Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
File: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (raw, json)
Hash identifier: JxcjLdYbfNpLt4XJbaeEwHRAAk7SbV4Cw+ExyqNKBV4=
Subject key identifier: 88:75:CD:E0:0F:80:AD:7A:30:54:0E:E6:EC:2E:0A:6B:E3:58:F9:8C
Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228
Certificate serial: 09D4
Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
Signing time: Wed 12 Feb 2025 20:58:15 +0000
ROA not before: Wed 12 Feb 2025 20:58:15 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 59341
IP address blocks: 123.0.30.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF0EC
Validity
Not Before: Feb 12 20:58:15 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ad0b67-a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:ee:c5:8b:2a:93:a1:a7:53:cb:70:10:46:
aa:cd:45:94:ae:6d:a9:bb:cf:98:9d:b9:1f:ab:fe:
be:ed:96:0e:97:50:b9:03:e3:93:c6:fc:1e:98:83:
2b:62:3a:ea:84:9c:c8:20:7e:07:1c:8e:fc:f1:44:
f3:67:b0:92:9a:73:59:1d:1d:fc:53:36:cf:36:1a:
1f:b9:0f:e2:16:73:df:7c:62:dd:cb:61:fb:96:4c:
fe:94:cc:85:93:29:c0:e3:44:e5:7a:c2:5a:5c:f0:
6e:e2:7d:29:0c:8b:55:f2:48:8c:38:f1:2d:35:6f:
d7:a5:6e:81:5a:52:9c:e9:aa:68:db:8e:28:22:e7:
89:9b:5c:b6:48:f2:ad:e5:e2:8d:5d:83:31:40:d6:
56:8f:d6:0f:bb:8e:a8:b1:3f:5a:e1:1c:f0:cf:e5:
a9:6e:9a:f2:15:d7:31:01:c1:fb:0b:e5:0a:cd:79:
1b:6e:06:86:33:26:47:3d:f7:e9:56:04:d2:1a:46:
dd:ee:20:35:d9:56:1f:f1:14:8b:35:69:8b:9a:77:
66:3e:21:91:6a:e2:43:99:e6:71:bf:30:9f:f2:6a:
e5:bc:b1:90:87:ae:3c:5e:e9:2d:3f:60:7f:09:b4:
c8:af:12:fb:5b:f8:2b:fa:cb:5e:52:a8:a2:a9:f2:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:CD:E0:0F:80:AD:7A:30:54:0E:E6:EC:2E:0A:6B:E3:58:F9:8C
X509v3 Authority Key Identifier:
keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:40:42:b6:a5:7f:0f:1b:e4:26:92:40:60:f7:f6:65:b1:08:
ad:d9:58:85:4d:34:1b:a1:18:b9:03:22:42:90:58:85:ec:ce:
c8:ad:f1:39:8b:48:c1:4d:e9:ba:98:c0:13:47:83:69:71:fc:
66:cb:0c:a3:32:c9:3f:59:77:45:13:18:0d:03:22:2b:65:c7:
58:b7:58:5f:04:a3:3c:ca:9f:73:b0:b0:b2:2f:70:6f:c7:ab:
07:3a:ab:dc:dd:f2:c6:fb:b9:eb:ed:7a:d3:c7:e6:1a:c0:77:
36:6c:e7:04:b2:4e:d9:71:de:f3:62:fc:eb:dd:19:52:00:9b:
27:6f:55:b8:c3:dc:90:e0:61:c5:c7:5f:c0:f0:be:11:5b:42:
f2:27:80:5a:de:18:b6:88:6c:6f:6e:9a:fe:66:17:bc:d9:bf:
1a:d2:20:b4:d7:fb:5f:f9:32:c4:8e:ef:00:d2:76:10:57:15:
73:77:b0:33:f8:1e:2f:c0:46:7a:b6:b4:b4:b0:ad:a5:ec:83:
4a:a6:b1:de:08:49:fd:20:25:e6:48:5c:aa:39:74:31:75:77:
7f:03:58:b5:2a:7b:59:d8:36:4f:0d:34:13:96:6b:62:ef:d7:
9d:2b:a3:47:69:ba:f9:f4:1d:bf:ea:61:61:47:b6:20:a5:f6:
12:33:fa:fd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz
MDZGODYyMjgwHhcNMjUwMjEyMjA1ODE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FkMGI2Ny1hODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDTuxYsqk6GnU8twEEaqzUWUrm2pu8+Ynbkfq/6+7ZYOl1C5A+OTxvwemIMr
YjrqhJzIIH4HHI788UTzZ7CSmnNZHR38UzbPNhofuQ/iFnPffGLdy2H7lkz+lMyF
kynA40TlesJaXPBu4n0pDItV8kiMOPEtNW/XpW6BWlKc6apo244oIueJm1y2SPKt
5eKNXYMxQNZWj9YPu46osT9a4Rzwz+WpbpryFdcxAcH7C+UKzXkbbgaGMyZHPffp
VgTSGkbd7iA12VYf8RSLNWmLmndmPiGRauJDmeZxvzCf8mrlvLGQh648XuktP2B/
CbTIrxL7W/gr+steUqiiqfICeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIh1zeAP
gK16MFQO5uwuCmvjWPmMMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5
NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REYwRUMvOTkxQ0VGN0U3OTU4MTFFQTkzQUU5NjQ2QzRGOUFFMDIvMEQ2RkZFNTZC
QTM1MTFFQ0EyMEEzODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB7AB4wDQYJKoZIhvcNAQELBQADggEBAD5AQralfw8b5CaS
QGD39mWxCK3ZWIVNNBuhGLkDIkKQWIXszsit8TmLSMFN6bqYwBNHg2lx/GbLDKMy
yT9Zd0UTGA0DIitlx1i3WF8EozzKn3OwsLIvcG/Hqwc6q9zd8sb7uevtetPH5hrA
dzZs5wSyTtlx3vNi/OvdGVIAmydvVbjD3JDgYcXHX8DwvhFbQvIngFreGLaIbG9u
mv5mF7zZvxrSILTX+1/5MsSO7wDSdhBXFXN3sDP4Hi/ARnq2tLSwraXsg0qmsd4I
Sf0gJeZIXKo5dDF1d38DWLUqe1nYNk8NNBOWa2Lv150ro0dpuvn0Hb/qYWFHtiCl
9hIz+v0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:07 2025 by rpki-client