Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa
File: 593FC45EB89011EA8C060064C4F9AE02.roa (raw, json)
Hash identifier: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=
Subject key identifier: AB:4E:00:50:E0:F8:76:09:A7:D4:F8:D7:CE:8B:68:46:D9:2D:70:9C
Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Certificate serial: 0849
Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa
Signing time: Thu 14 Nov 2024 20:29:11 +0000
ROA not before: Thu 14 Nov 2024 20:29:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45496
IP address blocks: 113.29.252.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915451D
Validity
Not Before: Nov 14 20:29:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67365d97-8dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:78:14:ee:8d:60:ac:65:d5:c8:a5:8c:5f:
4a:eb:ad:84:e0:7d:19:b0:8d:dc:2c:28:71:83:e5:
44:7d:7b:69:f6:44:10:57:44:73:e5:83:58:2e:fd:
f9:85:64:cc:98:29:c5:cf:84:1a:96:dc:7e:1f:af:
f5:99:d0:8e:a4:5a:46:65:e2:18:61:ee:87:9a:39:
6f:c9:96:3d:76:7f:50:95:b4:88:da:78:6d:00:15:
68:c6:86:68:62:f6:2a:ac:b6:da:8a:ab:a9:88:f2:
d0:78:bd:a9:3f:ca:32:aa:4b:6d:c4:1a:fb:0f:38:
ae:31:50:75:e7:83:e8:86:5f:36:18:4e:8c:7e:36:
32:a6:1f:f0:4a:84:77:94:e0:b3:34:3e:5f:71:01:
f2:91:ef:41:fb:10:c7:9d:ab:8f:5d:6d:ae:73:73:
09:42:12:25:c2:78:ed:6a:d8:47:43:7a:18:40:3c:
03:23:ca:74:37:12:00:45:c7:24:7f:5a:ab:fd:10:
d7:fb:2f:c7:b5:ee:59:c1:4f:f4:3f:51:c2:84:60:
f5:49:bc:37:c5:7f:35:66:db:77:12:8c:1d:65:73:
c0:38:fa:a6:26:9c:f2:a2:6f:c2:b6:eb:c9:9b:08:
a6:c2:1a:07:97:e5:ff:87:c4:f0:b0:82:ce:4e:92:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:00:50:E0:F8:76:09:A7:D4:F8:D7:CE:8B:68:46:D9:2D:70:9C
X509v3 Authority Key Identifier:
keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.29.252.0/22
Signature Algorithm: sha256WithRSAEncryption
43:02:d2:80:a3:35:b8:cf:55:b2:a7:36:21:cc:cc:5c:e9:0c:
58:87:08:26:5a:6e:5f:63:66:78:ce:e6:99:ee:e3:cc:2f:3e:
f1:a1:26:aa:64:46:a7:7d:5d:87:59:27:6f:58:17:aa:52:0e:
f7:2f:c1:93:49:78:b3:33:c7:51:22:27:5e:e5:13:a9:e2:da:
d6:77:a1:dd:80:be:50:1e:c1:cd:68:03:41:61:3e:76:e4:4a:
d5:c9:8c:96:26:a0:81:1a:34:7a:3b:16:bf:0c:71:43:82:bd:
ea:d9:de:b8:f8:ea:00:3c:9e:ff:9c:a3:87:1b:ff:0f:96:d4:
2d:60:0c:8d:74:27:2d:69:9e:e1:51:3b:e6:1f:36:e6:35:97:
45:2c:07:cb:93:ec:14:19:82:fc:58:82:b1:31:c8:65:cc:4d:
3a:18:e9:16:5f:62:4e:04:ca:78:13:e5:78:e0:8b:ec:c2:b3:
6d:db:a7:ac:90:d7:36:58:ca:6b:eb:38:32:c9:e6:11:39:5b:
96:bc:16:38:3f:2b:f7:1a:22:18:95:fd:12:80:80:61:40:e2:
2c:15:e4:3b:91:3e:60:1f:73:f5:e3:dd:b5:c0:30:16:d7:d6:
b6:31:7c:80:bc:f4:e3:fe:6a:5f:64:a6:3b:c1:65:6f:bc:94:
8d:09:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:25:51 2025 by rpki-client