Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/214232EC4FD311EF90027A63C4F9AE02.roa
File: 214232EC4FD311EF90027A63C4F9AE02.roa (raw, json)
Hash identifier: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=
Subject key identifier: B1:41:D6:01:BD:6A:BD:45:C7:32:97:A6:71:F4:1B:DF:F9:22:44:2E
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 085D
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/214232EC4FD311EF90027A63C4F9AE02.roa
Signing time: Thu 01 Aug 2024 06:56:09 +0000
ROA not before: Thu 01 Aug 2024 06:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63526
IP address blocks: 114.129.14.0/23 maxlen: 23
114.129.14.0/24 maxlen: 24
114.129.15.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE
Validity
Not Before: Aug 1 06:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ab3188-ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:3b:6a:92:cc:b7:9b:93:17:f2:31:8d:47:
f3:3d:47:78:5a:0f:54:94:e1:ac:4f:9d:88:bb:6d:
11:5f:3f:3f:85:1b:32:09:7d:e3:55:78:63:f5:8c:
c7:0c:67:89:94:84:d8:c4:cd:7b:f4:1b:69:73:83:
59:6c:6d:7c:51:75:29:f1:04:23:6e:62:3d:71:da:
15:db:f0:9b:0b:89:25:01:db:11:4c:f1:2b:9a:7a:
0e:b4:66:0d:e3:74:7d:bb:e0:d1:89:78:ea:b0:df:
06:1d:6f:f8:83:90:dd:e6:82:1a:46:e8:a4:01:23:
86:14:dd:90:8b:b5:d5:5b:fa:61:4f:59:17:31:63:
0e:4a:66:23:b1:43:02:c9:3f:c9:eb:5a:05:98:3f:
f2:bf:17:34:37:1e:4d:15:7b:e3:63:66:75:e1:a5:
05:86:ba:bc:ad:37:a9:45:ed:26:08:44:74:2c:9c:
d0:50:68:38:8c:6a:e8:89:ab:6e:0c:b0:f1:02:5f:
9c:ec:bb:ea:a8:b0:77:8e:d4:65:e2:e6:6d:0c:f7:
a8:d6:2d:87:f6:16:41:b0:24:6a:e0:fe:29:46:e5:
63:7b:fd:be:b3:d6:5a:0a:54:9d:15:b2:ec:2d:11:
1b:bd:6f:b5:eb:ad:8f:dc:d8:0f:d2:ce:c3:4c:85:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:D6:01:BD:6A:BD:45:C7:32:97:A6:71:F4:1B:DF:F9:22:44:2E
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/214232EC4FD311EF90027A63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.14.0/23
Signature Algorithm: sha256WithRSAEncryption
06:af:08:65:e7:bd:86:77:a1:25:d6:5f:85:67:f0:3d:bc:9e:
87:b0:8d:73:71:52:45:44:a3:f7:c6:83:cd:2d:93:26:99:96:
41:5d:35:27:d9:f3:67:ed:30:f5:bf:34:14:7f:29:40:eb:8c:
1c:30:71:b8:d0:4b:04:2f:85:1a:9d:2a:94:e0:c2:20:96:3e:
ab:e0:7c:eb:35:b0:90:2f:fa:e7:7f:3f:46:01:f5:3f:4e:f3:
63:e2:f4:31:a6:85:2f:19:4b:85:8c:b2:4c:8b:fe:54:8f:96:
5e:1d:be:a7:4a:03:35:27:2e:0f:b4:a5:8f:20:51:a3:3d:94:
8f:8c:ed:b6:ed:b8:07:81:52:99:40:d3:29:3b:b2:e2:40:fe:
2c:ca:83:4c:ff:89:a4:b0:58:b6:95:ae:de:66:ce:a2:04:e9:
45:58:e9:30:cf:55:b8:61:8a:6b:7b:92:09:8f:56:2d:62:04:
ad:33:ba:3a:de:b8:7d:74:68:34:70:e0:1d:de:74:f5:c3:01:
10:68:0c:73:e3:cc:af:b9:97:3f:75:7e:cf:a1:77:80:e0:27:
2c:9f:99:83:62:ec:7b:a6:93:eb:cc:75:f6:c2:a4:6f:a8:87:
16:62:59:69:62:87:b2:7b:da:3e:41:d8:79:db:98:fd:c9:39:
e6:cd:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:43 2025 by rpki-client