Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/153C3768F1FE11EFA97DBF44C4F9AE02.roa
File: 153C3768F1FE11EFA97DBF44C4F9AE02.roa (raw, json)
Hash identifier: +48Bj3Y/ZUcL1jP+dV9LBI2y33TAdPUch8/M+nwIAFY=
Subject key identifier: 10:B5:7F:47:A4:BE:77:D4:3E:49:70:EF:0E:49:CE:F7:B2:FA:97:81
Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial: 344C
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/153C3768F1FE11EFA97DBF44C4F9AE02.roa
Signing time: Sun 23 Feb 2025 15:51:46 +0000
ROA not before: Sun 23 Feb 2025 15:51:45 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 131279
IP address blocks: 175.45.176.0/24 maxlen: 24
175.45.177.0/24 maxlen: 24
175.45.178.0/24 maxlen: 24
175.45.179.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13388 (0x344c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183010
Validity
Not Before: Feb 23 15:51:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67bb4411-4fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:95:36:a6:fd:0e:98:8d:84:33:03:b0:ee:
d8:61:c3:e0:69:46:e0:8c:44:2a:04:44:e8:8e:56:
a0:c8:20:d2:d9:6e:f6:48:23:fd:cc:a8:43:12:47:
9d:11:e7:8f:ff:e5:e9:1b:ca:5e:9a:bb:6e:59:3d:
05:ec:c5:24:60:5f:f4:16:33:d4:43:cf:8e:ce:f2:
67:71:40:21:9b:63:31:3c:e1:11:fe:a6:7e:ed:c6:
a7:9f:32:dc:c3:59:c0:70:6b:7f:d6:fa:16:6b:fe:
66:5d:e7:7f:5f:a0:f9:01:7e:23:47:14:90:e0:6a:
ab:06:3d:71:1a:6d:d2:b6:23:78:6c:c4:fe:d3:e7:
67:07:b1:91:cd:02:20:0b:b0:9b:9e:c3:dd:17:e8:
8e:9c:15:6a:c4:86:c6:12:93:5c:e0:10:f1:a4:05:
08:20:4b:2b:2b:f0:c1:5b:f0:89:86:ba:11:62:e7:
24:ee:a8:6d:58:39:00:72:4f:e5:a5:15:fc:f6:eb:
0c:73:da:cd:0d:4e:54:90:e3:23:2f:ba:2f:91:f5:
5e:26:d2:0d:b4:0d:eb:4e:c0:76:ee:66:da:46:e4:
a8:ca:65:6c:ef:fb:3b:be:05:55:5e:20:6a:18:00:
db:3e:7a:0c:5f:d3:48:0f:e1:c6:53:fc:26:cb:20:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:7F:47:A4:BE:77:D4:3E:49:70:EF:0E:49:CE:F7:B2:FA:97:81
X509v3 Authority Key Identifier:
keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/153C3768F1FE11EFA97DBF44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.45.176.0/22
Signature Algorithm: sha256WithRSAEncryption
14:2f:1c:05:8b:40:d4:31:9d:16:84:f9:7b:6b:6e:74:83:b4:
67:35:23:09:f8:9e:08:b4:aa:d6:fb:be:d7:62:8c:db:8b:66:
ad:69:3f:ef:95:3c:ae:d8:54:1d:c1:57:55:a3:cc:a4:66:3f:
7b:02:26:4f:7e:89:72:89:99:79:4d:ea:e0:cd:41:ec:bd:9a:
cf:bd:18:16:c7:d1:23:08:c3:13:1c:89:cc:3a:25:91:da:33:
d3:06:8b:e1:08:9c:e6:2e:8a:83:03:02:66:ce:d5:8b:b9:5b:
be:14:88:55:e0:af:08:bc:10:5f:d7:4a:dc:02:bc:59:dc:32:
d9:ea:f6:10:7a:7d:33:ad:1e:5a:5f:69:6e:6c:4c:25:b3:da:
50:da:18:36:b5:c7:a9:df:fa:76:47:5d:44:09:75:5f:02:97:
60:f6:48:fa:f2:ac:f1:b3:cb:1f:c7:50:f5:f2:91:b5:f2:2e:
d3:35:4c:61:90:76:cc:cd:b2:59:b6:e2:85:b8:e0:57:23:a7:
fe:61:77:9b:da:be:a0:5a:c6:a5:f2:88:d8:f9:6f:30:89:37:
1f:d6:50:12:7a:93:11:58:33:06:99:f6:6b:3d:8d:8b:8f:42:
fd:5e:4b:45:3a:c4:1c:c9:13:c1:14:7b:36:66:2b:95:d4:56:
38:fe:14:b3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2
OTlDMEMzNjYwHhcNMjUwMjIzMTU1MTQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JiNDQxMS00ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4MOVNqb9DpiNhDMDsO7YYcPgaUbgjEQqBETojlagyCDS2W72SCP9zKhDEked
EeeP/+XpG8pemrtuWT0F7MUkYF/0FjPUQ8+OzvJncUAhm2MxPOER/qZ+7cannzLc
w1nAcGt/1voWa/5mXed/X6D5AX4jRxSQ4GqrBj1xGm3StiN4bMT+0+dnB7GRzQIg
C7CbnsPdF+iOnBVqxIbGEpNc4BDxpAUIIEsrK/DBW/CJhroRYuck7qhtWDkAck/l
pRX89usMc9rNDU5UkOMjL7ovkfVeJtINtA3rTsB27mbaRuSoymVs7/s7vgVVXiBq
GADbPnoMX9NID+HGU/wmyyBgfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBC1f0ek
vnfUPklw7w5Jzvey+peBMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE
QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODMwMTAvNUYxRERCMTIxREEzMTFFMjkzQjE5RTk4MDhCMDJDRDIvMTUzQzM3NjhG
MUZFMTFFRkE5N0RCRjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKvLbAwDQYJKoZIhvcNAQELBQADggEBABQvHAWLQNQxnRaE
+XtrbnSDtGc1Iwn4ngi0qtb7vtdijNuLZq1pP++VPK7YVB3BV1WjzKRmP3sCJk9+
iXKJmXlN6uDNQey9ms+9GBbH0SMIwxMcicw6JZHaM9MGi+EInOYuioMDAmbO1Yu5
W74UiFXgrwi8EF/XStwCvFncMtnq9hB6fTOtHlpfaW5sTCWz2lDaGDa1x6nf+nZH
XUQJdV8Cl2D2SPryrPGzyx/HUPXykbXyLtM1TGGQdszNslm24oW44Fcjp/5hd5va
vqBaxqXyiNj5bzCJNx/WUBJ6kxFYMwaZ9ms9jYuPQv1eS0U6xBzJE8EUezZmK5XU
Vjj+FLM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:16 2025 by rpki-client