Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
File: 69308C200A9611EABF034172C4F9AE02.roa (raw, json)
Hash identifier: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=
Subject key identifier: 73:64:0F:0B:66:5A:96:AB:D3:97:2B:4A:FD:A0:CC:79:7A:72:26:81
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0BFE
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
Signing time: Sun 02 Mar 2025 19:37:24 +0000
ROA not before: Sun 02 Mar 2025 19:37:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 132489
IP address blocks: 45.126.72.0/23 maxlen: 24
103.84.244.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1
Validity
Not Before: Mar 2 19:37:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c4b373-fed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:08:18:ff:8c:30:bd:f5:7f:53:28:f1:0d:b6:
68:92:9c:5a:8b:ba:45:ba:5b:bd:38:21:ba:c8:78:
25:22:c3:96:46:f0:f2:b2:d6:42:cb:fa:db:96:38:
45:72:fe:9a:9f:e8:77:68:9c:e1:33:63:09:5a:8f:
c8:63:8a:e1:3a:40:9b:94:bc:81:11:4b:e7:ec:57:
33:f6:77:a9:93:ca:05:08:27:72:9e:50:c6:3c:17:
56:a0:cc:b2:1e:cc:51:f2:15:7c:0a:04:85:62:f3:
5f:9d:7c:48:66:7f:d1:06:3e:8a:ce:42:bd:6a:05:
23:ec:75:b6:7f:a8:d5:37:64:46:45:aa:6e:87:90:
23:15:cb:4d:ed:30:83:ac:f1:c5:3a:fc:b3:5f:ce:
29:59:5e:71:71:59:99:63:d8:80:09:43:56:f5:37:
1c:97:66:32:cd:de:1c:0e:4f:0d:8f:30:67:71:20:
35:8c:95:18:bc:8f:8b:fb:5e:32:6c:51:5a:c4:0b:
e1:10:c2:a6:e7:52:a5:78:27:dc:d1:9f:a8:b1:77:
fb:eb:25:ac:e0:6c:08:b4:fb:54:0e:f5:50:bd:06:
26:00:6b:d6:96:b3:7f:bf:3e:d6:8e:60:01:66:83:
44:b7:7e:8e:dc:8d:38:68:5c:d6:e7:56:ca:76:a5:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:0F:0B:66:5A:96:AB:D3:97:2B:4A:FD:A0:CC:79:7A:72:26:81
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.72.0/23
103.84.244.0/22
Signature Algorithm: sha256WithRSAEncryption
89:47:c2:ad:54:81:0d:72:bc:10:9f:e7:a1:4e:5c:cd:ae:56:
f3:df:cb:75:55:48:9f:34:28:31:5d:4c:1f:7d:dd:b5:4f:46:
6b:af:c2:f2:57:20:96:dc:e2:29:cf:ce:54:39:3c:79:7d:32:
a2:9c:d3:5a:40:62:f4:1b:04:32:7f:96:4b:e3:b6:ad:3f:85:
18:c6:03:6a:44:39:dd:e9:5c:a5:42:7a:19:fe:34:16:e1:0b:
98:fd:b4:1e:ee:26:a6:84:8f:69:02:d8:39:2a:e2:bc:41:16:
5d:4d:73:b8:49:bc:d2:64:d4:7a:0a:00:19:10:56:76:67:59:
fb:04:96:a9:5a:a0:df:e4:e3:3f:57:24:1c:85:94:98:b7:70:
53:5b:a5:92:17:49:2d:c1:b0:60:e9:f4:92:75:b3:5d:03:d4:
f8:5d:4e:fe:9a:d4:4c:c0:12:a5:94:40:4d:eb:93:84:c0:04:
33:cd:e9:85:cd:c9:00:4e:18:4e:55:82:bb:ed:3f:00:99:60:
60:99:d8:e2:af:a9:bd:b1:f5:84:19:6a:c7:62:f3:3d:8b:e5:
b5:18:eb:0c:8a:ea:8b:ac:5d:50:75:e3:50:1c:26:2a:67:09:
1f:19:f8:a6:7a:c5:8b:30:ac:cf:c5:96:73:5b:cd:5b:eb:6c:
2a:b4:15:aa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5
MjFDNTkxM0IwHhcNMjUwMzAyMTkzNzI0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M0YjM3My1mZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9ggY/4wwvfV/UyjxDbZokpxai7pFulu9OCG6yHglIsOWRvDystZCy/rbljhF
cv6an+h3aJzhM2MJWo/IY4rhOkCblLyBEUvn7Fcz9nepk8oFCCdynlDGPBdWoMyy
HsxR8hV8CgSFYvNfnXxIZn/RBj6KzkK9agUj7HW2f6jVN2RGRapuh5AjFctN7TCD
rPHFOvyzX84pWV5xcVmZY9iACUNW9Tccl2Yyzd4cDk8NjzBncSA1jJUYvI+L+14y
bFFaxAvhEMKm51KleCfc0Z+osXf76yWs4GwItPtUDvVQvQYmAGvWlrN/vz7WjmAB
ZoNEt36O3I04aFzW51bKdqUqwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHNkDwtm
Wpar05crSv2gzHl6ciaBMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB
OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0M4QjEvQ0U4NTFBNTYwQTk1MTFFQTg1RkZBQTcxQzRGOUFFMDIvNjkzMDhDMjAw
QTk2MTFFQUJGMDM0MTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAEtfkgDBAJnVPQwDQYJKoZIhvcNAQELBQADggEBAIlHwq1U
gQ1yvBCf56FOXM2uVvPfy3VVSJ80KDFdTB993bVPRmuvwvJXIJbc4inPzlQ5PHl9
MqKc01pAYvQbBDJ/lkvjtq0/hRjGA2pEOd3pXKVCehn+NBbhC5j9tB7uJqaEj2kC
2Dkq4rxBFl1Nc7hJvNJk1HoKABkQVnZnWfsElqlaoN/k4z9XJByFlJi3cFNbpZIX
SS3BsGDp9JJ1s10D1PhdTv6a1EzAEqWUQE3rk4TABDPN6YXNyQBOGE5VgrvtPwCZ
YGCZ2OKvqb2x9YQZasdi8z2L5bUY6wyK6ousXVB141AcJipnCR8Z+KZ6xYswrM/F
lnNbzVvrbCq0Fao=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:25 2025 by rpki-client