Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa
File: FAB5FE6E101811EA9A30176EC4F9AE02.roa (raw, json)
Hash identifier: dY/k1RoDFoYbxGUxW8Yd7Na7yKGxnF2Cj2HCzStkWDM=
Subject key identifier: DE:AC:25:43:8A:6A:B7:43:AC:5C:71:A9:58:2E:C4:92:80:44:A4:37
Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial: 33C1
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa
Signing time: Wed 10 Apr 2024 14:20:09 +0000
ROA not before: Wed 10 Apr 2024 14:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38712
IP address blocks: 116.212.104.0/21 maxlen: 24
120.50.0.0/19 maxlen: 19
120.50.0.0/20 maxlen: 24
120.50.16.0/21 maxlen: 24
120.50.24.0/23 maxlen: 24
120.50.26.0/23 maxlen: 24
120.50.28.0/22 maxlen: 24
2400:5800::/32 maxlen: 32
2400:5800:4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13249 (0x33c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915060F
Validity
Not Before: Apr 10 14:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6616a018-3174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:44:c1:1a:58:15:49:2f:db:37:55:10:c6:
4b:83:18:9b:66:d5:1f:9e:71:c9:4c:90:a9:e4:23:
22:bb:27:1b:44:91:43:17:20:24:57:16:ec:11:21:
c1:76:f7:6a:48:26:5a:e8:85:91:f1:ed:4c:43:36:
df:f8:43:3c:43:40:bc:ec:92:55:b5:00:8b:27:1e:
91:12:67:81:b5:c1:af:1b:f2:19:3b:0b:d7:65:7e:
df:24:77:ee:61:52:60:14:80:98:e1:ea:d8:74:f9:
95:09:ed:56:5c:ba:73:38:57:b5:24:0c:35:7e:ee:
86:b0:02:c7:1d:64:1f:24:e0:38:04:8c:a1:da:e8:
12:a5:ea:4c:2d:18:27:4a:e8:c2:35:00:d6:46:4b:
23:4c:da:0f:5c:0d:47:f8:a5:4e:07:55:57:c0:88:
14:a6:98:09:43:81:cd:ff:bd:1d:7d:93:0e:53:e4:
37:42:41:8e:03:0f:a6:b1:64:72:cb:8f:0b:ed:48:
c3:fb:63:fe:6d:4e:3b:e8:f5:0e:20:ac:dc:58:f4:
44:db:6d:bf:b0:b4:ea:5b:b8:8f:80:4a:65:9c:1d:
3b:a8:fd:ae:ed:dc:dc:29:e6:a9:6e:d8:1f:3c:c6:
80:b3:0a:6f:bd:eb:eb:de:e0:93:e2:03:09:f5:d4:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:25:43:8A:6A:B7:43:AC:5C:71:A9:58:2E:C4:92:80:44:A4:37
X509v3 Authority Key Identifier:
keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.212.104.0/21
120.50.0.0/19
IPv6:
2400:5800::/32
Signature Algorithm: sha256WithRSAEncryption
50:36:7d:3e:4b:4a:a8:84:1c:60:2c:7f:a8:dc:a5:42:04:3c:
0d:f5:32:e0:7a:9e:fb:da:ad:20:32:78:c8:b8:a1:3f:2b:fa:
4c:ee:f6:b2:f6:f9:6f:fd:85:a5:aa:f7:5d:ff:62:fd:9f:f8:
9c:3a:6e:71:47:ba:4e:7e:cf:b3:ac:df:3f:89:82:31:07:7a:
01:0d:48:63:41:97:77:b5:70:41:b8:5d:84:57:c0:10:e2:56:
7e:4d:d5:93:09:44:ee:77:f8:76:37:3b:19:0d:51:f1:d3:5c:
fc:7f:b9:4d:f6:ea:cf:7f:3d:ca:77:37:9d:91:fe:cb:3c:03:
56:7d:98:ee:3f:9e:c6:dd:61:3b:cd:ac:6a:59:54:3f:7f:35:
8e:db:fe:64:fd:85:ba:05:58:ed:37:5b:dd:8a:b7:cc:9f:77:
64:24:f3:05:0c:07:a8:fd:e3:28:00:c4:47:05:a9:69:da:2d:
15:f8:05:20:f8:8d:ff:b5:ab:c9:90:d9:17:1c:22:23:5b:6d:
80:36:14:98:c1:39:41:29:cd:4d:31:66:b2:9b:cf:bb:22:1f:
6d:ae:67:14:b7:0a:bf:bf:49:e2:1b:2f:96:9d:20:8d:e5:31:
46:f2:39:1d:57:d9:5c:25:d0:6e:67:fe:02:7c:48:03:bf:b9:
44:fe:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:05 2025 by rpki-client