Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/E5B6117E2BC611EAB1456E4CC4F9AE02.roa
File: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (raw, json)
Hash identifier: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=
Subject key identifier: 33:04:D2:F0:23:BE:93:A7:46:F2:EC:52:43:D8:93:9E:5F:2F:34:FD
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0BC3
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/E5B6117E2BC611EAB1456E4CC4F9AE02.roa
Signing time: Thu 20 Mar 2025 18:58:29 +0000
ROA not before: Thu 20 Mar 2025 18:58:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137967
IP address blocks: 116.204.148.0/22 maxlen: 22
116.204.148.0/24 maxlen: 24
116.204.149.0/24 maxlen: 24
116.204.150.0/24 maxlen: 24
116.204.151.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C
Validity
Not Before: Mar 20 18:58:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dc6555-d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:48:5b:b5:93:2e:56:7f:b0:54:d6:5f:fa:
9f:0a:d8:1e:18:92:d3:cf:55:e4:41:18:6c:1f:69:
85:f9:e7:0b:a1:c6:ad:85:5a:ad:1a:bc:3d:9e:d8:
0d:24:ec:b5:07:ae:88:cb:2e:34:af:07:b5:84:d8:
67:ed:f8:b1:bc:8d:36:58:98:55:a9:95:5f:5f:9e:
19:33:68:c6:86:e0:38:85:ca:87:77:26:c6:1a:a2:
4a:4d:83:4c:32:53:e3:4e:88:19:31:18:a1:e6:fe:
e1:bd:e4:c9:6f:00:fe:55:e5:07:46:04:e7:01:14:
6d:bc:26:3c:a8:a5:c5:d2:bf:78:92:cb:09:43:b1:
1b:c1:0a:de:10:64:a1:53:77:33:f3:ff:d9:5f:89:
bf:2d:32:23:ba:bf:fd:59:f6:24:ba:02:4d:69:80:
25:87:75:5d:2a:86:ff:d5:fc:9e:e9:1b:ea:56:b6:
eb:f1:8e:2d:b6:72:52:cd:a3:f2:90:29:39:a4:c6:
af:72:df:56:a6:b6:f7:33:8e:cd:ce:c9:e1:55:e7:
b1:a2:e4:79:d1:0e:e3:46:08:1c:50:bd:28:c0:86:
24:8c:ac:f5:53:ca:b7:a2:db:c7:5f:c0:72:18:a0:
96:21:bc:42:b4:05:e0:21:55:e0:84:00:25:d3:45:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:D2:F0:23:BE:93:A7:46:F2:EC:52:43:D8:93:9E:5F:2F:34:FD
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/E5B6117E2BC611EAB1456E4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:65:92:db:c6:20:bd:b7:d7:c4:dd:c6:39:e4:21:6b:90:21:
25:e6:7e:3f:ee:7e:6e:f0:95:fb:79:43:f4:e3:c9:aa:e2:3f:
74:b2:98:7c:25:79:63:b7:e6:40:eb:16:9d:b0:81:e7:93:c0:
bf:bf:db:3a:44:a7:12:a7:73:19:31:26:f7:4e:bc:6d:d3:25:
5a:a8:8c:c7:72:41:89:11:41:a9:93:0b:86:02:e5:20:fb:c7:
7a:8b:d2:fb:4d:9a:f5:40:f2:ab:8c:94:f5:07:4e:7e:37:84:
61:74:63:72:13:ee:5e:ea:49:84:55:99:92:fe:fe:1a:c4:7d:
b1:64:38:43:ec:a8:22:f8:54:af:95:67:e0:45:22:4e:56:01:
46:2f:10:6a:e7:66:90:42:63:56:9b:99:ad:63:99:79:dc:79:
c6:10:fe:b7:5a:9a:a5:42:b2:d6:22:a9:a4:f6:04:66:a7:b2:
40:4a:51:19:4a:d1:68:c5:67:a0:f0:63:78:69:e9:fb:08:50:
f9:c2:c9:62:85:77:8e:65:89:e0:9e:d9:f4:a6:98:b1:49:03:
d1:24:ad:ad:48:fd:0c:0a:bd:3a:1c:aa:7e:ee:60:ac:74:5d:
06:70:cc:5f:31:b2:a0:60:c7:7a:a9:3e:d5:f1:be:97:1b:8a:
5f:48:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:07:47 2025 by rpki-client