Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/7506CCA8EF4C11EF88100B2FC4F9AE02.roa
File: 7506CCA8EF4C11EF88100B2FC4F9AE02.roa (raw, json)
Hash identifier: WkcQcIyUAJCCCfr58nqjCTqc3ogMhKQbOnh4Zb1oCMM=
Subject key identifier: 4D:AC:57:4B:DD:03:A0:E2:5E:7C:B7:FC:48:8B:45:4E:93:0B:C8:AF
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0313
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/7506CCA8EF4C11EF88100B2FC4F9AE02.roa
Signing time: Thu 20 Feb 2025 05:35:13 +0000
ROA not before: Thu 20 Feb 2025 05:35:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 132742
IP address blocks: 43.241.152.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C
Validity
Not Before: Feb 20 05:35:13 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b6bf11-a084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:25:25:11:29:a9:c8:58:84:a7:21:dc:ba:
8e:ce:1b:e7:35:85:7b:40:85:61:23:86:ef:a5:26:
d2:f6:84:d5:89:6a:9e:94:63:28:59:9f:9f:f9:a4:
69:d8:11:25:6e:17:7c:14:69:ba:97:d7:c6:79:9d:
3c:cc:99:ef:08:8a:09:d0:da:0d:4c:c1:0c:c5:08:
f9:7b:e2:8f:71:32:db:c4:05:cc:b3:24:49:b1:75:
e0:af:ac:f2:35:77:2d:d7:a1:4f:ca:1a:38:5a:41:
2a:7a:76:64:36:69:e0:a9:9a:b0:ef:01:60:bc:d1:
ae:c4:99:0d:c9:59:0e:7b:d4:ee:6b:85:17:63:05:
96:95:a8:17:a5:81:11:c1:09:84:e7:4e:f1:86:e8:
1d:87:17:cd:33:f6:89:29:cc:03:9a:00:f2:c0:8f:
4a:05:c1:12:49:d2:27:94:73:d7:07:2d:c2:f3:79:
6d:48:d8:fd:22:ef:33:8c:c0:89:f0:e0:08:ed:f2:
bb:11:ca:5f:1c:17:74:cf:41:f3:d1:0c:13:22:9c:
7d:ae:74:c8:fd:97:bd:74:62:3b:4f:40:3d:b7:c3:
6a:79:1b:c2:d5:d4:2e:bf:5d:41:fa:8c:cb:b9:9b:
83:3b:f9:21:18:57:92:7a:87:13:5e:99:cd:45:65:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AC:57:4B:DD:03:A0:E2:5E:7C:B7:FC:48:8B:45:4E:93:0B:C8:AF
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/7506CCA8EF4C11EF88100B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:57:0d:f8:ed:7a:95:a6:45:50:80:67:10:b1:f3:fc:54:03:
c7:e4:b7:80:1c:4b:c6:58:53:93:7d:f5:f3:73:73:d7:68:c9:
24:ef:82:c2:8c:a1:ac:ec:56:e1:d1:99:58:22:51:73:96:c0:
ff:d2:b3:82:6f:ec:e5:2a:e5:24:36:94:66:2a:0d:b8:fc:56:
25:e6:b9:17:be:db:e6:65:7b:d1:0f:e5:16:63:6f:99:0a:8b:
42:f0:02:e0:e0:93:18:3b:51:07:58:12:cd:3e:6d:89:cd:08:
dc:49:e7:c8:cf:d9:cf:60:65:ed:50:57:e2:4b:52:65:cb:69:
72:61:2e:bf:f1:00:3a:0a:0e:33:8b:02:6a:00:ae:c7:95:e6:
cc:94:2a:33:78:ef:74:78:63:21:ce:f9:60:77:c1:81:6e:34:
b0:3b:f6:cc:b4:21:02:a8:5f:e4:98:aa:6e:1b:45:48:5d:c9:
31:87:00:1b:d6:a5:06:b1:81:e7:93:f9:82:85:e7:7f:af:10:
34:55:94:86:50:f6:80:01:81:58:6d:8a:99:45:09:f8:5b:0e:
60:6a:9c:5e:bd:d9:49:5d:a4:55:52:cd:59:06:b1:b7:26:df:
9f:3a:b0:1d:7b:76:08:75:8f:41:6b:f4:3c:dc:4d:b2:8f:11:
77:cc:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:38:05 2025 by rpki-client