Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F10E71C8F6711EE9CB07137C4F9AE02.roa
File: 0F10E71C8F6711EE9CB07137C4F9AE02.roa (raw, json)
Hash identifier: BZS9RDB0So8ch/ABScOcDOG9CGSnPUM2isQk9265BlA=
Subject key identifier: 58:0E:87:32:BC:04:04:22:D3:30:17:A4:E9:10:98:F4:27:ED:F7:A0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 906C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F10E71C8F6711EE9CB07137C4F9AE02.roa
Signing time: Thu 30 May 2024 16:27:51 +0000
ROA not before: Thu 30 May 2024 16:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151755
IP address blocks: 180.94.16.0/23 maxlen: 24
2001:df3:4540::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36972 (0x906c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a907-13ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:b9:3a:fb:40:fe:b5:69:c6:03:94:0c:45:
22:58:4a:f4:4d:29:6f:76:fe:04:8c:04:e0:47:f9:
f6:82:00:c6:77:80:15:72:82:40:76:65:41:4e:46:
db:16:b9:5a:31:1f:59:a4:4a:13:e1:01:18:d6:c9:
de:ca:96:7a:2f:1e:c0:7d:ca:4f:3c:18:0f:77:5b:
b5:3b:17:96:7a:06:a9:40:66:ad:de:73:4d:fa:6a:
33:71:0e:58:ab:9d:ec:39:80:f8:e0:8c:7e:c1:2c:
7c:62:bb:0e:92:f1:8e:76:ab:0e:64:ac:58:6c:85:
ff:c2:6a:dc:1f:b9:02:c7:9f:2c:24:81:3f:43:04:
ac:62:31:25:f2:04:27:0d:79:14:5b:16:47:af:3c:
8f:d6:90:2f:57:a8:ea:e2:0a:4e:00:da:b0:5a:d8:
87:bc:83:e7:8f:55:89:95:db:90:46:cd:e3:32:72:
88:21:92:f1:25:9e:b4:17:6d:4a:52:91:11:c0:4b:
d9:1d:5e:f3:10:0e:c6:20:4a:62:18:14:d3:42:56:
83:61:14:da:36:b6:67:33:ed:ff:f5:d7:32:fe:42:
9c:ad:a7:8d:aa:fd:c8:e2:25:8f:c3:2f:7c:89:9f:
e9:6c:e2:62:e0:06:81:d0:17:97:ac:54:1b:4c:20:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:87:32:BC:04:04:22:D3:30:17:A4:E9:10:98:F4:27:ED:F7:A0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F10E71C8F6711EE9CB07137C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.16.0/23
IPv6:
2001:df3:4540::/48
Signature Algorithm: sha256WithRSAEncryption
a0:3e:2e:a3:33:28:31:58:ff:8a:c3:5c:68:83:23:c5:93:88:
41:ea:38:39:fe:49:79:92:0f:73:7b:2f:36:bd:ff:6b:71:12:
4f:7c:31:31:b4:c7:4d:5f:05:c8:61:40:3f:32:66:bd:d0:e1:
01:d0:55:5c:79:d0:8f:7d:62:29:d1:ef:f1:1a:29:1e:99:74:
69:0f:dc:23:28:de:66:09:59:c6:c1:5a:70:21:a3:6f:fd:83:
87:db:99:f2:e6:be:60:9b:63:f4:1a:c0:e7:8a:79:7f:49:60:
4b:95:93:e5:d5:f4:e6:47:7c:9f:f3:4e:d8:26:c9:cf:19:ee:
f9:97:fb:b7:11:3a:45:1d:7d:c7:b2:24:03:17:c6:1f:13:1c:
e1:53:af:3c:40:b1:ee:5b:f3:bb:7c:e0:ef:8b:ee:60:50:9f:
d0:31:66:de:0a:4d:2f:4c:c8:e4:4a:13:07:ce:73:ea:a5:56:
9a:6b:af:35:10:f8:85:d6:ad:80:76:a4:11:23:f5:67:16:d5:
3e:c7:c7:35:80:84:4e:aa:bf:b7:2e:d3:03:cd:30:71:c2:9b:
fe:5c:5b:a4:2f:23:4b:20:02:0a:c4:52:52:46:7c:69:80:35:
27:80:8a:09:b7:bc:60:49:6a:f3:bf:35:65:b4:51:1d:dd:8b:
cf:98:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:28 2025 by rpki-client