Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
File: 0D2D85BEA44E11EC8C8DF840C4F9AE02.roa (raw, json)
Hash identifier: 4BdVp2U6v9vDuvjwYYR+/Jh43+YdHj48skNugFb487k=
Subject key identifier: A0:B9:F0:4C:1C:C3:06:47:BF:F4:BC:C1:99:B1:E5:A0:C4:BF:55:AC
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0209
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
Signing time: Mon 26 Sep 2022 03:23:45 +0000
ROA not before: Mon 26 Sep 2022 03:23:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134134
IP address blocks: 116.204.242.0/24 maxlen: 24
116.204.243.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E
Validity
Not Before: Sep 26 03:23:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63311b41-dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:b3:3f:c0:2e:9e:b9:28:2c:f0:f4:05:1a:
b3:d5:27:ff:27:c4:ca:a5:cf:66:bb:7f:2c:9f:cf:
05:4e:58:49:dd:a8:25:d1:bb:65:70:b0:c9:ab:42:
99:94:85:ef:69:0c:b1:50:a8:f3:e9:31:47:c8:1f:
fe:5d:d6:f6:ef:79:cd:67:4f:6e:89:22:9a:01:0c:
ce:3b:ca:0e:f4:c5:61:62:58:b4:54:7f:d9:09:48:
02:6f:6a:0e:29:12:20:46:a5:ca:c5:98:3a:d8:81:
76:7a:14:53:24:fd:88:80:a3:04:f3:bc:c0:55:3e:
74:1d:d4:f6:3e:ae:6f:9d:2d:32:1f:4e:48:c2:47:
69:ac:f6:67:c4:7a:c7:0f:62:d9:17:86:02:d9:97:
5c:cd:78:b1:00:6e:8e:d7:0f:46:f8:57:36:75:55:
9a:10:55:81:95:3a:d3:be:0f:52:6a:06:b5:f3:94:
8c:c9:ca:01:2f:0a:35:99:3a:94:4e:3c:8c:43:cb:
88:31:1c:1e:3a:97:94:ef:ca:2b:08:ee:87:62:aa:
b1:f1:07:b5:15:af:eb:77:e4:92:cb:29:36:7e:08:
6e:5e:62:b9:5a:ce:b5:fa:e6:97:73:84:e6:40:2d:
37:b3:dc:0b:64:88:1b:9d:e2:3b:be:7d:ca:85:7c:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:F0:4C:1C:C3:06:47:BF:F4:BC:C1:99:B1:E5:A0:C4:BF:55:AC
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.242.0/23
Signature Algorithm: sha256WithRSAEncryption
21:f0:89:f8:77:79:13:ce:8f:31:76:05:6a:e0:93:a4:f7:a8:
3a:7b:ae:f5:0d:87:f1:0a:b7:b3:c4:ea:d7:a9:dc:19:46:91:
de:b6:e9:5a:55:2c:ae:b7:38:ba:58:54:92:6f:af:c6:aa:7a:
dd:86:fa:71:cf:98:a4:33:0e:cd:a4:a1:35:93:8c:2e:32:10:
a9:93:26:ff:9f:31:50:c9:7b:4d:5e:28:95:3b:14:d2:74:5e:
19:00:31:99:1e:48:71:3c:c5:9e:97:59:a3:d0:b4:3a:8e:b8:
5a:2b:4a:db:72:ef:5a:a1:f1:ff:0f:3b:ac:18:6a:54:e9:8d:
a6:29:d0:6e:4f:8a:26:d8:1e:30:60:2c:bb:c7:a6:2a:1a:b3:
bf:50:b0:e2:8a:c0:df:16:2b:3d:2c:29:c0:17:f4:39:02:f6:
2b:d4:48:6d:27:a3:a6:84:45:21:00:a6:f9:fd:ff:c2:d3:84:
d4:1c:e1:d9:b8:5e:aa:9a:fe:69:f8:2e:20:34:d5:da:19:42:
45:a1:a1:34:f9:b2:bf:a0:1f:f2:f4:9d:1a:81:aa:f2:5d:f2:
6c:7c:69:0a:dc:68:7b:35:96:59:a3:84:4b:4b:47:52:0a:d4:
89:2a:8b:44:43:32:10:e5:49:21:4b:c5:94:8d:08:71:9a:d9:
6e:e2:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:00 2025 by rpki-client