Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/95DC9990D0A211EE9C97373FC4F9AE02.roa
File: 95DC9990D0A211EE9C97373FC4F9AE02.roa (raw, json)
Hash identifier: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=
Subject key identifier: 76:93:35:4C:87:38:CE:15:6B:7A:B8:F8:2C:23:88:54:4D:12:94:38
Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial: 08DD
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/95DC9990D0A211EE9C97373FC4F9AE02.roa
Signing time: Thu 16 Jan 2025 20:19:34 +0000
ROA not before: Thu 16 Jan 2025 20:19:34 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 131164
IP address blocks: 113.212.176.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D120D
Validity
Not Before: Jan 16 20:19:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678969d6-5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:8b:6f:d6:66:6e:8a:21:4e:4a:e3:0b:6f:
84:0d:4d:61:e8:a7:b3:2f:0a:aa:6f:5a:df:c7:18:
c6:7b:b0:4c:d9:29:6d:e4:f5:ce:b7:a5:eb:88:b0:
b6:30:fe:ea:cf:f6:22:fd:ae:24:8c:b9:f4:e0:09:
63:ba:23:5c:f3:64:3f:81:8b:c7:d0:3f:66:f0:7f:
9a:60:2a:6e:62:42:c4:ca:82:60:78:92:ab:fd:2a:
8a:e2:d5:59:91:ea:48:85:e9:6d:a3:dc:89:b3:b2:
2f:08:5c:fd:eb:82:6c:6c:31:a4:57:4d:b4:c8:8e:
ab:a1:33:e9:7f:28:7c:88:12:68:cb:96:d5:19:4f:
27:99:eb:1b:c2:8a:c2:1b:2a:9f:f9:75:fa:ef:de:
db:59:72:f7:6d:5f:32:e7:04:8e:64:5e:5f:4e:4f:
c4:38:40:34:c4:f5:37:01:ca:9a:c1:4e:1e:2f:cc:
6d:bd:b6:f0:ed:7b:86:af:fd:57:8b:e4:d2:b4:c2:
11:97:c9:3d:39:2b:ec:87:c9:dd:a4:c8:53:b4:77:
b2:02:cd:da:31:a4:6f:d9:d6:53:b0:ef:ae:b8:a5:
1b:1d:ce:b5:6f:07:82:23:99:87:6b:72:5e:58:39:
b1:90:4b:2a:93:d3:ae:be:e3:8e:0d:50:87:14:ce:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:35:4C:87:38:CE:15:6B:7A:B8:F8:2C:23:88:54:4D:12:94:38
X509v3 Authority Key Identifier:
keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/95DC9990D0A211EE9C97373FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.212.176.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:fe:50:b0:65:03:6d:d2:c4:e8:ef:9b:a2:64:91:98:4b:46:
b2:83:3f:67:b0:82:98:87:b0:0c:c8:76:e5:26:1b:dd:79:1b:
44:c1:31:da:b7:a3:29:1f:32:5e:7f:19:ca:af:54:1e:3c:d3:
03:17:f1:c2:07:f9:d1:eb:25:e8:af:fa:69:f7:72:9f:2e:fb:
62:07:70:a4:46:63:34:c3:34:b6:cc:16:e2:7b:e3:4e:b6:0e:
e0:29:13:73:47:8c:b4:0c:c8:ee:af:ec:2f:dc:38:9b:53:63:
76:a4:29:24:70:d1:f0:5d:7f:d9:66:c3:e4:fb:16:e8:60:b4:
8e:42:c3:cc:ba:e4:4c:29:03:a4:6b:09:98:ad:30:aa:fe:00:
f9:fb:0b:4f:de:e9:43:43:52:bd:8b:2f:7f:41:46:71:55:ea:
3f:70:cc:73:ed:46:13:60:ef:80:03:23:95:1a:5d:9c:02:d2:
d4:6d:7e:56:a0:f1:fb:fd:8e:cb:93:cc:61:8b:3f:51:6b:de:
13:66:55:03:24:5c:82:da:46:f8:9f:ce:7c:c0:67:85:53:5b:
a2:aa:d6:92:a3:8c:0a:8c:0a:19:52:35:59:03:e6:08:d3:db:
3f:39:d7:88:c3:02:26:9d:c7:99:a8:63:f4:c4:2b:76:cc:f1:
18:c6:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:24:54 2025 by rpki-client