Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa
File: 1994900403CE11EAA10C6A84C4F9AE02.roa (raw, json)
Hash identifier: +t2OsFQRgFf0c7jNBR5fu1U2IpPKMIuwM5iZNaY//qo=
Subject key identifier: ED:85:97:F6:90:41:1F:57:24:7B:24:B3:C0:8C:A1:D8:49:A6:02:4C
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0C59
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa
Signing time: Fri 14 Feb 2025 19:09:49 +0000
ROA not before: Fri 14 Feb 2025 19:09:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 55846
IP address blocks: 115.127.40.0/22 maxlen: 22
115.127.40.0/24 maxlen: 24
115.127.41.0/24 maxlen: 24
115.127.42.0/24 maxlen: 24
115.127.43.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3161 (0xc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3
Validity
Not Before: Feb 14 19:09:49 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67af94fd-fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:7c:b7:51:c1:2a:19:80:06:9b:b9:c0:94:
2f:7c:ab:a9:61:b7:de:e4:56:4c:64:a9:76:39:a1:
34:3a:50:5f:2b:21:8a:64:96:13:6d:38:9b:cc:f5:
f1:65:65:0d:6d:12:ee:43:f6:03:a6:1b:f0:5b:cd:
8a:8f:83:7c:25:f5:f4:af:25:97:53:14:3c:31:63:
97:a2:c9:f6:cc:7d:98:90:08:5e:43:ef:87:d6:2f:
cf:e6:92:62:3b:bf:a0:86:f9:5d:68:8b:c2:89:f8:
79:fc:58:7a:01:bb:94:aa:4b:26:36:3b:1f:8e:08:
3f:fa:fc:80:a8:30:4e:48:80:b5:8f:91:96:a0:b8:
1a:cb:90:9c:3b:d8:04:ba:ef:84:01:51:00:30:50:
c8:65:be:da:aa:91:e4:3d:88:d8:4d:0b:72:9f:c2:
57:32:c5:b9:28:79:0a:f3:e0:7c:86:2d:05:3c:92:
cc:eb:0e:e8:bb:6e:c1:d9:b3:5a:72:bd:2d:11:8c:
24:b8:58:33:fd:bc:74:80:c3:b5:9f:bd:f2:77:7f:
c9:e7:32:6d:b7:1c:d6:3a:4d:41:0d:61:4f:11:50:
65:27:55:07:ed:f4:22:10:79:33:00:81:82:e4:59:
b0:5b:4c:ec:50:4e:1a:ae:2e:74:97:1a:c5:45:62:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:97:F6:90:41:1F:57:24:7B:24:B3:C0:8C:A1:D8:49:A6:02:4C
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.127.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:79:cf:a7:5c:c0:99:7f:d4:be:0c:55:3d:a4:ba:41:df:bd:
c8:33:3b:1b:49:3a:79:d4:15:22:20:ab:bb:f9:9b:09:18:4b:
68:11:05:97:76:1b:07:88:94:f3:f2:94:45:65:c4:38:65:b7:
f1:9e:c1:56:25:f7:c5:58:7a:e7:4f:46:d2:7a:92:f6:6c:58:
79:8e:4b:9d:18:6f:bf:b9:e2:7e:b5:52:cd:29:94:ac:a0:97:
ef:89:98:b8:16:12:e8:ec:23:00:19:f2:64:16:97:af:8d:2e:
37:4e:f7:19:f1:d4:48:64:62:77:21:09:ae:c3:09:92:f2:a5:
55:d3:44:c9:26:08:ff:1d:fc:e1:70:9b:30:2a:4f:b9:3c:92:
3a:23:90:2d:cb:da:b0:b7:4d:62:38:a9:31:9a:3a:11:1e:0e:
e8:21:97:8e:b9:f7:c4:e9:ef:5f:0a:81:90:fc:86:bc:3e:36:
4b:f4:fb:6a:93:4e:b6:06:84:92:67:7c:1e:a5:df:59:58:60:
4a:5b:b0:41:61:76:aa:dd:01:4c:7a:50:dd:1b:d0:38:2c:ee:
fd:17:50:eb:e2:86:4c:ca:13:55:6b:0a:8c:b7:c7:41:2d:28:
12:39:50:b9:61:73:ba:a6:ff:2b:47:e7:43:8a:b2:4d:5a:1f:
e6:20:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:22 2025 by rpki-client