Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E61E7DE8E7A211EFBF08CC77C4F9AE02.roa
File: E61E7DE8E7A211EFBF08CC77C4F9AE02.roa (raw, json)
Hash identifier: iBC1Zc6pgeVLgOK25JKmltz3QURXHfetjy5cxLP46e0=
Subject key identifier: 17:81:CB:B5:2A:1C:BA:EA:63:CE:56:09:2F:BD:76:BA:AB:99:2D:DB
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0BBA
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E61E7DE8E7A211EFBF08CC77C4F9AE02.roa
Signing time: Mon 10 Feb 2025 11:33:50 +0000
ROA not before: Mon 10 Feb 2025 11:33:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136908
IP address blocks: 117.121.230.0/24 maxlen: 24
117.121.236.0/24 maxlen: 24
117.121.238.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E
Validity
Not Before: Feb 10 11:33:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a9e41e-936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:dd:c6:1c:b8:33:16:94:c1:d4:78:62:41:
b2:1c:e2:01:04:fa:0f:cf:7e:12:88:c1:a1:d4:a5:
8f:3d:02:19:62:9f:a6:54:e1:97:5b:f6:31:6f:d7:
8c:79:ee:10:db:34:3d:47:0a:c0:87:a9:e7:d8:da:
ac:5b:52:cc:e8:a5:ce:6c:9b:76:4c:0c:d5:e7:05:
bd:19:8f:fd:21:ec:48:eb:a4:fa:e3:0e:e4:e6:af:
4e:76:5e:23:30:1f:41:54:6a:56:68:c7:7a:07:0e:
23:98:b7:b8:7e:90:4a:da:97:35:96:52:fc:49:40:
42:e9:f4:20:a8:07:6c:a9:57:cf:b8:94:cf:a5:27:
e3:d5:34:dc:e9:b7:ca:92:e3:1a:49:a8:20:f0:71:
d1:ed:7c:41:e2:ca:66:77:b1:48:a9:7e:f8:1b:6a:
8c:94:e3:8e:b7:4c:ef:08:5a:7b:58:b0:82:dd:17:
79:0c:d3:98:cc:88:8b:6f:1e:84:5d:82:81:2a:8b:
5e:d7:7e:4e:b5:5d:84:da:a0:42:e6:20:2a:ef:21:
50:b5:87:ba:f6:99:d2:fe:96:d4:8f:cd:8a:37:e3:
54:1d:c9:4a:ff:ab:0b:3a:f3:82:8e:f6:4e:34:33:
7f:d8:13:f6:05:0e:da:7c:50:a4:ed:15:a8:6d:68:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:CB:B5:2A:1C:BA:EA:63:CE:56:09:2F:BD:76:BA:AB:99:2D:DB
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E61E7DE8E7A211EFBF08CC77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.230.0/24
117.121.236.0/24
117.121.238.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5b:1d:e3:ac:97:fa:02:f2:d4:78:72:d3:4f:5a:81:0f:36:
11:3a:d7:47:1a:9c:83:42:a9:fb:70:da:3d:1b:0d:d0:e9:f4:
79:77:18:bc:25:7c:c8:c2:c9:b3:99:61:a6:30:22:f2:5a:cb:
83:7a:16:32:b6:43:ac:e9:5a:8a:a1:a7:ea:9e:24:36:29:81:
a0:52:5c:57:75:93:62:e4:b1:76:48:e7:a4:b7:fa:ff:1b:67:
4b:00:0c:8f:15:d8:35:0d:3a:e5:2f:83:97:30:ae:6f:7b:24:
ed:1a:12:5c:d2:01:e0:21:a3:73:e2:d8:e3:16:c7:78:32:2f:
ec:a2:32:36:af:fb:6b:07:0c:82:b3:03:dc:c0:8e:d6:3b:82:
55:1f:da:96:c6:b0:65:79:7f:20:f6:45:f7:0f:4e:5a:46:c4:
fb:42:ae:8d:b5:e7:95:c3:34:ec:6b:74:e2:9c:13:c5:55:eb:
32:b0:11:67:b9:ad:32:f1:f2:b6:72:b6:ff:c7:19:4a:ce:5e:
38:b6:b3:e7:fd:6d:aa:27:2c:63:f7:82:1a:f4:1d:75:49:5c:
a8:9b:67:96:fc:54:56:a1:9a:f7:5f:11:13:26:61:c3:f8:07:
ce:7e:66:7d:fc:48:2c:62:f6:cb:45:52:ae:6c:b1:86:47:ca:
ef:e2:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:31 2025 by rpki-client