Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/3D626CDC065111F0BFE43624C4F9AE02.roa
File: 3D626CDC065111F0BFE43624C4F9AE02.roa (raw, json)
Hash identifier: /9J+DovVT9QqlJwVVg9XROmn+Z1B8vJUoCEhwjB4bd0=
Subject key identifier: 0B:6A:C3:94:31:72:D8:54:55:A4:25:C2:09:E5:CC:CF:58:38:89:1A
Certificate issuer: /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial: 07E5
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/3D626CDC065111F0BFE43624C4F9AE02.roa
Signing time: Fri 21 Mar 2025 12:37:24 +0000
ROA not before: Fri 21 Mar 2025 12:37:24 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 149298
IP address blocks: 116.204.152.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663
Validity
Not Before: Mar 21 12:37:24 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67dd5d84-0dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:5e:0d:81:8f:21:2b:8e:de:4c:d0:2f:5f:
77:a8:24:19:9c:53:4e:4a:df:cd:87:dd:98:c4:14:
07:79:d1:0c:6c:66:20:0f:4f:93:50:98:82:f8:9d:
c7:48:38:fe:c2:81:40:ac:de:29:d1:0f:35:fe:37:
99:ba:b9:fc:65:35:32:21:26:eb:31:87:af:5f:72:
47:e7:af:24:51:a8:d6:95:d1:78:5f:c5:b3:a4:27:
a0:f4:aa:9c:ba:43:f0:81:2b:0e:58:64:3a:04:f4:
7b:51:b0:76:e6:8a:c2:ec:35:d5:92:3c:7a:55:60:
79:29:b3:5b:50:4c:c9:c0:e9:b5:b9:27:04:db:e3:
2d:61:a4:61:2e:1a:ec:5f:9c:17:5c:e8:c2:d5:3c:
29:23:d8:3a:63:60:48:a8:29:cd:0d:0a:c6:d5:74:
68:c4:d3:4d:02:ee:c9:a0:56:9a:0b:76:73:76:88:
4d:0d:57:0b:fc:d5:e2:68:d5:3f:b4:67:95:0e:57:
48:93:cb:85:54:c4:d1:77:a7:a0:f4:7a:f5:f1:4c:
d6:a9:43:e8:3c:d0:3e:75:28:34:d1:c7:2f:4b:a0:
5b:a9:a3:2d:6c:bb:7b:9c:cc:4e:3a:de:32:45:a2:
a5:1a:1f:91:10:3e:b6:26:01:6c:c6:7a:1f:f1:bf:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:C3:94:31:72:D8:54:55:A4:25:C2:09:E5:CC:CF:58:38:89:1A
X509v3 Authority Key Identifier:
keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/3D626CDC065111F0BFE43624C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.152.0/24
Signature Algorithm: sha256WithRSAEncryption
47:50:65:e6:a6:fb:6c:0f:d9:ed:b6:14:06:f5:68:3f:4c:22:
a1:46:19:79:3f:3a:76:c2:98:16:fd:e5:4e:33:60:cf:00:e6:
4a:cd:67:6b:18:8c:d0:c9:06:ed:65:ff:f2:dd:76:a9:b4:c1:
2a:c8:1f:e7:d8:34:a2:bc:12:3c:45:59:db:48:bd:94:e8:1a:
cc:d0:dc:3c:25:94:f7:16:23:8c:ea:e4:db:fb:d4:f0:05:65:
d1:f9:28:81:1f:a4:10:c7:95:6d:5b:a7:fb:fb:b7:f6:32:00:
9f:50:14:0e:96:e9:29:b4:9e:4e:f7:28:66:c8:d4:3d:e4:7c:
4e:ae:30:d2:ef:73:36:bb:95:1f:24:dc:32:1e:eb:54:fd:0e:
4e:d5:c0:4d:ac:97:56:10:85:18:f8:1e:34:d8:d0:18:37:91:
a7:42:05:d0:b9:71:ca:78:e7:7e:12:04:5b:26:53:cf:35:c4:
73:21:01:48:e2:71:43:4c:e5:69:11:a4:14:65:7d:4b:14:9b:
8b:f1:1c:10:fb:a7:5d:ee:1a:ce:1a:40:c1:8e:9a:b8:0c:eb:
eb:97:c2:82:62:8a:54:7f:98:4e:23:cb:5a:bd:48:db:a7:e8:
4e:40:55:ae:db:65:03:9e:a4:45:ea:ff:08:df:87:aa:1e:9e:
07:08:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:04 2025 by rpki-client