Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
File: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (raw, json)
Hash identifier: LGtM8Ybe8d9FSZCTF44PIP0ysHKBmg7VxE2tYMnwgq0=
Subject key identifier: D3:D1:BF:00:A0:C7:2C:08:47:1E:74:09:EF:DF:B8:C9:D1:19:12:F3
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0F89
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
Signing time: Fri 28 Feb 2025 19:30:13 +0000
ROA not before: Fri 28 Feb 2025 19:30:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 397235
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA
Validity
Not Before: Feb 28 19:30:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c20ec4-69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:e9:7f:50:fa:b2:d7:f6:93:f3:4d:61:8b:
48:1d:8a:0a:a1:dd:df:0f:bd:7f:ff:a3:43:72:8b:
a4:5c:32:d3:54:d7:b3:3b:cd:26:94:7a:5e:cb:5b:
3b:66:2d:1c:79:9f:47:4d:40:35:82:1a:d8:50:97:
d7:56:4c:fd:43:23:8b:47:c1:80:8d:46:a3:84:ab:
b8:1a:e3:6c:97:ed:1e:3f:f0:ee:4d:45:1c:60:07:
d0:d2:1a:ec:b3:a6:4c:dc:12:bb:5e:f6:70:a9:3f:
01:48:74:7a:0a:29:22:df:5c:be:2f:c7:e5:ec:46:
f9:03:fd:15:f0:10:58:17:76:bd:81:65:3c:87:5b:
ba:a4:4f:c0:bb:79:7c:b2:15:e9:eb:d0:d8:24:2a:
9a:e7:43:9c:ab:31:17:c5:ae:1e:89:3e:54:b1:c8:
35:f8:34:d6:0a:3a:2b:69:47:a1:b6:94:39:17:e0:
02:1f:89:8f:df:15:83:aa:6d:f7:06:47:30:c2:a5:
9f:f5:c8:21:3c:90:0a:77:34:42:a8:50:c3:e7:a4:
aa:5e:d4:76:65:48:4f:ef:95:7b:d6:57:24:d3:c8:
0e:29:d2:38:b7:62:0d:4e:5d:22:eb:8e:1d:1b:e7:
fe:e6:09:6f:e9:5d:0b:4d:b7:a1:ad:96:46:ea:23:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:BF:00:A0:C7:2C:08:47:1E:74:09:EF:DF:B8:C9:D1:19:12:F3
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
61:58:2a:af:02:6d:4d:32:ba:83:f9:e1:11:f3:97:be:11:62:
24:96:02:e9:d2:ad:87:e9:f7:f6:d3:bf:72:2a:34:2f:66:d4:
e2:fb:a2:78:47:ee:dd:23:d4:85:8d:f9:6a:80:9f:a6:57:0d:
1b:a6:03:b6:1a:b3:4f:cd:8c:26:46:44:08:fb:52:10:a7:43:
97:c1:8d:9c:be:7c:01:40:cf:ad:ed:4b:b5:33:ef:ec:40:40:
99:29:69:df:5b:f1:37:17:37:74:bf:0e:4d:c3:48:6c:a3:49:
a6:6c:39:23:c4:56:c8:f2:69:0d:64:8a:9d:33:ab:4f:0c:b7:
ac:ac:90:d8:c2:1b:f2:0d:bb:9d:c9:82:29:c4:5e:79:35:10:
a5:ac:a7:42:7d:5d:09:e0:d0:01:e8:8a:1a:af:8e:65:be:16:
a5:88:bf:a7:73:21:ce:35:ab:1d:4e:5f:7a:33:12:9d:b4:d0:
f8:40:49:ed:fe:2e:81:46:eb:04:4a:7f:43:f2:f2:6d:79:b4:
f5:d0:a1:ee:a3:7d:a3:ad:63:fd:bd:54:e9:31:6f:27:d2:32:
cf:f1:67:7f:57:21:38:ec:03:35:68:34:32:c4:39:26:da:e5:
86:bc:60:d3:fd:de:4d:d3:e7:70:7b:48:06:59:4f:1f:d8:00:
98:c7:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:36:39 2025 by rpki-client