Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
File: DB120D6EC34A11EB9559E184C4F9AE02.roa (raw, json)
Hash identifier: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=
Subject key identifier: 5F:AF:6F:3A:4D:5D:BC:1B:2E:1D:02:B4:AA:31:F1:EE:FB:4E:4E:87
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 0790
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
Signing time: Tue 10 Dec 2024 22:51:38 +0000
ROA not before: Tue 10 Dec 2024 22:51:38 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 142143
IP address blocks: 202.83.77.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE
Validity
Not Before: Dec 10 22:51:38 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758c5f9-7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:6f:f2:f2:2d:d2:a9:c1:70:8f:2a:a7:98:
e2:0c:68:97:43:48:ef:bd:05:ef:20:2a:8f:d7:f8:
95:45:b4:df:91:46:d0:4e:dc:0d:d9:27:a5:e6:1d:
93:a2:e2:37:e5:2a:b8:88:07:ca:8d:c5:66:a2:ef:
1f:b1:ad:0a:0b:b4:bf:19:b1:d1:67:84:25:90:10:
3a:aa:dd:df:9a:d7:ed:52:48:8c:fa:b4:ad:50:96:
be:ec:c2:8c:70:12:bb:84:d3:7d:ae:ff:dd:13:89:
0a:d9:e3:e0:ad:3d:29:31:2c:83:36:e4:ca:ef:b5:
70:1f:65:8b:93:a0:ba:c7:d4:a4:44:31:75:3b:94:
17:f6:0c:cf:03:5d:02:e6:68:86:c5:80:f6:f4:bd:
99:37:e2:23:dd:6b:2d:af:65:aa:72:9c:2f:d6:fb:
96:0a:64:58:e1:17:92:6f:57:c1:3d:07:9e:3c:7d:
5a:a3:74:59:40:61:f7:43:52:24:28:e3:3a:6b:7a:
80:b3:93:ed:ea:ee:a6:d9:8a:28:f4:8b:ab:f2:ed:
04:c9:38:5a:10:4f:0b:4f:16:3f:58:25:29:cd:e1:
08:46:76:c9:09:c2:40:3f:18:2a:c8:fd:04:0d:08:
4f:bc:a6:34:e4:25:a2:aa:a8:e9:7c:0c:88:5e:be:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:6F:3A:4D:5D:BC:1B:2E:1D:02:B4:AA:31:F1:EE:FB:4E:4E:87
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.83.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:aa:a2:14:32:53:c2:02:9c:4c:28:53:32:c3:9a:9e:c2:a8:
1e:0b:da:73:08:83:b9:3f:1a:6b:3b:36:e6:90:7a:c3:5f:aa:
fc:66:53:12:46:cd:55:4e:11:f0:d6:28:51:f7:a2:1d:b6:50:
76:10:b5:c3:f7:f2:a1:81:cc:6d:fe:96:c0:61:92:f2:40:c3:
96:46:4d:5d:07:bf:c2:35:42:12:41:9e:95:84:11:00:e5:98:
3b:f3:24:3e:25:62:70:9e:b7:d6:52:d7:e1:a5:14:34:f0:e9:
8e:ee:1a:33:7d:c1:12:a1:d4:c4:56:27:c1:87:45:f8:39:d3:
f5:4e:0d:0e:3b:21:b5:e5:26:b0:84:a3:2c:c5:31:68:82:95:
e5:5c:e8:ee:bf:d1:ed:f6:eb:8d:a6:cd:6a:78:54:9e:06:8c:
5a:f6:ff:ff:68:f7:4b:ed:e3:6c:0f:fd:ce:28:38:b5:dd:30:
23:40:49:76:ba:02:3e:ca:0c:c9:ca:21:f2:68:b2:da:7c:fd:
59:20:97:db:68:18:58:40:80:d0:d6:76:b1:37:1c:eb:22:8e:
a2:ea:0c:b3:ef:78:da:eb:76:e7:fe:89:4d:c4:6a:4c:89:07:
1a:bb:4d:9c:e4:60:94:34:2d:4a:f5:c2:e9:23:24:6e:f0:96:
18:78:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:06 2025 by rpki-client