Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/71F2B10843B611EB9FB8597CC4F9AE02.roa
File: 71F2B10843B611EB9FB8597CC4F9AE02.roa (raw, json)
Hash identifier: yEm0JAMTQ5YRtRCBNVEhrcFzV4ys690RLxy2ur5XKVY=
Subject key identifier: 89:72:D9:95:34:34:5A:DD:36:CE:D0:2A:60:D6:AF:CA:01:3E:25:0C
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 359D
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/71F2B10843B611EB9FB8597CC4F9AE02.roa
Signing time: Wed 18 Dec 2024 14:40:41 +0000
ROA not before: Wed 18 Dec 2024 14:40:41 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38193
IP address blocks: 202.69.58.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E
Validity
Not Before: Dec 18 14:40:41 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6762dee8-217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:17:eb:f9:cf:a5:31:b2:20:18:4e:1f:de:
09:c2:c6:5e:d4:8f:b1:0e:9c:94:c1:dc:c7:c5:5f:
70:f9:57:d6:26:ea:02:33:da:d5:d8:db:2c:96:27:
fc:dc:ba:d3:df:02:08:10:d6:89:c0:e3:89:28:8b:
b4:da:ad:2c:0e:07:ec:9a:b1:5a:ba:eb:45:11:1f:
9d:33:49:ec:b7:f7:ee:72:cf:e7:d2:f4:1b:58:40:
8d:ca:cc:f0:8b:cf:ea:85:9a:5e:f7:e6:9f:39:65:
13:53:d4:ca:37:5f:8f:11:b9:bc:e2:c5:20:8d:d4:
b0:2e:67:1b:49:12:48:84:4c:ee:a7:d7:b9:ad:43:
b5:9b:c6:06:bf:6a:1f:e1:10:5c:38:48:92:e0:4f:
d7:8f:66:1b:1e:26:b4:2d:c1:11:79:7b:46:aa:96:
df:3c:c9:a4:da:5e:b0:21:b9:e7:90:5f:af:91:0b:
11:83:92:00:c2:6e:c6:fa:53:7f:13:41:4e:07:db:
18:89:2e:64:7d:63:da:82:14:74:b2:0f:82:64:b5:
9b:47:31:59:80:34:9c:af:d8:03:9b:02:86:94:45:
eb:2d:b8:98:e8:7f:da:3a:ce:84:e8:b9:e3:4b:e8:
34:49:ad:88:6a:80:c2:90:09:87:61:4b:e8:03:41:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:D9:95:34:34:5A:DD:36:CE:D0:2A:60:D6:AF:CA:01:3E:25:0C
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/71F2B10843B611EB9FB8597CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.69.58.0/24
Signature Algorithm: sha256WithRSAEncryption
92:84:00:fd:a9:40:8a:36:55:a6:73:01:07:30:2d:49:cb:43:
2e:c2:75:bc:f8:e2:d3:d6:c1:dd:92:70:59:a6:82:98:8d:12:
46:cd:7e:3a:55:27:db:94:92:89:0f:d0:4f:f6:88:23:13:71:
fe:02:45:3c:5b:0b:8b:16:84:5d:6b:34:ad:a4:c7:51:e4:b2:
b7:73:81:5b:89:90:91:63:8d:3a:e6:1e:7e:bd:66:81:c6:b2:
7d:4e:1b:39:6c:08:f4:73:dc:e8:fe:86:38:26:25:e6:17:69:
9b:79:db:20:3f:58:4b:c3:e2:fe:54:ed:7d:8c:12:e0:b8:01:
a1:6b:0f:42:59:48:ce:36:b3:43:56:e2:ef:fc:59:d5:3d:7f:
8f:79:98:b1:d2:98:2a:44:85:65:f7:a8:f3:b9:95:22:03:58:
95:33:fd:a8:e9:53:f5:e0:15:5a:96:46:f3:fb:44:34:11:36:
2d:56:64:04:df:76:dc:8f:21:a5:3c:82:5a:3c:de:06:c2:5a:
a9:fe:94:ae:7a:87:bf:93:87:e3:de:ce:1a:45:d9:80:3a:55:
2d:14:94:ed:11:b1:fb:a0:be:8f:fd:29:9e:97:ce:c9:71:b7:
65:d1:16:d4:ee:ed:6c:a4:7c:a1:65:e3:3c:c8:0e:3f:87:cd:
cc:c0:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:44:59 2025 by rpki-client