Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa
File: 84365644062E11EDA95B3143C4F9AE02.roa (raw, json)
Hash identifier: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=
Subject key identifier: A0:C9:7C:98:8A:99:4A:FB:62:74:6D:B0:90:ED:81:83:C2:9A:9D:F9
Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial: 024A
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa
Signing time: Wed 15 Jan 2025 01:34:14 +0000
ROA not before: Wed 15 Jan 2025 01:34:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56132
IP address blocks: 203.0.141.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65FA
Validity
Not Before: Jan 15 01:34:14 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67871096-248f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:54:f0:bf:fe:40:f1:19:90:af:bd:5b:b9:
82:f4:ba:ff:1c:4d:29:f7:3c:cf:91:20:74:5c:9c:
a4:7f:ec:fd:19:98:a9:13:32:84:d8:0c:3e:e7:16:
c4:6b:1e:aa:5d:8e:59:b5:ea:37:a4:56:d2:8a:c0:
f2:2d:d8:ca:70:c3:58:58:5f:5a:d7:c9:6a:c8:0d:
23:b2:74:91:f7:0d:99:55:b5:9f:76:36:20:dc:71:
a2:e1:25:65:cc:92:0e:55:96:43:86:7c:f1:85:86:
e0:fb:d6:f4:39:59:ba:35:13:ca:91:22:14:57:55:
2c:e1:96:dc:0f:70:07:41:b4:bb:21:67:3c:8a:68:
ba:d7:fb:90:7d:d0:70:3a:1d:47:ad:23:d6:5d:7a:
05:96:e8:d5:7c:8d:98:3d:ba:c6:1a:36:ab:6e:17:
83:b6:ec:5e:1f:95:c7:d0:a1:d5:11:59:01:e8:71:
61:fd:4c:ff:05:93:ce:04:a5:e8:a5:cb:30:83:7c:
96:be:72:89:65:e6:eb:d5:82:28:ee:5f:ff:6a:e3:
1f:15:1d:6c:98:25:fb:78:9f:80:1c:53:fc:a3:80:
0d:51:7f:b5:dd:09:ec:91:62:b3:a8:85:7f:24:b9:
b2:eb:e8:cb:1b:2a:22:a6:7f:47:70:56:0e:8f:35:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:7C:98:8A:99:4A:FB:62:74:6D:B0:90:ED:81:83:C2:9A:9D:F9
X509v3 Authority Key Identifier:
keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.0.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:22:eb:bf:f7:6d:4a:5a:ae:89:1f:c4:91:64:ae:52:b6:51:
55:61:e3:1b:a2:ed:1d:38:2d:1a:c3:a4:19:f6:fe:9e:36:06:
5f:9c:89:1d:9b:d7:de:45:f5:46:26:f4:6c:4c:da:ad:a2:4a:
ce:53:0a:9e:f6:35:ef:45:ef:8e:eb:d5:06:58:1d:6a:ff:cd:
d3:5c:65:ff:83:7e:98:d9:88:31:f7:cc:ab:8d:86:72:c2:fc:
99:ad:18:18:47:3c:35:52:63:fd:db:6b:c8:ef:41:76:2c:ee:
8d:04:01:2c:47:bc:9d:3b:4c:eb:1b:79:eb:35:37:cd:88:8f:
3d:6a:c8:7d:c0:58:0a:34:75:51:3f:65:3e:6f:a8:47:57:13:
2c:68:55:8b:1d:3a:2f:aa:8c:18:f9:29:05:53:6e:4d:d6:65:
7f:1b:8b:45:9c:55:34:44:99:01:20:84:94:cb:c6:38:f7:79:
9b:de:9b:26:60:80:11:8d:9a:d9:0a:ad:b6:09:f6:da:9a:e9:
b7:93:d6:54:ad:78:0d:4d:8c:59:d7:f5:32:66:0b:d7:6a:3a:
5b:25:4f:54:06:1a:a2:41:2e:5c:d2:16:a6:19:63:6e:5c:f0:
57:f7:9e:dd:87:77:68:74:0c:da:9c:54:25:14:ee:e8:21:79:
c9:ac:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:44 2025 by rpki-client