Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8082FDFA7D2D11EEB377DE7EC4F9AE02.roa
File: 8082FDFA7D2D11EEB377DE7EC4F9AE02.roa (raw, json)
Hash identifier: k3AZualK2Hj6LhsBjiNWzCijUJGv0r+Wmsp6jzvJxi4=
Subject key identifier: FA:5C:C8:ED:84:38:AD:E1:A4:CE:37:09:45:A7:D4:12:FB:39:C5:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7D3D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8082FDFA7D2D11EEB377DE7EC4F9AE02.roa
Signing time: Tue 07 Nov 2023 05:21:28 +0000
ROA not before: Tue 07 Nov 2023 05:21:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.125.252.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32061 (0x7d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 7 05:21:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6549c958-aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:02:29:33:f3:8f:97:1c:f8:88:8b:f8:28:
ff:e5:43:7b:17:40:53:f0:e6:41:8a:27:1a:9f:59:
cc:c5:18:a3:ac:3f:6e:1a:9c:c8:c3:d1:e7:24:7c:
ba:7a:97:a8:cf:2a:36:74:d5:a6:59:a0:9f:c3:00:
eb:6c:69:97:2a:54:91:9a:f4:d1:05:4e:ac:f5:d5:
d6:09:da:93:43:6c:ce:5e:a7:94:53:f0:87:60:79:
64:4d:f3:eb:e9:75:1b:97:e9:52:fd:16:30:46:f3:
03:02:e5:8f:3a:36:3f:6e:ce:2f:e0:14:23:c3:3d:
d7:bc:c5:1e:c5:d0:fd:3c:e4:19:56:d5:7d:33:b3:
c8:a2:4d:14:3a:d9:d0:ce:5b:0b:a4:b0:c3:81:67:
2c:d1:1b:1d:40:37:0f:f1:0f:08:32:69:36:98:b6:
ee:a0:88:e8:55:bb:0e:08:7e:51:99:ef:87:08:ea:
48:4d:7d:c2:05:dd:70:78:0f:fb:7d:26:55:f9:15:
a7:9b:da:65:a4:69:b7:f9:ff:ec:77:75:36:4e:00:
fd:76:f5:b1:38:3d:c4:18:a6:ee:91:a6:ae:43:53:
27:72:d9:c9:d3:ec:17:13:68:96:9e:65:7e:80:9e:
73:37:f7:d0:fb:32:43:2a:ec:f8:83:89:b8:e7:a2:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:C8:ED:84:38:AD:E1:A4:CE:37:09:45:A7:D4:12:FB:39:C5:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8082FDFA7D2D11EEB377DE7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ed:07:75:b6:8c:de:76:e5:7e:42:c0:64:60:a7:48:05:2b:
53:42:24:24:5b:b8:f8:77:e9:19:9f:24:75:80:5d:74:4c:63:
94:36:85:8a:b1:ce:de:ed:57:7c:67:32:0e:12:0f:8a:24:02:
07:dd:8f:62:27:0b:8f:64:fb:cf:dd:72:5b:8f:e0:20:41:3b:
9c:04:c5:61:71:43:53:d2:d9:f6:88:87:0c:dd:a7:30:65:ba:
dd:74:b0:f5:78:62:9b:72:c9:1c:d3:84:fa:8a:f4:3e:6d:c0:
b0:65:f7:9e:31:38:b9:b0:f6:fd:d0:ab:7f:72:a8:5a:92:2d:
d3:6a:cd:77:b3:bf:f8:63:66:80:80:8a:3a:58:7f:5c:e8:3d:
64:50:52:db:cc:d9:e9:23:ad:73:d7:25:8f:3d:aa:db:47:2b:
75:19:e9:87:0c:aa:eb:d8:84:43:59:88:55:cd:75:46:9b:8e:
74:42:42:dd:4b:2a:4e:54:00:40:6b:56:c7:7f:d9:9f:93:e2:
6b:13:f3:76:e5:82:99:f7:e6:7c:74:4a:42:ee:7a:32:a3:04:
89:47:e0:07:a2:4e:63:02:27:6c:a2:78:e6:40:29:22:91:0c:
f5:ae:51:96:58:0f:5d:c3:ad:99:4e:d2:ab:9d:8c:7b:c1:fe:
c7:11:f4:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICfT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTA3MDUyMTI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ5Yzk1OC1hYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsi4CKTPzj5cc+IiL+Cj/5UN7F0BT8OZBiican1nMxRijrD9uGpzIw9HnJHy6
epeozyo2dNWmWaCfwwDrbGmXKlSRmvTRBU6s9dXWCdqTQ2zOXqeUU/CHYHlkTfPr
6XUbl+lS/RYwRvMDAuWPOjY/bs4v4BQjwz3XvMUexdD9POQZVtV9M7PIok0UOtnQ
zlsLpLDDgWcs0RsdQDcP8Q8IMmk2mLbuoIjoVbsOCH5Rme+HCOpITX3CBd1weA/7
fSZV+RWnm9plpGm3+f/sd3U2TgD9dvWxOD3EGKbukaauQ1MnctnJ0+wXE2iWnmV+
gJ5zN/fQ+zJDKuz4g4m456JW+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPpcyO2E
OK3hpM43CUWn1BL7OcUNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODA4MkZERkE3
RDJEMTFFRUIzNzdERTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtffwwDQYJKoZIhvcNAQELBQADggEBAArtB3W2jN525X5C
wGRgp0gFK1NCJCRbuPh36RmfJHWAXXRMY5Q2hYqxzt7tV3xnMg4SD4okAgfdj2In
C49k+8/dcluP4CBBO5wExWFxQ1PS2faIhwzdpzBlut10sPV4YptyyRzThPqK9D5t
wLBl954xOLmw9v3Qq39yqFqSLdNqzXezv/hjZoCAijpYf1zoPWRQUtvM2ekjrXPX
JY89qttHK3UZ6YcMquvYhENZiFXNdUabjnRCQt1LKk5UAEBrVsd/2Z+T4msT83bl
gpn35nx0SkLuejKjBIlH4AeiTmMCJ2yieOZAKSKRDPWuUZZYD13DrZlO0qudjHvB
/scR9KI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:17 2025 by rpki-client