Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
File: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (raw, json)
Hash identifier: 6xFx//HoX9CSfFy+iBeZSYBO+hoRtkc5fjd5y3qvsJk=
Subject key identifier: 06:00:27:67:A5:E9:01:74:EC:3A:B8:F9:6C:82:6A:26:28:E8:F8:2A
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 35F3
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
Signing time: Thu 02 Jan 2025 13:06:01 +0000
ROA not before: Thu 02 Jan 2025 13:06:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9730
IP address blocks: 59.144.97.0/24 maxlen: 24
59.145.72.0/23 maxlen: 24
122.185.26.0/24 maxlen: 24
125.20.15.0/24 maxlen: 24
125.22.113.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13811 (0x35f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3
Validity
Not Before: Jan 2 13:06:01 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67768f39-5947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:1b:96:66:3d:59:6c:0b:96:8f:91:02:00:
90:5c:f9:ca:3c:bd:db:d2:1d:54:3f:19:fc:44:fc:
14:f1:10:a9:d9:17:ae:d4:1f:5a:ac:ef:27:22:ee:
90:8d:cb:d1:68:73:4e:47:9f:3d:49:47:f2:0d:b9:
48:5e:12:7d:83:e9:87:5c:99:3e:28:cb:60:49:6b:
a4:f7:97:41:28:4e:ba:05:f0:41:2e:c5:84:ca:a3:
fb:64:c1:cc:ec:91:0d:39:48:93:28:1c:51:62:c6:
b1:b0:1c:0e:2e:e6:d6:43:2a:a4:b4:3b:40:39:47:
ad:7a:b6:fd:2b:58:4d:05:41:f6:b8:75:ad:3f:5f:
4a:ac:fe:e6:4a:e2:19:f9:cf:1e:5b:58:ce:c2:9d:
05:4e:d2:5b:8d:2d:09:5b:e7:72:74:65:70:7d:c9:
f4:20:11:35:48:db:c8:0e:c1:3f:47:ea:54:16:84:
7c:fc:f9:85:61:38:58:e8:28:c1:a1:63:3a:53:30:
a1:b6:73:25:62:87:44:5a:81:b0:c2:7b:da:ee:5d:
f1:72:fb:03:b9:0d:c1:6a:9c:80:83:9b:38:91:3b:
05:b0:cc:56:50:08:70:6d:66:3a:f9:fd:6f:15:91:
d4:7e:01:b6:d2:98:71:08:ff:93:0b:e3:8f:9a:4b:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:27:67:A5:E9:01:74:EC:3A:B8:F9:6C:82:6A:26:28:E8:F8:2A
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.144.97.0/24
59.145.72.0/23
122.185.26.0/24
125.20.15.0/24
125.22.113.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d3:78:f9:c0:40:5a:35:66:e7:91:14:a7:61:b3:5c:27:a3:
14:79:31:c4:8a:ca:6c:64:01:05:54:44:8b:1b:76:76:86:e7:
0c:b5:3d:63:e9:8c:e2:3d:5b:d3:77:71:e1:6e:05:55:72:f9:
bc:39:ab:2a:6a:e2:32:e6:d5:6e:62:73:aa:02:8d:ad:e0:7b:
64:93:88:52:5c:53:02:bb:ec:4e:71:60:89:dc:7d:d8:31:2c:
57:e1:b3:c2:22:2f:d6:3f:03:db:cb:f7:f4:71:44:06:82:82:
e6:bf:13:bd:2b:18:57:bb:49:ab:9e:f7:40:cd:31:c2:48:0a:
b7:ec:df:69:10:b3:bf:3d:56:24:24:b0:e5:75:c6:8e:6d:18:
27:65:6d:d7:63:64:44:af:d6:93:2d:99:3d:17:c4:4d:94:ca:
5c:7a:87:64:13:77:dc:a7:85:c9:51:8b:75:b7:33:27:e9:64:
28:7c:af:61:bd:77:e0:58:ad:70:87:a1:86:fe:c3:dc:bb:d3:
dc:92:bd:10:7e:ed:8b:68:01:29:2f:c8:8a:b1:32:72:cd:91:
81:71:15:69:06:a4:72:cf:f9:f1:0f:98:b7:d0:8b:c6:a2:04:
f0:4d:62:2d:d2:d4:04:96:4e:d2:63:d1:26:53:bb:9f:93:f9:
6d:58:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:39 2025 by rpki-client