Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa
File: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (raw, json)
Hash identifier: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=
Subject key identifier: 83:3B:6E:DA:37:0E:4F:20:DD:E6:F8:00:9C:A3:D0:F5:EF:A2:5F:54
Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Certificate serial: 345C
Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa
Signing time: Thu 20 Feb 2025 15:20:46 +0000
ROA not before: Thu 20 Feb 2025 15:20:46 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 23838
IP address blocks: 203.170.56.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13404 (0x345c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149905
Validity
Not Before: Feb 20 15:20:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b7484e-f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:1d:d6:4b:df:6c:21:85:1c:d5:28:c8:c8:
2b:4d:63:c5:ee:45:8f:2e:2f:0a:13:05:2d:03:0a:
55:df:97:df:ae:0c:50:57:a4:15:20:f5:d3:6a:ec:
f1:e5:50:91:49:a4:a7:38:70:c9:f4:0d:ae:b8:7d:
b0:3f:7c:81:14:71:23:cf:12:0d:55:43:20:a2:92:
67:34:19:f6:2b:f2:e2:af:ef:17:54:dc:1f:64:9c:
14:1d:50:7b:e7:c2:b9:1d:f1:30:fc:0e:23:65:8e:
2b:46:0b:68:df:5c:66:69:37:56:4f:51:d0:b7:35:
fa:b3:3d:58:1d:ab:1b:82:22:2f:e6:4b:4c:b8:49:
8a:66:ce:4c:a8:ba:56:96:7b:36:cb:eb:e8:0f:9b:
74:19:dc:57:22:58:1c:ee:15:fa:92:e0:d8:b0:f0:
03:b2:a9:fc:77:b6:48:8c:74:d7:5a:3b:8d:d2:c3:
59:03:02:5c:a1:23:7d:57:98:d0:76:10:c1:86:ea:
37:3e:6d:90:8b:4b:12:65:b2:17:8c:1b:a7:e6:80:
8d:26:bd:94:c0:74:e4:5b:05:2a:91:df:08:9e:f4:
25:8a:a9:97:7b:f5:d9:07:f6:9d:26:6f:2a:a3:ee:
56:81:ad:2a:6d:4e:ce:af:75:b6:88:cc:19:1d:f3:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:6E:DA:37:0E:4F:20:DD:E6:F8:00:9C:A3:D0:F5:EF:A2:5F:54
X509v3 Authority Key Identifier:
keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.170.56.0/24
Signature Algorithm: sha256WithRSAEncryption
70:33:8f:44:a1:6f:49:b8:12:66:ee:75:c8:1a:a5:08:b8:86:
71:91:07:c5:e3:4d:03:c5:52:2e:74:14:ec:39:10:2f:15:f9:
5e:85:36:d5:ea:ef:f8:ae:42:cd:b9:49:76:c9:13:bc:64:d0:
a0:24:61:d2:3e:10:39:b5:a2:a2:ee:31:5b:eb:5f:04:ee:6f:
94:43:c2:84:95:a7:0c:05:1e:08:e1:70:eb:e5:8a:2d:7a:b5:
af:78:01:5c:ff:23:7c:68:e5:be:80:29:d8:20:68:11:62:12:
75:46:c4:24:d0:a1:f8:ba:1d:7f:40:8d:5c:c1:6e:8d:5e:e7:
3a:28:c2:2a:19:6c:3b:fb:83:ae:b9:15:88:bd:5c:ec:e5:ad:
e9:4c:87:27:dd:87:39:3f:b4:51:52:c6:9d:56:8d:28:44:d5:
9e:86:e9:da:d1:82:b4:53:03:27:8f:46:45:fc:08:fb:8d:14:
ee:35:1b:34:ed:c6:a8:2c:94:c8:af:f9:27:09:bf:87:e1:d6:
00:20:13:8e:84:1b:a8:78:c7:dc:d7:36:67:5a:d4:a9:c6:47:
94:47:44:4b:d1:94:96:30:97:8c:e1:ab:38:ac:d2:cd:8f:4c:
00:69:a0:77:01:1b:2d:f1:a4:96:94:79:2f:0e:9d:0f:94:bf:
98:5f:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:53:59 2025 by rpki-client