Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa
File: B811CFA2BF7811EE80314533C4F9AE02.roa (raw, json)
Hash identifier: /1U9CvjJjnoR+Cc8eBTwWfrYGw1ed/NEOO7axvdE43I=
Subject key identifier: D9:F8:08:99:F3:AD:54:B0:74:72:0C:17:1E:92:2A:2B:A0:DB:B0:49
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 06FA
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa
Signing time: Sun 30 Jun 2024 23:06:48 +0000
ROA not before: Sun 30 Jun 2024 23:06:48 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132825
IP address blocks: 43.251.112.0/24 maxlen: 24
43.251.113.0/24 maxlen: 24
43.251.114.0/24 maxlen: 24
43.251.115.0/24 maxlen: 24
119.42.32.0/24 maxlen: 24
119.42.34.0/24 maxlen: 24
119.42.35.0/24 maxlen: 24
2001:df0:fbc0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77
Validity
Not Before: Jun 30 23:06:48 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6681e507-d346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:04:e4:ae:67:5c:ff:f0:65:4e:22:e7:04:
61:ca:4b:e5:60:05:59:29:1a:dc:46:8a:3d:b4:d7:
41:0a:6a:be:07:a3:7f:39:82:ae:8d:09:8f:74:1e:
4b:d1:e3:0b:ff:20:3f:b9:71:1f:06:48:f4:05:8d:
f8:19:6f:2a:b1:ff:bc:a2:f4:cf:ac:20:0c:29:9b:
54:4b:0a:5b:d5:bc:b8:6e:f6:39:d6:df:0a:9c:a0:
7a:40:c3:56:38:6c:ea:95:cd:91:f9:06:09:df:48:
45:40:01:cc:cd:de:0d:72:3a:bc:11:cf:f8:46:97:
b8:04:ef:bf:dd:4a:72:0e:56:df:c9:d8:5f:c3:67:
f7:31:db:58:4d:af:10:ac:3d:b7:43:7f:bd:53:44:
9d:d7:8e:66:51:27:2f:ae:53:b8:22:75:cb:97:e5:
28:ae:04:07:7f:54:8e:19:72:61:39:36:0f:fd:46:
2e:a0:07:1c:07:d0:b2:5f:51:6c:5d:22:88:e3:48:
c7:cb:de:9c:87:ba:30:38:32:c9:3f:40:9b:72:12:
fe:6a:0b:25:2c:80:9d:25:78:b2:95:88:4f:49:a1:
fa:71:25:67:b0:9a:d1:ef:fa:d3:ab:4c:e6:53:39:
a7:05:74:96:7c:37:b4:b6:ce:7b:7c:49:d4:04:2e:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:08:99:F3:AD:54:B0:74:72:0C:17:1E:92:2A:2B:A0:DB:B0:49
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.112.0/22
119.42.32.0/24
119.42.34.0/23
IPv6:
2001:df0:fbc0::/48
Signature Algorithm: sha256WithRSAEncryption
99:56:f2:6b:62:ac:93:7f:53:13:06:bf:37:37:49:8c:55:79:
59:05:97:89:fa:6a:39:4d:40:73:55:ab:1e:12:12:b9:23:8a:
8e:13:d4:e1:ca:d9:45:88:96:93:76:64:f8:85:6d:00:60:61:
64:da:a9:fd:97:73:c7:9f:dd:dd:b5:b6:79:ee:c6:a1:1b:0a:
d7:bd:b7:7c:a4:39:82:3f:8f:dc:08:a8:39:bb:c1:cb:32:ab:
31:6d:44:4c:ed:ea:95:5f:b5:27:cb:19:c7:c6:f2:cc:ee:fa:
8a:bb:a6:fc:15:b4:65:31:6b:e5:ec:a8:5e:43:72:3e:1a:24:
18:e4:3d:1e:47:2e:fd:a9:3e:b0:ae:f8:45:17:59:17:8e:41:
4a:77:01:44:ec:82:47:34:9c:8f:06:95:39:02:82:f6:52:3f:
e4:f1:bf:f0:88:6e:9e:c8:9c:93:b4:c7:cc:8c:ea:47:82:24:
f1:52:94:4a:00:6f:51:2e:84:d9:24:ca:5f:8e:68:1f:42:6e:
66:cd:27:37:64:8c:8f:0e:62:c0:9d:d8:ac:4e:b4:0f:9d:94:
c4:08:80:af:e2:05:8d:28:aa:8e:9b:81:20:52:02:25:00:81:
42:8b:bc:83:57:47:19:a6:cd:0b:74:d0:b2:5c:de:85:2a:45:
40:b5:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:45 2025 by rpki-client