Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa
File: DF8602D05E5B11ED994E491CC4F9AE02.roa (raw, json)
Hash identifier: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=
Subject key identifier: 68:BC:55:81:FB:EB:96:6A:F0:8D:47:6A:B9:B4:0F:CD:53:36:A2:E9
Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Certificate serial: 34E4
Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa
Signing time: Wed 02 Oct 2024 14:50:34 +0000
ROA not before: Wed 02 Oct 2024 14:50:34 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38851
IP address blocks: 58.115.0.0/18 maxlen: 18
58.115.8.0/21 maxlen: 21
58.115.16.0/20 maxlen: 20
58.115.32.0/19 maxlen: 19
58.115.48.0/21 maxlen: 24
58.115.192.0/20 maxlen: 20
203.133.56.0/24 maxlen: 24
203.203.220.0/22 maxlen: 22
203.203.224.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13540 (0x34e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F47
Validity
Not Before: Oct 2 14:50:34 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fd5dba-0fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:a9:b8:cb:c2:04:8e:02:e3:c7:4a:ed:0d:
f0:fc:66:37:3f:55:04:48:f8:c2:50:2f:8c:e8:e0:
6b:8c:d5:6a:7d:f3:5c:db:32:18:c1:47:c6:19:60:
cb:2b:42:67:94:9f:00:06:0b:07:2a:29:81:09:69:
fb:37:da:3f:5d:ed:b5:75:9e:a7:97:57:a9:4f:05:
2e:cd:a9:b4:fa:3d:46:02:ac:e2:79:b3:09:d6:90:
58:7a:98:08:89:9e:86:e3:33:ba:f6:26:c0:75:26:
2c:dc:57:c2:89:f7:e9:e9:ae:88:29:75:eb:d5:fc:
e8:61:24:91:48:5c:7a:6f:be:be:43:aa:b8:a7:18:
cb:5d:17:ac:55:3b:71:2a:c7:08:26:09:94:23:e5:
da:33:65:44:1c:73:c0:d8:13:f0:89:91:ac:df:e2:
0e:ba:5c:8f:6d:58:94:c3:48:74:77:8a:df:89:1a:
99:93:eb:70:0f:c4:7a:d4:aa:15:88:0f:25:54:03:
8a:82:25:2a:ad:17:3e:a6:ad:67:77:1c:1b:55:b1:
ff:28:b0:47:8b:fd:83:b7:d6:14:6e:99:ad:7c:d0:
15:2e:13:ce:0c:d1:64:50:6a:a5:f2:27:cd:d5:fe:
2b:f4:37:27:33:45:f3:cc:bf:b3:a5:c6:b7:1a:34:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:55:81:FB:EB:96:6A:F0:8D:47:6A:B9:B4:0F:CD:53:36:A2:E9
X509v3 Authority Key Identifier:
keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.115.0.0/18
58.115.192.0/20
203.133.56.0/24
203.203.220.0-203.203.255.255
Signature Algorithm: sha256WithRSAEncryption
3b:a7:f6:20:79:e1:c5:ac:2e:f4:6d:04:8e:45:c9:b7:6b:ea:
43:fe:b6:de:66:3d:30:0e:5a:cd:40:27:6f:0e:32:46:ad:04:
18:78:ad:21:a0:57:74:3d:97:a3:d0:a2:d1:34:56:72:94:5d:
77:9a:44:be:9d:38:0f:41:54:9d:e8:d5:94:42:8e:86:9a:6b:
8a:cb:ae:cb:03:56:ea:f5:ae:c2:48:14:d4:ce:0b:3f:47:fb:
85:ef:ca:25:12:7f:ac:7a:c0:ce:b0:9f:28:8a:3d:ae:50:bf:
ba:88:d9:ff:12:a7:4d:62:86:fe:16:55:ce:89:6f:df:79:ce:
1b:34:30:f4:a8:eb:4a:31:b9:b4:fc:25:9c:9a:9f:b6:2e:5d:
74:c7:93:2e:e5:47:a8:86:b4:92:40:9d:67:31:42:9e:02:cc:
aa:21:cc:b5:c6:42:3b:ba:5a:12:ab:df:55:cb:17:71:96:11:
e9:d9:9d:d9:7f:d4:e1:c8:cf:00:f0:74:85:a7:a9:47:6c:18:
e7:bd:0f:02:54:c1:cc:b3:10:ba:bf:f1:5f:c8:2a:8b:13:1f:
a8:7a:ec:68:61:76:fc:ec:2b:83:3a:03:c5:2a:9b:6f:7d:9b:
b5:7c:a6:16:3e:33:b9:0f:18:6f:d5:48:3b:7a:a0:6c:a9:dc:
4e:7c:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:44 2025 by rpki-client