Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa
File: 88978730772311EBB972032EC4F9AE02.roa (raw, json)
Hash identifier: nz3/6k7N3mPNzs0DFxh1VvDXVpDIjk6/7OQf5UZ/EgA=
Subject key identifier: 4A:50:C0:77:92:EC:29:E8:A8:20:1D:7A:39:D1:20:46:72:3C:F4:4D
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 3441
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa
Signing time: Fri 21 Apr 2023 12:50:14 +0000
ROA not before: Fri 21 Apr 2023 12:50:14 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135539
IP address blocks: 61.45.254.0/24 maxlen: 24
2401:4601:254::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13377 (0x3441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B
Validity
Not Before: Apr 21 12:50:14 2023 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=64428686-ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:9f:7d:be:d2:80:8d:7f:6b:c2:5c:26:b8:
1b:eb:61:6f:e4:f4:2c:dd:da:c1:d0:37:e3:cd:a6:
d6:ba:67:f6:28:98:79:53:bf:91:f0:8a:0e:64:ca:
d7:d1:89:d1:19:e6:02:b6:26:7a:c7:11:37:c7:69:
97:84:a7:1c:b0:bb:d1:90:08:e2:8e:07:d8:74:36:
6a:d0:90:1d:a9:22:bb:00:0a:2f:05:28:f2:4d:b0:
02:6c:a4:7b:fa:0b:2b:78:4c:8e:9d:41:73:ec:c4:
dd:4d:16:30:e4:b1:17:98:4d:4e:dc:9a:fc:2b:d5:
95:da:2f:ac:5f:01:a6:1b:b3:f3:e9:a8:4f:22:a6:
a3:e1:e2:b4:dd:d0:03:ce:9a:f6:4f:f7:83:1d:35:
7b:7e:0c:5e:be:46:ae:e6:41:6a:1a:be:cc:ea:57:
6e:a2:d1:8c:6c:6d:e9:32:c3:7c:3b:3c:44:d2:ef:
26:ce:a8:e0:e9:87:a8:7e:7f:dc:a4:e5:81:5f:0d:
d6:9e:85:1f:06:e9:29:84:41:8c:16:1b:b0:f3:a3:
61:0b:76:ad:f2:1a:97:7c:35:f2:10:c2:2f:a9:35:
21:0b:08:84:de:de:5a:36:b9:78:29:4c:18:53:a8:
e7:da:20:4c:49:f0:07:b9:a6:ba:ad:0e:1d:1b:1d:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:C0:77:92:EC:29:E8:A8:20:1D:7A:39:D1:20:46:72:3C:F4:4D
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.45.254.0/24
IPv6:
2401:4601:254::/48
Signature Algorithm: sha256WithRSAEncryption
10:16:12:c5:cc:1c:0c:2e:e1:d0:d1:ad:d1:b4:b1:89:3c:62:
77:21:81:b3:2b:c5:2d:d6:2c:47:26:f8:e1:a8:3f:36:f5:6b:
51:24:e6:60:3d:52:40:b2:43:40:f6:de:71:b9:d2:ed:fd:bf:
39:32:b8:6c:8f:2a:37:95:09:c3:69:a8:a4:73:53:29:70:3c:
de:d3:06:4e:e6:c5:97:52:5f:19:72:48:e6:72:eb:ec:89:60:
6e:12:a5:cd:0d:5d:d0:a1:d4:f6:df:2f:c9:3e:88:b2:48:bc:
69:76:7b:95:48:bd:8e:aa:f9:03:e6:85:95:90:21:f4:e6:9d:
1f:4b:48:11:46:40:ef:9b:4b:05:da:25:78:df:89:76:0c:21:
0b:e7:81:a1:36:4d:e5:1f:c7:0f:9b:89:12:04:26:ed:45:19:
96:79:97:96:99:b3:a1:e5:a3:e0:9d:45:9f:9d:9c:43:51:28:
0b:72:9a:89:68:41:60:75:b7:a2:0d:43:c5:c1:91:ab:80:1f:
e8:fa:91:17:4f:ce:f7:1c:14:86:fc:80:bc:d0:01:97:95:af:
e8:ec:3c:49:e1:3e:c3:c4:ac:3f:f4:87:77:a4:3b:dd:17:7e:
6c:f2:7c:a9:b5:ba:ed:d1:87:e0:d3:df:63:b8:fc:53:c1:e3:
de:81:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:42 2025 by rpki-client