Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa
File: 2086256888B911ECAC54E716C4F9AE02.roa (raw, json)
Hash identifier: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=
Subject key identifier: FC:77:63:FD:CC:51:45:0A:C2:7C:20:DC:2C:8C:1D:CD:49:AC:2F:1C
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 0808
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa
Signing time: Tue 08 Oct 2024 20:59:51 +0000
ROA not before: Tue 08 Oct 2024 20:59:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 17439
IP address blocks: 43.252.88.0/22 maxlen: 24
101.53.128.0/19 maxlen: 24
103.20.212.0/22 maxlen: 24
2001:df0:411::/48 maxlen: 48
2001:df4:3500::/48 maxlen: 48
2406:69c0::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6
Validity
Not Before: Oct 8 20:59:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67059d47-273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:99:7f:b5:8d:72:d2:fc:1a:78:88:83:8a:
2f:85:e8:24:32:45:04:5a:ab:be:44:5f:26:2c:63:
3b:56:5b:ef:3a:ed:ee:58:65:d7:6d:64:69:83:2d:
09:1d:0c:f4:98:a7:45:f8:2c:7e:12:79:92:e2:da:
f5:7f:1a:2a:21:57:49:4d:7e:ad:b0:6a:a9:14:f6:
ba:c0:8d:ea:d7:80:a5:e2:81:eb:04:c3:aa:ab:ff:
23:b6:06:0f:9c:6b:66:1b:53:19:d1:88:dd:55:f5:
05:64:89:d8:69:43:7b:c7:c2:cf:ee:9f:48:40:8e:
45:b6:9f:2e:ea:2c:54:86:a6:8d:b0:00:c9:1c:32:
e6:d5:1e:df:2f:9c:8c:87:c2:ad:61:8f:80:5a:76:
f8:15:ce:55:67:6b:57:6d:b6:6f:ff:47:1d:1a:f5:
3a:9b:0e:11:87:fc:c2:2d:d4:63:fd:f2:e1:d5:16:
3e:ed:8b:88:d8:9e:fc:fc:0a:ba:fc:5d:7e:81:98:
a2:8a:c1:63:2b:e4:d0:17:44:68:d4:d3:40:72:91:
d4:f6:51:76:e5:2e:90:36:91:79:23:94:8f:da:87:
05:9e:9d:a8:32:56:62:84:42:2f:46:82:ff:00:d9:
7f:a8:ca:cd:c2:63:7c:38:88:ec:15:9d:63:e2:e4:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:63:FD:CC:51:45:0A:C2:7C:20:DC:2C:8C:1D:CD:49:AC:2F:1C
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.88.0/22
101.53.128.0/19
103.20.212.0/22
IPv6:
2001:df0:411::/48
2001:df4:3500::/48
2406:69c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:dd:51:a8:6f:88:3f:bf:43:bc:07:83:01:d1:c0:36:4a:a5:
ae:e1:42:bc:04:b5:eb:79:72:7e:f0:a5:1d:90:f1:3e:dd:e7:
88:c6:fb:8d:7a:ac:dd:f4:6a:8b:0f:1c:1b:a3:18:84:50:52:
89:39:c5:d1:96:98:04:26:6d:fb:e8:99:75:50:57:12:74:aa:
61:65:57:37:3e:9e:8e:7c:cf:3d:c9:94:28:45:e2:40:2d:c6:
e6:5d:fe:e2:05:4a:04:e4:c4:0e:5c:84:03:f9:3b:2b:ef:bd:
10:36:ca:b9:f5:04:a6:89:57:c6:df:e7:2c:ef:fc:4d:2e:3f:
c9:5c:1c:84:40:d7:72:1d:19:c2:ee:2d:74:40:56:a0:a3:b0:
78:29:cb:98:00:01:2d:34:8c:70:75:c1:3e:05:d2:47:e6:09:
41:aa:5a:8d:c4:ff:f0:a1:cd:5c:2e:65:b4:2c:ad:37:17:a6:
15:ca:15:6d:35:42:07:96:48:a7:af:97:74:6b:64:70:94:6a:
0e:34:4f:f3:e5:66:d3:6a:2c:c0:a3:2a:31:4c:67:ff:bd:c3:
40:df:d1:b7:8a:4c:6e:12:ff:a6:25:cb:de:94:ff:46:a9:88:
b8:0e:e2:ef:a6:fe:34:5c:df:b0:ee:a4:65:6d:c8:de:42:fd:
2e:7a:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:14 2025 by rpki-client