Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCC5FA5AEDB511EF87F71026C4F9AE02.roa
File: DCC5FA5AEDB511EF87F71026C4F9AE02.roa (raw, json)
Hash identifier: dyx2FYRajjEsYM8Q9cpZjFzzW2+n4mQzlOZ4afhextU=
Subject key identifier: 6B:82:02:9E:80:0B:62:07:A8:7F:50:D4:9D:2F:CE:45:1B:3E:EA:93
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A63A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCC5FA5AEDB511EF87F71026C4F9AE02.roa
Signing time: Tue 18 Feb 2025 05:04:42 +0000
ROA not before: Tue 18 Feb 2025 05:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134004
IP address blocks: 2402:f80::/32 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42554 (0xa63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 18 05:04:42 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b414ea-938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:69:b7:fd:8c:47:52:0b:90:61:e1:16:43:
59:f4:ba:70:8c:81:66:0b:cd:bd:da:68:9b:57:1f:
e9:a7:7b:b3:a3:d6:20:9e:84:f1:26:45:15:2c:98:
d6:6d:53:3a:b1:17:4c:27:dd:69:c2:3a:76:c2:53:
77:7e:85:12:16:d9:20:85:5f:62:1f:59:e7:9d:15:
02:e0:8a:09:6a:d7:fb:54:b2:da:23:88:b8:ff:93:
80:41:e6:f7:7c:04:8e:4e:6c:9e:b5:71:ef:1c:1a:
de:31:bf:9b:4d:4a:e6:e1:e2:7b:a5:be:3c:45:89:
e0:44:b1:e6:1c:5b:b1:a6:4d:52:e8:e8:ba:73:be:
9d:5a:f4:42:c1:17:0c:cb:8c:66:54:9f:a7:21:a3:
a2:d2:42:86:68:80:ef:fa:02:8a:b5:b0:40:f9:f7:
5d:33:1f:40:05:a9:f6:4a:99:ae:57:cf:7d:dc:e7:
ce:ef:33:ae:20:c6:82:bf:1a:a1:06:e9:41:8e:6d:
e0:ee:6f:8b:f9:ee:3d:f5:2b:e6:a6:64:a3:c0:c3:
dd:dc:db:67:cd:83:b1:5b:99:9c:3d:13:9c:87:ea:
65:e9:4a:d3:48:4b:30:3f:1c:6f:1a:cb:26:88:f7:
53:fb:d2:4e:fb:2b:45:d2:69:cd:9b:7f:6b:ca:4a:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:02:9E:80:0B:62:07:A8:7F:50:D4:9D:2F:CE:45:1B:3E:EA:93
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCC5FA5AEDB511EF87F71026C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f80::/32
Signature Algorithm: sha256WithRSAEncryption
44:49:c6:99:eb:f7:3d:b1:56:2f:c9:56:a1:32:35:d0:2d:5a:
74:7c:fe:90:28:25:52:9d:c6:ad:eb:66:4f:8d:66:fb:33:fa:
9f:c5:05:2b:71:5b:6b:11:3a:d8:ac:d7:a4:e7:74:78:28:8f:
f1:25:f5:e5:8c:6d:31:2e:78:7b:48:83:21:9c:13:76:fd:ba:
be:ec:aa:8f:2d:3b:7c:f3:ef:a1:65:a7:3c:7d:27:ec:59:38:
9a:06:91:c9:e4:76:8c:ac:c1:09:42:a1:91:97:4a:47:18:42:
9d:54:80:06:80:0c:2b:47:54:16:e1:8a:c2:1e:e8:81:3a:15:
d3:e0:76:2b:f2:40:6e:6c:0c:0e:bc:69:2f:5f:49:f1:b1:b1:
9c:b8:64:87:5f:61:50:c7:bc:8a:59:51:dd:b1:bb:56:ab:7b:
e1:c2:f3:13:10:4f:78:1e:14:ed:12:a2:7f:28:63:44:ea:de:
48:04:2e:a6:cb:93:21:53:28:64:82:2e:6a:68:f2:b5:a8:3b:
29:89:31:fe:f2:e9:b0:8b:8a:46:25:d1:fc:ac:c2:cf:b3:64:
26:53:db:55:ba:e7:51:1d:6c:85:62:15:07:38:c8:ff:ff:c3:
92:7f:b8:8c:d0:03:3d:3e:08:f7:ac:cf:9f:2b:e7:82:e1:92:
0f:01:60:9b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIDAKY6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDIxODA1MDQ0MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdiNDE0ZWEtOTM4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAObFabf9jEdSC5Bh4RZDWfS6cIyBZgvNvdpom1cf6ad7s6PWIJ6E8SZFFSyY
1m1TOrEXTCfdacI6dsJTd36FEhbZIIVfYh9Z550VAuCKCWrX+1Sy2iOIuP+TgEHm
93wEjk5snrVx7xwa3jG/m01K5uHie6W+PEWJ4ESx5hxbsaZNUujounO+nVr0QsEX
DMuMZlSfpyGjotJChmiA7/oCirWwQPn3XTMfQAWp9kqZrlfPfdznzu8zriDGgr8a
oQbpQY5t4O5vi/nuPfUr5qZko8DD3dzbZ82DsVuZnD0TnIfqZelK00hLMD8cbxrL
Joj3U/vSTvsrRdJpzZt/a8pKt5ECAwEAAaOCApYwggKSMB0GA1UdDgQWBBRrggKe
gAtiB6h/UNSdL85FGz7qkzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RDQzVGQTVB
RURCNTExRUY4N0Y3MTAyNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAJAIPgDANBgkqhkiG9w0BAQsFAAOCAQEAREnGmev3PbFW
L8lWoTI10C1adHz+kCglUp3GretmT41m+zP6n8UFK3FbaxE62KzXpOd0eCiP8SX1
5YxtMS54e0iDIZwTdv26vuyqjy07fPPvoWWnPH0n7Fk4mgaRyeR2jKzBCUKhkZdK
RxhCnVSABoAMK0dUFuGKwh7ogToV0+B2K/JAbmwMDrxpL19J8bGxnLhkh19hUMe8
illR3bG7Vqt74cLzExBPeB4U7RKifyhjROreSAQupsuTIVMoZIIuamjytag7KYkx
/vLpsIuKRiXR/KzCz7NkJlPbVbrnUR1shWIVBzjI///Dkn+4jNADPT4I96zPnyvn
guGSDwFgmw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:06 2025 by rpki-client