Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa
File: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (raw, json)
Hash identifier: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ=
Subject key identifier: C8:89:AB:CA:00:48:0B:7D:38:62:7B:5C:C3:38:68:17:67:9E:8F:BF
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1ABA
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa
Signing time: Mon 24 Mar 2025 14:50:39 +0000
ROA not before: Mon 24 Mar 2025 14:50:39 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 399734
IP address blocks: 116.51.29.128/26 maxlen: 26
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6842 (0x1aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D
Validity
Not Before: Mar 24 14:50:39 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e1713f-16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:22:2c:00:74:d3:69:83:13:0a:01:7f:fe:
1a:cc:7f:a4:fc:74:53:96:52:d0:ec:77:d2:fc:13:
5d:0c:37:92:a1:81:51:8d:ea:2a:43:84:67:53:e1:
89:fa:d6:2a:5c:4e:28:1f:44:e2:2f:8c:a1:2d:f0:
5b:a9:50:71:5c:84:f9:b3:3d:e2:0e:e1:ba:72:58:
d1:d0:f8:2b:38:7c:50:06:f7:9d:c5:ea:35:df:1b:
4b:0d:23:ad:3f:87:3c:39:5d:fb:de:78:03:7e:a4:
ef:1a:d3:99:3b:f0:16:cd:8c:0d:27:07:00:c2:07:
70:8f:87:98:28:b0:fb:00:5c:4a:3d:0c:c3:1e:1a:
d0:8e:15:df:f9:32:a1:ce:a0:70:ff:5a:fd:29:40:
25:e6:82:9e:25:b3:76:5f:33:9c:a3:f0:cc:2c:83:
b9:ba:07:a4:26:bb:ba:06:9a:be:95:1c:73:eb:06:
e6:fb:a1:10:04:7a:96:cb:61:fc:ed:2b:3e:48:e8:
7b:c7:fc:7c:fc:c6:2e:a7:a2:2f:c4:eb:f8:84:63:
ad:93:f9:2e:a7:c7:b1:5d:53:67:73:f2:ed:30:53:
97:6c:94:52:c4:c2:c5:81:f2:4e:c8:5d:bc:16:08:
3c:33:11:4e:df:ab:3b:1c:6f:d2:cf:f1:83:7d:93:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:AB:CA:00:48:0B:7D:38:62:7B:5C:C3:38:68:17:67:9E:8F:BF
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/FC6A19D892D511EC8FBFF32AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.51.29.128/26
Signature Algorithm: sha256WithRSAEncryption
93:6d:47:bb:fe:8a:21:d0:1f:c6:25:e2:d0:04:7c:85:f3:8f:
f0:c0:4d:9b:bf:c2:0d:6e:72:1e:6a:ef:1e:13:e6:83:34:a8:
eb:6b:6a:f7:ec:d2:a4:d1:89:54:c2:df:b5:f0:fe:77:14:ac:
9d:15:c7:9e:ea:11:4f:06:3f:6a:9f:e2:f9:cc:30:c8:fa:e9:
c6:71:dc:ae:9f:a6:7e:e4:21:c5:bb:f8:a7:2f:ed:f8:61:58:
73:06:97:aa:bf:ab:42:81:4d:9e:c8:ce:b5:68:a0:86:19:37:
62:ad:d9:ab:4b:60:9d:68:bb:86:a4:48:ca:25:f2:df:2b:93:
4a:68:69:f6:d5:46:e6:3c:24:e1:74:8d:5b:84:e0:4c:80:40:
7d:99:7e:9c:e0:73:e4:67:96:ed:e8:05:7b:a1:07:36:12:c9:
9b:91:7e:60:3c:7c:17:60:95:84:4d:57:0d:26:1a:91:f1:f0:
fd:d6:ae:52:5d:1d:0a:0b:da:4c:81:da:e6:f1:d8:b1:0c:d4:
86:7b:a5:0f:dd:57:3f:6e:af:6c:26:0a:92:a9:58:ae:9b:4b:
0f:51:49:2c:7e:b7:2d:3c:ba:ac:1b:f5:f1:88:81:72:ac:1d:
c6:96:55:08:54:13:e9:38:3f:dc:36:80:bf:1e:55:43:9b:1b:
0b:bd:a6:4c
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICGrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD
N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2UxNzEzZi0xNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGwiLAB002mDEwoBf/4azH+k/HRTllLQ7HfS/BNdDDeSoYFRjeoqQ4RnU+GJ
+tYqXE4oH0TiL4yhLfBbqVBxXIT5sz3iDuG6cljR0PgrOHxQBvedxeo13xtLDSOt
P4c8OV373ngDfqTvGtOZO/AWzYwNJwcAwgdwj4eYKLD7AFxKPQzDHhrQjhXf+TKh
zqBw/1r9KUAl5oKeJbN2XzOco/DMLIO5ugekJru6Bpq+lRxz6wbm+6EQBHqWy2H8
7Ss+SOh7x/x8/MYup6IvxOv4hGOtk/kup8exXVNnc/LtMFOXbJRSxMLFgfJOyF28
Fgg8MxFO36s7HG/Sz/GDfZOaxwIDAQABo4ICljCCApIwHQYDVR0OBBYEFMiJq8oA
SAt9OGJ7XMM4aBdnno+/MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE
ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvRkM2QTE5RDg5
MkQ1MTFFQzhGQkZGMzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgABMAcDBQZ0Mx2AMA0GCSqGSIb3DQEBCwUAA4IBAQCTbUe7/ooh0B/G
JeLQBHyF84/wwE2bv8INbnIeau8eE+aDNKjra2r37NKk0YlUwt+18P53FKydFcee
6hFPBj9qn+L5zDDI+unGcdyun6Z+5CHFu/inL+34YVhzBpeqv6tCgU2eyM61aKCG
GTdirdmrS2CdaLuGpEjKJfLfK5NKaGn21UbmPCThdI1bhOBMgEB9mX6c4HPkZ5bt
6AV7oQc2EsmbkX5gPHwXYJWETVcNJhqR8fD91q5SXR0KC9pMgdrm8dixDNSGe6UP
3Vc/bq9sJgqSqVium0sPUUksfrctPLqsG/XxiIFyrB3GllUIVBPpOD/cNoC/HlVD
mxsLvaZM
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:20 2025 by rpki-client