Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9605DBF64AE311EE906E7D52C4F9AE02.roa
File: 9605DBF64AE311EE906E7D52C4F9AE02.roa (raw, json)
Hash identifier: Kzvm6sb4k+Lbh58iGKl8ITkyjbMkPGE3nWnW3qRU5MU=
Subject key identifier: 27:AF:48:26:95:94:06:84:63:96:E5:75:B7:CB:61:D1:32:B7:CE:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8D60
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9605DBF64AE311EE906E7D52C4F9AE02.roa
Signing time: Thu 30 May 2024 16:15:22 +0000
ROA not before: Thu 30 May 2024 16:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141505
IP address blocks: 45.119.176.0/22 maxlen: 24
45.119.180.0/22 maxlen: 24
45.119.184.0/22 maxlen: 24
45.119.188.0/22 maxlen: 24
45.124.224.0/22 maxlen: 24
45.124.228.0/22 maxlen: 24
45.124.232.0/22 maxlen: 24
45.124.236.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36192 (0x8d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a61a-cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:92:15:74:75:dd:d7:11:f2:73:b3:c9:6e:
6b:14:b4:22:13:78:55:66:6e:49:e1:63:be:5a:5d:
2f:d8:78:0e:84:10:76:d9:03:bc:f8:44:e1:c3:23:
c2:a9:a2:ee:18:70:0e:d9:c5:7d:9c:c7:18:91:fc:
69:14:47:e6:0c:6f:73:d4:e7:84:f9:90:76:f5:01:
c3:f1:72:63:02:1e:8b:cc:e7:c1:b2:d8:75:8c:fb:
ce:72:ac:80:f6:87:68:3b:7c:66:ae:8c:b8:9d:7c:
ff:76:fa:ad:30:d6:03:47:4f:f3:2d:f5:11:d7:3e:
fa:40:e7:ea:78:1c:a1:5e:27:f9:28:e5:9e:5b:6c:
62:92:52:7a:01:a5:d0:6f:8a:7f:e3:d6:fd:52:9d:
96:50:b5:ac:1a:30:ea:aa:4e:e3:86:8c:0f:3b:e1:
4e:96:7b:cb:a1:53:09:e3:9f:af:6a:da:1d:30:e7:
70:0a:d2:b3:39:8d:0c:5e:de:14:3c:cf:1b:e9:14:
0e:c9:c8:bb:59:09:4e:bc:5b:51:a7:3f:f5:5c:01:
12:52:0f:2f:bb:28:21:74:f8:63:f5:3f:3a:14:41:
bf:9b:98:ec:99:15:74:51:59:0e:17:e1:ec:7e:23:
67:0b:01:ef:a8:a9:20:5f:4e:88:85:b9:bf:74:73:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:48:26:95:94:06:84:63:96:E5:75:B7:CB:61:D1:32:B7:CE:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9605DBF64AE311EE906E7D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.176.0/20
45.124.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:75:24:01:5d:b4:6a:ae:3d:1a:8a:51:27:10:e2:98:83:de:
21:6e:dc:52:c4:d0:6a:cb:fc:cd:b1:a0:db:ff:93:d9:2e:f8:
e8:02:e7:92:4d:df:40:b7:da:82:36:25:55:bb:b8:0d:47:5c:
23:28:d6:66:0c:f9:38:f0:ab:8f:c8:7b:1b:45:83:63:d3:77:
26:f7:d1:71:c4:b5:ef:08:02:6f:cc:ca:dc:7b:99:24:d2:15:
c7:83:6e:c2:10:8a:53:8b:66:57:83:84:40:a7:4e:ff:0a:07:
a1:fb:75:ea:61:0c:8b:bd:6c:8d:5f:9f:2b:86:c2:3c:27:72:
84:32:5d:ee:60:01:a2:12:81:ee:dd:fa:0a:11:4e:f8:9d:8d:
bb:7d:2e:1e:39:01:de:a6:1d:b1:b0:40:c0:d1:a5:b8:c0:93:
2f:22:bc:dd:54:0d:5b:88:f5:5e:b8:9c:94:9d:82:c5:28:75:
83:d8:9d:16:1f:a0:66:1e:1e:f3:8d:15:08:2b:67:b2:c8:f5:
37:17:9c:87:0f:5e:b2:b1:8f:f2:f7:35:e5:d1:f3:cd:4c:2a:
6e:9f:ba:22:b4:fc:4d:b7:0a:1f:a0:c8:28:71:f1:a3:bb:83:
bd:b4:5f:ea:5e:25:69:2a:86:58:d0:71:28:2f:64:e5:5c:82:
90:75:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:17 2025 by rpki-client