Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
File: 26A143C291EB11EF8A024083C4F9AE02.roa (raw, json)
Hash identifier: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=
Subject key identifier: 05:7F:63:D7:85:BD:F2:08:00:3C:3F:66:63:35:DA:29:D4:B6:5A:44
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 35CA
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
Signing time: Mon 30 Dec 2024 14:26:44 +0000
ROA not before: Mon 30 Dec 2024 14:26:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 198949
IP address blocks: 125.19.17.0/24 maxlen: 24
125.21.240.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13770 (0x35ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3
Validity
Not Before: Dec 30 14:26:44 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6772ada3-ed5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:8b:a4:9c:b1:ff:90:a2:f5:53:6d:9a:65:
80:28:67:3f:c2:b7:60:0d:2a:26:28:6b:39:40:32:
56:43:a7:09:42:9a:11:47:72:a5:d7:3a:43:2d:b0:
6d:ef:e8:a0:af:4b:5e:37:60:58:c4:d4:fc:37:23:
13:f1:1f:d5:f5:ad:5c:0b:e2:b6:f2:a8:07:47:f2:
45:64:fd:6c:a2:d5:8b:86:75:8c:35:9b:d6:55:b4:
64:9d:b9:c6:49:9d:94:1f:ed:38:57:d5:0d:29:91:
83:ad:45:24:71:3e:80:57:ea:8b:14:99:91:50:63:
30:d5:eb:d9:b3:fd:95:f5:b6:ba:92:bf:b7:15:0b:
ca:28:25:f9:a1:13:26:4e:82:0b:2a:4d:19:4b:f9:
a0:e5:5b:68:e8:3b:f5:40:1c:fb:fd:c7:40:fb:47:
b2:66:84:64:1e:c6:57:0a:8e:13:0f:6c:c8:9e:b0:
02:64:7c:84:dd:84:ca:d0:78:35:62:f8:18:b6:1e:
ca:72:7e:3d:d5:4b:d3:25:53:9c:33:ec:77:6b:4f:
52:c3:15:5c:6e:d5:03:cb:db:52:ff:71:17:1b:fc:
32:df:18:b7:2e:7d:b1:e0:7e:06:4d:ff:0a:c7:86:
8a:b2:1c:b1:16:bf:88:ac:90:b1:5d:20:de:33:06:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7F:63:D7:85:BD:F2:08:00:3C:3F:66:63:35:DA:29:D4:B6:5A:44
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.19.17.0/24
125.21.240.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d3:a1:d2:7c:f0:05:2c:1f:56:19:d0:f6:9e:35:4a:f3:29:
d1:50:89:fb:b5:65:30:f0:dc:af:da:e1:c7:fc:56:dd:ff:45:
29:5f:51:54:10:ea:f4:94:01:4d:ed:57:cb:93:a5:ad:2b:fd:
4f:69:ab:95:0e:05:6c:5a:a6:2a:c7:d9:9a:a6:87:5e:af:78:
79:fd:51:6c:83:f4:2f:da:a8:6f:a7:50:0b:74:49:7b:f9:5d:
c1:bc:2a:95:9d:e2:07:a6:49:f9:34:78:d0:35:0b:f5:b6:f4:
5f:07:ce:42:c7:36:e9:b7:54:41:fa:25:ff:38:b5:4a:43:9a:
fb:df:0a:7d:98:76:ac:c2:9c:73:a9:d4:c1:fd:35:bf:d9:18:
2c:95:44:db:15:7a:30:9e:bf:61:c0:cd:c0:fb:f5:77:e5:2f:
d9:ac:b7:b4:b4:bf:72:bb:27:63:96:86:ea:55:e9:f7:78:c5:
5e:f8:a7:4b:f0:22:03:01:0b:4a:7e:35:46:8f:bb:83:57:48:
b1:86:03:c2:68:15:fb:28:ab:6c:33:df:7d:20:f0:02:1d:b2:
d6:0e:47:8a:1f:5b:b0:8e:c8:e9:f8:ff:c4:f3:cb:f7:42:5e:
6b:53:f8:45:d8:82:94:da:b0:f4:cd:e7:90:38:93:a6:c4:72:
82:2a:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:11 2025 by rpki-client