Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
File: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (raw, json)
Hash identifier: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=
Subject key identifier: 61:92:14:F3:52:96:F4:47:08:39:21:7B:FD:17:20:B1:90:AC:82:C9
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 149F
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
Signing time: Fri 28 Mar 2025 17:26:15 +0000
ROA not before: Fri 28 Mar 2025 17:26:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9411
IP address blocks: 2406:3100::/32 maxlen: 32
2406:3100::/36 maxlen: 36
2406:3100:1000::/36 maxlen: 36
2406:3100:2000::/36 maxlen: 36
2406:3100:3000::/36 maxlen: 36
2406:3100:4000::/36 maxlen: 36
2406:3100:5000::/36 maxlen: 36
2406:3100:6000::/36 maxlen: 36
2406:3100:7000::/36 maxlen: 36
2406:3100:8000::/36 maxlen: 36
2406:3100:9000::/36 maxlen: 36
2406:3100:a000::/36 maxlen: 36
2406:3100:b000::/36 maxlen: 36
2406:3100:c000::/36 maxlen: 36
2406:3100:d000::/36 maxlen: 36
2406:3100:e000::/36 maxlen: 36
2406:3100:f000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5279 (0x149f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49
Validity
Not Before: Mar 28 17:26:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e6dbb7-9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:95:80:51:0b:bf:ff:da:15:63:19:0f:65:
ac:94:03:f0:94:8e:d0:4a:7f:8f:f6:76:4d:8b:40:
a8:3b:56:e4:86:9f:a0:e3:99:c9:62:56:0a:57:47:
da:f5:3a:03:c3:29:db:50:81:e9:4c:2b:69:f0:8d:
86:d3:24:10:d9:bf:fa:f4:3d:18:bc:68:1a:27:f0:
d6:41:54:5b:a6:33:c3:fb:c8:f4:d2:4a:ac:ca:0b:
08:3b:53:51:9b:64:e7:63:75:a3:c7:cd:82:f0:78:
24:49:9e:aa:48:15:14:21:84:b7:1b:33:f9:44:30:
e8:59:8f:b9:d4:db:fc:3a:b3:ea:22:20:69:d8:f0:
99:77:db:e3:18:e8:72:d3:fc:34:dc:1d:a3:6b:53:
e7:36:4c:c7:0d:d4:7d:a5:00:13:30:10:c6:88:e6:
12:86:94:40:e4:7d:f5:78:3e:e7:aa:ec:c7:24:1e:
7d:c2:5a:6a:db:81:ba:79:34:71:9c:9a:a8:d5:99:
36:e1:88:0e:24:ee:fa:08:ae:f9:01:6b:0a:1e:d8:
d3:2a:d0:78:f3:9a:bb:39:d3:42:99:20:c8:9f:05:
4d:78:2e:ca:1e:fc:f2:32:8c:c4:f9:c4:6f:04:5a:
ea:40:32:16:8f:ca:dc:fc:11:07:0d:dd:e6:78:98:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:14:F3:52:96:F4:47:08:39:21:7B:FD:17:20:B1:90:AC:82:C9
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3100::/32
Signature Algorithm: sha256WithRSAEncryption
be:53:59:a0:68:e4:7d:d1:33:9b:e5:f0:65:d9:82:bf:05:9c:
bd:47:59:90:ba:25:f0:70:c4:fa:41:c0:d7:b7:76:46:af:d1:
b0:06:14:11:4b:d0:17:a5:c8:05:1d:ff:72:3e:9f:33:75:37:
08:c5:7b:c7:10:90:4d:ee:39:5a:8f:50:76:53:ae:2f:0c:be:
d2:8b:8e:8c:1c:2b:d9:76:e3:4c:af:7a:19:b9:5b:c0:eb:a8:
ec:cf:5c:df:65:e9:4b:39:8e:7d:4b:e4:72:7a:3a:57:f7:e0:
10:da:5d:f7:33:2d:b4:c4:2f:2d:0f:5a:e3:48:84:50:3b:61:
43:a5:13:2a:e0:e8:ee:31:d9:f8:6b:13:cd:73:db:9d:d2:a4:
d6:99:2c:09:ce:f5:8c:b6:a0:6d:bf:e9:03:fb:65:25:e0:11:
b4:71:f0:7a:d7:27:71:43:97:be:6a:98:83:d2:8a:f0:a9:f4:
e8:4d:58:da:8c:38:f8:ec:83:cf:e6:ba:c1:e0:d5:e0:ee:72:
2b:c5:14:71:6d:a8:b6:8c:d1:fa:7c:d0:99:0c:d1:cb:34:e1:
cf:06:55:fb:88:72:a0:ca:72:7a:0b:06:f3:4f:1e:99:aa:36:
a2:72:b9:1a:ab:74:85:29:7c:d9:ec:85:ad:15:ea:86:cb:14:
ce:a9:f1:9b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICFJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3
NEU5MTBFMkEwHhcNMjUwMzI4MTcyNjE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U2ZGJiNy05YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0yVgFELv//aFWMZD2WslAPwlI7QSn+P9nZNi0CoO1bkhp+g45nJYlYKV0fa
9ToDwynbUIHpTCtp8I2G0yQQ2b/69D0YvGgaJ/DWQVRbpjPD+8j00kqsygsIO1NR
m2TnY3Wjx82C8HgkSZ6qSBUUIYS3GzP5RDDoWY+51Nv8OrPqIiBp2PCZd9vjGOhy
0/w03B2ja1PnNkzHDdR9pQATMBDGiOYShpRA5H31eD7nquzHJB59wlpq24G6eTRx
nJqo1Zk24YgOJO76CK75AWsKHtjTKtB485q7OdNCmSDInwVNeC7KHvzyMozE+cRv
BFrqQDIWj8rc/BEHDd3meJh7mQIDAQABo4ICljCCApIwHQYDVR0OBBYEFGGSFPNS
lvRHCDkhe/0XILGQrILJMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD
QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkZBNDkvNzAyRDgxMjQ1Q0MxMTFFODlBMzZCODM3QzRGOUFFMDIvMDQ0OEMwNEU1
Q0MyMTFFOEFDMDdFNjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBjEAMA0GCSqGSIb3DQEBCwUAA4IBAQC+U1mgaOR90TOb
5fBl2YK/BZy9R1mQuiXwcMT6QcDXt3ZGr9GwBhQRS9AXpcgFHf9yPp8zdTcIxXvH
EJBN7jlaj1B2U64vDL7Si46MHCvZduNMr3oZuVvA66jsz1zfZelLOY59S+RyejpX
9+AQ2l33My20xC8tD1rjSIRQO2FDpRMq4OjuMdn4axPNc9ud0qTWmSwJzvWMtqBt
v+kD+2Ul4BG0cfB61ydxQ5e+apiD0orwqfToTVjajDj47IPP5rrB4NXg7nIrxRRx
bai2jNH6fNCZDNHLNOHPBlX7iHKgynJ6CwbzTx6Zqjaicrkaq3SFKXzZ7IWtFeqG
yxTOqfGb
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:07 2025 by rpki-client