Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa
File: C3F52172A3E611EAA751A46EC4F9AE02.roa (raw, json)
Hash identifier: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=
Subject key identifier: A4:3E:A0:A3:EC:FD:9D:4E:C4:2F:48:FF:EE:46:3E:25:05:3B:AD:27
Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Certificate serial: 1FD7
Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa
Signing time: Thu 06 Mar 2025 17:35:26 +0000
ROA not before: Thu 06 Mar 2025 17:35:26 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 0
IP address blocks: 123.255.88.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8151 (0x1fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6
Validity
Not Before: Mar 6 17:35:26 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c9dcde-2971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:97:43:23:ef:4a:92:99:23:80:34:1b:47:
17:a5:78:19:6b:03:3f:1d:01:81:04:25:18:8d:fa:
a5:ff:75:6e:1d:12:41:82:c1:31:52:90:5f:b4:ed:
df:9a:dc:ac:f4:96:3f:84:d2:67:48:d0:1d:06:54:
bc:a6:da:c6:ec:7f:1c:47:8d:45:22:4a:d7:bb:15:
bb:0f:3a:e9:b1:f2:c8:77:cf:5e:f1:b7:9f:f4:c7:
da:72:75:50:dd:14:62:b1:61:39:7e:d3:be:11:19:
94:f3:19:91:f3:96:da:24:f0:f8:bf:13:a8:49:8c:
96:80:ba:fa:c2:a0:e7:f7:e2:65:71:e7:99:ae:86:
16:27:8f:f7:5f:e7:d9:5b:3a:0a:43:ef:f0:33:ad:
a3:39:b3:31:da:03:ed:c2:56:e8:d0:b0:c9:7b:93:
40:64:3a:b0:39:da:93:a5:fa:b1:d6:be:22:95:1a:
0b:18:0c:84:6d:d8:df:58:5f:44:b2:da:a7:f6:5f:
9e:59:eb:d0:b6:6c:e8:f6:2a:ac:cf:a7:fe:15:06:
c3:ab:8e:08:2b:1d:71:12:5e:e0:d0:89:69:cd:72:
a3:8b:54:8e:d3:0b:a5:6d:6c:6d:c1:c3:1d:df:90:
de:57:5c:28:9f:79:7e:85:8e:5a:60:09:6f:f5:55:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:A0:A3:EC:FD:9D:4E:C4:2F:48:FF:EE:46:3E:25:05:3B:AD:27
X509v3 Authority Key Identifier:
keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.255.88.0/21
Signature Algorithm: sha256WithRSAEncryption
00:98:ef:34:e2:2e:5a:16:ff:ad:78:66:13:d4:f9:a6:9d:c2:
d5:58:56:b3:5d:ae:e6:e0:48:36:a8:db:77:41:0f:dc:e8:ed:
b1:fc:0d:a7:14:40:09:14:eb:4e:94:92:ac:3c:c7:fb:50:82:
78:94:fd:40:b6:4a:56:50:c9:95:3f:e3:3b:94:38:7c:af:38:
bf:00:29:5a:9c:ed:22:24:be:68:4b:df:90:cb:f4:f9:0f:19:
b3:39:b1:54:72:e8:6c:5f:64:74:51:61:aa:d2:50:f5:4b:8f:
06:5c:b1:10:e4:ec:36:22:92:78:e8:28:15:2b:6d:21:02:2c:
04:03:7b:75:e1:4d:54:90:27:65:cd:4b:bd:9c:6c:63:6b:03:
69:65:b6:02:ec:a5:ac:25:f8:b0:50:78:86:d5:c5:cc:7b:fd:
ad:cc:f1:e1:a3:8a:46:3e:e6:58:7b:42:0e:79:c5:ae:1e:45:
fb:50:5c:4a:ea:28:f9:19:c3:13:51:58:1f:97:6a:8f:97:90:
e3:d8:61:4c:e9:4e:a9:9e:d7:48:be:d9:f8:b6:af:ae:b2:99:
e9:1b:f0:65:77:bd:6b:18:9c:6e:8e:40:65:39:31:8f:dd:48:
09:54:05:d2:07:23:34:a8:cb:e8:4e:f3:b7:dc:39:41:17:fd:
09:7c:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:15:25 2025 by rpki-client