Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F866EC9FBF11EEAEAAD65FC4F9AE02.roa
File: 37F866EC9FBF11EEAEAAD65FC4F9AE02.roa (raw, json)
Hash identifier: 4kRsOMF3WAN1FiKSDfXMzGAfGuFhiLmkARjZh0HinDc=
Subject key identifier: 93:4B:ED:4F:D3:42:89:12:E8:18:4B:B5:F0:60:87:AD:52:BE:A0:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 804F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F866EC9FBF11EEAEAAD65FC4F9AE02.roa
Signing time: Thu 21 Dec 2023 05:14:12 +0000
ROA not before: Thu 21 Dec 2023 05:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151727
IP address blocks: 210.79.136.0/23 maxlen: 24
2001:df3:3440::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32847 (0x804f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 21 05:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6583c9a4-5845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:b1:fe:33:85:e1:29:fd:1f:26:00:4e:ab:
18:68:b9:3e:cf:0b:ef:3e:e4:f6:8c:00:12:8f:8a:
73:e1:d6:1b:8e:0b:e5:09:a2:d3:2c:c5:45:50:73:
cc:b4:10:0e:61:32:b1:4b:cd:97:9a:c8:09:61:30:
b4:04:12:7f:cb:9b:13:84:54:c2:55:57:84:ce:f9:
8c:46:17:bc:b6:df:03:17:f1:1d:fa:00:fc:d2:76:
30:2e:49:e6:e7:1b:2e:14:a1:d4:1b:df:ef:77:b8:
e8:bf:aa:05:9a:1b:80:f4:72:6c:df:50:c6:03:d4:
b3:ff:f2:00:d6:53:ee:14:ce:58:03:59:99:cc:99:
6a:47:8f:e7:e8:2c:a4:58:b5:9b:d7:e6:ae:58:a5:
73:24:b0:fe:b4:db:ea:23:c5:d6:94:3e:b7:03:a9:
e1:98:db:70:f7:df:1e:99:9f:6c:97:f5:db:17:af:
12:23:43:e4:5c:1f:55:f0:ac:2a:b7:14:9a:2b:da:
35:3a:0b:67:83:ba:49:48:76:fd:71:f6:b2:90:9b:
e3:01:1a:38:5a:5d:5f:72:27:3f:a8:f7:2d:8f:8e:
f5:7a:e8:0d:6d:fe:e7:aa:26:b4:08:14:6e:47:b5:
d1:b8:7d:ff:e0:76:d5:56:bd:f9:35:22:c6:2b:ad:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:ED:4F:D3:42:89:12:E8:18:4B:B5:F0:60:87:AD:52:BE:A0:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F866EC9FBF11EEAEAAD65FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.136.0/23
IPv6:
2001:df3:3440::/48
Signature Algorithm: sha256WithRSAEncryption
85:de:41:c1:03:da:1f:6e:1f:0b:09:c4:5b:52:24:57:fa:2d:
0f:79:8c:1e:68:14:77:b8:f3:ec:6e:ef:dd:42:85:20:18:0f:
85:f1:03:92:1d:7e:8b:d3:9a:22:20:20:08:83:98:27:4b:74:
f3:40:3c:05:a4:af:95:4d:85:e7:d5:d4:e0:a9:7d:71:83:5d:
a7:de:82:08:3f:76:c2:27:e3:e2:39:75:24:1f:8f:a9:9f:68:
95:b8:3f:dc:21:00:8a:61:58:82:17:35:18:c2:05:85:42:83:
bc:de:bc:34:ed:3a:83:1f:12:18:40:ce:19:f8:b1:f9:e2:5b:
f1:04:6d:0b:e0:97:09:13:5a:a6:40:76:b6:6d:c5:47:60:38:
3e:4f:7d:e3:d5:44:19:30:e1:09:27:26:4c:be:b1:18:ea:c1:
88:c1:41:4d:4d:8b:c7:30:14:cf:ea:dc:2c:a6:83:71:3a:9a:
f3:1d:0d:94:0b:13:f1:c4:7f:bb:d1:ea:9c:ef:07:be:1b:2b:
61:9d:7c:71:13:a2:8f:2d:38:4b:f9:bd:06:73:81:14:2f:28:
5d:2c:e9:74:a4:2f:90:a0:04:15:d1:20:0d:8f:29:33:52:a5:
f8:b2:77:aa:cf:9b:22:af:0a:6e:f4:20:a9:59:a9:92:a4:8b:
04:d1:4c:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAIBPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTIzMTIyMTA1MTQxMloXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjU4M2M5YTQtNTg0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEvsf4zheEp/R8mAE6rGGi5Ps8L7z7k9owAEo+Kc+HWG44L5Qmi0yzFRVBz
zLQQDmEysUvNl5rICWEwtAQSf8ubE4RUwlVXhM75jEYXvLbfAxfxHfoA/NJ2MC5J
5ucbLhSh1Bvf73e46L+qBZobgPRybN9QxgPUs//yANZT7hTOWANZmcyZakeP5+gs
pFi1m9fmrlilcySw/rTb6iPF1pQ+twOp4ZjbcPffHpmfbJf12xevEiND5FwfVfCs
KrcUmivaNToLZ4O6SUh2/XH2spCb4wEaOFpdX3InP6j3LY+O9XroDW3+56omtAgU
bke10bh9/+B21Va9+TUixiut3z8CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSTS+1P
00KJEugYS7XwYIetUr6gGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM3Rjg2NkVD
OUZCRjExRUVBRUFBRDY1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQB0k+IMA8EAgACMAkDBwAgAQ3zNEAwDQYJKoZIhvcNAQEL
BQADggEBAIXeQcED2h9uHwsJxFtSJFf6LQ95jB5oFHe48+xu791ChSAYD4XxA5Id
fovTmiIgIAiDmCdLdPNAPAWkr5VNhefV1OCpfXGDXafeggg/dsIn4+I5dSQfj6mf
aJW4P9whAIphWIIXNRjCBYVCg7zevDTtOoMfEhhAzhn4sfniW/EEbQvglwkTWqZA
drZtxUdgOD5PfePVRBkw4QknJky+sRjqwYjBQU1Ni8cwFM/q3Cymg3E6mvMdDZQL
E/HEf7vR6pzvB74bK2GdfHEToo8tOEv5vQZzgRQvKF0s6XSkL5CgBBXRIA2PKTNS
pfiyd6rPmyKvCm70IKlZqZKkiwTRTJ8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:51 2025 by rpki-client