Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
File: F585B320A4ED11EFBA65C13CC4F9AE02.roa (raw, json)
Hash identifier: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=
Subject key identifier: 11:DE:88:5D:74:DC:A1:88:D2:11:51:3D:DC:C2:5D:58:4F:2B:C2:C6
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 089E
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
Signing time: Sun 17 Nov 2024 14:12:21 +0000
ROA not before: Sun 17 Nov 2024 14:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131464
IP address blocks: 114.129.13.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE
Validity
Not Before: Nov 17 14:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6739f9c4-4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:1b:8a:b0:2c:ba:98:b5:27:e9:a0:c9:e9:
1c:27:f8:5d:4c:e0:18:4d:e4:5e:07:77:64:51:50:
69:aa:48:b3:9d:27:55:ae:99:86:cb:e1:85:cc:56:
ec:c0:88:5d:aa:e0:14:85:cc:5a:1a:b2:20:48:96:
30:57:96:37:bc:fc:3f:d1:cd:36:4a:3d:38:57:b4:
67:7c:75:fd:f6:5e:d7:01:50:05:a2:de:64:f7:b3:
35:37:cd:79:1b:fe:08:f4:18:84:73:ad:ad:02:79:
d3:c1:6e:98:04:62:9b:6d:87:7c:e4:a0:d8:60:49:
f8:d1:31:b1:93:35:62:e4:13:0d:ec:1d:8a:65:fd:
26:d5:54:5a:d9:cc:92:32:0a:6b:c0:83:26:7f:1a:
c0:bc:57:b9:e0:b9:5b:7e:fa:e2:fc:59:c7:ef:ea:
b9:c6:5a:72:6f:9c:5e:c7:df:50:23:66:73:3e:03:
44:3b:91:63:f5:fe:9b:7f:97:5d:f1:99:11:ee:16:
e8:95:62:a0:63:6e:a4:b2:3d:ca:71:43:7d:fd:a2:
76:71:16:56:56:d1:e9:e5:fe:39:a9:7c:2d:8e:1d:
b3:64:34:3f:73:7f:72:bd:b5:51:8a:4f:12:d8:82:
ae:b2:c5:50:e4:04:71:2c:49:9a:c8:bc:9a:b5:c5:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:88:5D:74:DC:A1:88:D2:11:51:3D:DC:C2:5D:58:4F:2B:C2:C6
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4a:1f:d2:d2:37:ae:24:c5:f5:b6:4d:91:e8:c3:52:5a:ce:
8d:59:27:4b:a3:09:bc:e1:6a:00:5f:e5:cc:89:0f:01:70:90:
52:64:0f:ba:8b:d3:c9:b6:0b:54:0e:30:2d:4a:66:c9:3a:79:
93:5e:7c:77:3c:8e:54:6f:de:6a:20:27:76:27:b9:0c:73:90:
95:d5:e2:ef:02:44:86:bf:c9:39:70:65:d7:95:70:1b:82:37:
78:f3:a6:01:78:b2:70:d9:eb:62:02:41:2c:05:5f:7f:9d:89:
95:1f:1c:6a:3f:9f:14:f3:ca:2e:cb:35:50:a9:4b:c1:92:c6:
76:b7:f7:11:c1:f8:49:fa:96:cf:f5:af:21:03:81:6c:09:0e:
47:e8:fc:6f:c8:1b:c4:ca:99:b9:c8:e5:68:2a:90:79:73:dc:
d0:40:0c:5d:9c:e0:ef:8e:5d:2f:03:93:37:72:7f:f7:c5:ec:
4f:c8:3d:b7:c9:76:6d:d0:dc:c7:75:7d:6a:ca:06:35:2e:8d:
8c:e4:97:18:12:27:b6:e8:27:61:bb:2b:09:d8:3d:a3:54:39:
db:16:45:5e:f3:7d:64:9c:a9:b1:dc:1a:59:74:75:1f:19:50:
d0:0b:58:f2:96:53:f2:6a:19:ba:70:73:e6:db:69:df:8f:88:
9e:3f:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:45 2025 by rpki-client