQcFadCSghX8JSD52JwdPEo15AsW2p0mTly69FfOrQLk1R+ZbfozZh0
8dR3hp8szO6SLa4UlBllRswjm1mkwrv54tTCpvM3JqNyI/rtk7w+6ckaDQgEmpEP
ZWYk4YBQsH/JzybKXMCdMoihCyH4ZhjCYFaQ0Cq+4Jesat7/AyKBlQJ2fOpDWGGY
gQeuEJ5g6bvoTQAd01hw9RgvqGIwW4YhKtsU9iGGF2Aoo9s466lRQkLWUDaI+XPI
y3sItwLCrOIBE5I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:39 2025 by rpki-client