Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4BB6463ACA7111EF80BE087FC4F9AE02.roa
File: 4BB6463ACA7111EF80BE087FC4F9AE02.roa (raw, json)
Hash identifier: RUVWXi0v89hLtmytRaeqmFVGyKwuaR0wRZ4UM/hs7tw=
Subject key identifier: 43:01:27:AA:6F:8D:A7:89:71:FA:EA:88:F8:A4:C7:68:6C:CC:81:68
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 35A9
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4BB6463ACA7111EF80BE087FC4F9AE02.roa
Signing time: Sat 04 Jan 2025 07:55:42 +0000
ROA not before: Sat 04 Jan 2025 07:55:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133933
IP address blocks: 202.69.58.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Jan 4 07:55:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6778e97e-3ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:3d:7d:b9:78:0b:c7:be:52:97:80:67:cb:
0e:b7:a3:8a:fc:f8:a7:00:19:c9:9d:fa:50:b7:77:
c0:b1:48:9c:91:d0:42:58:ad:59:26:b0:c3:66:a1:
8b:68:45:e1:c1:c3:a5:ad:54:99:62:4b:41:b1:f5:
f4:d4:36:a1:f5:4e:e1:42:6c:29:89:07:a4:0e:4f:
56:1c:81:32:9f:d5:58:6a:12:35:37:04:a1:a6:5b:
eb:c9:c2:c1:e6:90:40:f9:9e:9c:ad:d4:ea:6d:cc:
16:5e:92:88:20:f2:ea:59:b6:6a:78:d8:8c:cd:6d:
5b:f1:9d:37:92:71:46:2e:1d:cd:df:60:0e:23:f6:
e1:97:bf:6f:65:ce:cd:0c:5e:32:ad:c3:63:67:fc:
3a:82:68:51:a2:07:9f:58:42:4b:cf:dc:f7:2b:b1:
67:cd:2a:d2:4a:d2:d1:36:52:0b:b2:9a:1d:7b:99:
46:65:b1:54:ed:19:60:d0:7e:8d:b4:2b:7a:3d:cd:
23:6d:19:22:69:b3:ce:a6:95:63:78:72:2f:65:75:
7d:59:e6:1a:9f:ad:0e:12:a0:40:b8:ea:cb:fc:eb:
2c:63:e8:d3:0c:ce:d9:01:2b:e9:ca:f6:8d:a3:76:
1b:b1:ab:2f:63:30:c2:0a:c6:d5:58:c1:12:b9:7c:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:27:AA:6F:8D:A7:89:71:FA:EA:88:F8:A4:C7:68:6C:CC:81:68
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4BB6463ACA7111EF80BE087FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.69.58.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:62:6e:69:ad:a9:0b:de:84:e0:99:0f:39:d8:7e:c6:a1:
f3:60:5f:0d:20:37:60:17:b2:47:d1:d5:86:f4:b8:ce:71:59:
25:2f:dc:79:40:1a:6a:82:ff:f6:22:2b:3b:06:92:f9:97:09:
30:26:8b:3c:a0:df:70:7a:c3:09:bb:64:15:b8:2f:be:2f:ef:
f7:a8:62:d3:d7:cf:d3:d8:c6:80:17:87:63:54:21:7f:bf:19:
c6:6b:2d:92:c4:7f:d3:2f:7e:07:af:07:76:3e:e5:94:cf:59:
d5:57:da:be:74:c6:cb:43:1e:84:05:23:73:93:cf:c6:a3:06:
96:a5:0d:17:53:0f:09:73:f5:6a:fa:ae:cf:33:60:54:ef:40:
93:98:22:37:86:7a:b6:c4:89:8b:f9:83:8e:e5:6b:c5:91:be:
84:2e:f9:d5:d9:54:9d:7e:09:cc:2b:3a:03:53:4a:6a:df:2d:
f6:30:d6:77:1f:06:a5:f1:f2:ea:38:75:c3:ab:98:ac:e3:7a:
af:0c:7f:ee:5c:6e:13:ad:fa:15:b8:22:c1:d8:d8:20:bb:1c:
c2:98:9b:f2:2f:87:e7:ab:6d:5e:49:6a:8f:09:d6:c7:32:3a:
66:6e:40:b9:bd:d2:ff:38:fa:ff:9e:bd:d5:76:9f:41:85:fc:
14:47:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:03 2025 by rpki-client