Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa
File: 989ED314FDCB11EDA52DCB45C4F9AE02.roa (raw, json)
Hash identifier: 7Gr5+LKQZg71Xe7aRTwT76gb+Vnjm/TSiDDJs1rwm1o=
Subject key identifier: 2E:D3:A5:9D:84:AA:E7:63:41:0C:94:44:22:DA:B1:AB:CD:8A:16:83
Certificate issuer: /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Certificate serial: 340B
Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa
Signing time: Sat 04 May 2024 14:50:49 +0000
ROA not before: Sat 04 May 2024 14:50:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 37989
IP address blocks: 203.123.48.0/21 maxlen: 22
203.123.48.0/24 maxlen: 24
203.123.49.0/24 maxlen: 24
203.123.50.0/24 maxlen: 24
203.123.51.0/24 maxlen: 24
203.123.52.0/24 maxlen: 24
203.123.53.0/24 maxlen: 24
2405:fc00::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13323 (0x340b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171634
Validity
Not Before: May 4 14:50:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66364b49-a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:af:78:e6:43:92:74:8d:b6:28:71:d9:19:
80:ea:d5:1a:69:30:8c:94:3f:1e:b6:3b:22:6c:cc:
9c:b1:74:e9:3c:a8:0d:cb:c8:94:02:5f:39:02:48:
9b:38:31:f1:88:a3:51:58:fd:93:81:52:93:8b:b1:
f6:6c:d4:f2:df:2f:d2:c0:66:93:4b:a8:8b:42:42:
13:8f:40:7a:03:3a:b3:77:eb:8d:2a:53:93:13:d1:
28:46:a3:ca:0d:80:f3:3d:2d:93:02:e4:60:cf:65:
2b:da:3b:14:f2:31:a0:49:ec:5c:95:27:85:ea:72:
5c:3a:11:a7:ab:20:91:41:9a:f6:03:da:cf:4f:ed:
76:02:e7:92:88:f3:91:5f:e6:3e:76:1b:cf:cd:b8:
0e:9f:be:ad:1a:6e:de:70:1e:1e:be:38:65:6b:d0:
0a:0b:0b:74:2f:8f:a9:f7:13:b2:0f:a2:a5:11:0b:
68:c9:e2:cf:b5:38:8d:ed:d9:1a:45:6d:04:3f:a0:
99:e0:8d:4a:b3:d3:85:0b:d0:0a:10:7f:e8:be:af:
9a:09:91:7f:08:e5:08:89:21:94:36:5c:cd:a1:8a:
09:f0:e1:b2:8d:0e:b6:fc:8c:aa:cf:86:54:ac:bf:
ad:9d:dc:7c:7c:92:9e:90:6e:ad:52:22:25:b0:47:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:A5:9D:84:AA:E7:63:41:0C:94:44:22:DA:B1:AB:CD:8A:16:83
X509v3 Authority Key Identifier:
keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.123.48.0/21
IPv6:
2405:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
06:5a:c1:50:06:a2:89:fa:48:f7:5b:e6:70:e4:eb:10:1c:71:
68:a7:67:2a:79:78:05:85:73:5b:77:6e:99:21:ce:ff:22:12:
bc:76:4a:fd:ce:11:2b:bb:4f:0e:56:99:19:63:cc:f0:5e:98:
68:d2:be:16:72:63:a9:40:f0:68:9e:c2:03:9b:0c:d0:13:3f:
22:cf:c3:e0:11:24:a5:3d:bc:7d:29:4b:58:1f:c1:ad:b0:8d:
7c:b7:db:e7:75:f1:b6:91:c1:57:62:44:03:fb:be:25:cf:d8:
86:2d:03:77:f1:da:7e:f2:43:ba:1a:3e:7d:8f:5a:cc:27:27:
b3:e3:cb:af:7c:c7:a1:4a:9b:fa:f2:c4:a2:d6:26:5f:3a:0d:
88:31:d3:06:e1:ed:7a:e3:9e:e7:2c:2d:fc:d4:11:88:a5:0d:
bf:7d:05:71:18:5b:59:62:66:97:f3:63:f5:c3:2d:08:13:96:
b5:21:1e:3c:23:06:a1:8f:46:5c:de:35:32:57:b3:b1:12:f6:
8a:b9:70:60:91:02:fb:e6:17:69:59:33:55:c5:d2:e5:5b:6c:
de:9b:67:72:26:19:62:b0:c1:72:20:ae:8d:9d:42:46:c6:f5:
ab:65:0e:89:7c:33:e8:9a:68:5b:85:d9:9d:47:79:dd:33:af:
e5:20:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:10 2025 by rpki-client