Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
File: 01D8B33660F611ED8F48E24AC4F9AE02.roa (raw, json)
Hash identifier: s7J5+lvtmU3oiLl3Bjaps3D8/P5aKpLBENvYkdKIiQY=
Subject key identifier: 1C:29:09:D6:7F:ED:5F:B3:9E:79:D0:33:E4:EF:2B:B1:43:35:C3:F6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09B8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
Signing time: Thu 10 Nov 2022 12:48:43 +0000
ROA not before: Thu 10 Nov 2022 12:48:43 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.8.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 10 12:48:43 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=636cf32b-abb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:a4:df:f0:25:49:b5:5c:8f:ad:1c:c6:04:
ed:c3:fb:13:25:67:a3:a0:a8:e5:f6:8a:6f:f2:a6:
ac:3d:6f:87:58:36:61:74:66:9f:df:c8:35:10:52:
38:10:35:4d:57:b9:06:64:3e:9e:10:5d:e8:20:c0:
cc:36:49:a2:82:3a:94:5e:08:35:a5:2e:42:e4:d1:
52:d6:dd:92:9b:09:59:59:43:38:c5:e8:da:b3:e9:
33:70:b6:5a:1a:10:a9:8e:48:1b:b9:90:c8:e2:06:
97:f0:5f:25:1d:4c:62:d4:70:f2:f6:cd:10:69:23:
23:35:80:1c:0a:f6:62:6d:ad:8d:1e:dd:e5:0e:7f:
06:a0:88:ed:29:55:06:90:39:ab:8a:65:9f:db:12:
6c:98:2d:c7:b8:09:0b:20:df:c1:ef:45:5a:6e:f4:
30:bf:d4:c2:70:05:e9:22:a6:06:12:f9:d6:9d:07:
2c:14:04:5c:06:b2:ce:f4:bb:1d:60:a7:50:72:6a:
e3:8c:35:80:dd:44:1b:d2:32:ed:0c:c2:0b:4c:55:
8c:d4:53:7e:a4:33:08:5a:0b:9c:fe:02:3e:3b:fc:
40:0a:17:e3:98:6a:41:e2:fb:3c:0d:bc:4a:26:cf:
da:84:c7:46:46:f3:d7:cb:d9:c0:6f:f4:70:9c:11:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:09:D6:7F:ED:5F:B3:9E:79:D0:33:E4:EF:2B:B1:43:35:C3:F6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/22
115.167.100.0/22
175.110.64.0/22
175.110.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:37:1f:8e:1b:2b:73:da:b4:18:34:16:96:20:2c:b2:4d:ef:
ed:66:68:14:32:4b:77:57:7e:df:5d:b9:f9:3b:38:e1:26:33:
7a:9a:03:18:15:f1:79:7a:19:48:a6:83:80:34:5d:bc:ce:e9:
d6:13:62:37:d3:b2:3e:f7:53:0e:20:94:be:9a:df:58:1d:02:
7c:b7:18:93:eb:36:81:8b:95:24:f3:73:97:97:29:a0:a7:a2:
db:92:eb:05:49:81:69:4e:e9:66:93:3c:01:9a:fc:73:dd:53:
27:c3:ca:60:56:93:1c:a7:27:0f:c4:8e:e2:7f:b8:67:9b:94:
57:a3:69:c1:ab:a5:05:d8:05:f8:b4:88:1a:88:f0:6a:74:6a:
30:77:5d:9a:45:64:8e:be:fc:4c:8e:96:66:37:1d:8f:e2:46:
a4:2c:15:fe:74:cf:b9:27:e3:a6:a1:fa:5d:ad:85:c6:55:94:
ef:a9:c7:21:72:d6:43:27:51:d8:9c:38:4a:52:30:0b:00:72:
41:fc:eb:72:de:b8:b0:d9:8f:d6:f1:bd:7f:54:c5:52:22:ff:
93:cb:7d:a1:27:5b:07:98:89:47:4d:f3:83:a5:a6:ca:63:47:
8f:34:29:f8:1a:83:ee:a6:63:ad:3e:1b:6e:9d:21:04:0c:76:
fb:a6:82:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTEwMTI0ODQzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZjZjMyYi1hYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8Ck3/AlSbVcj60cxgTtw/sTJWejoKjl9opv8qasPW+HWDZhdGaf38g1EFI4
EDVNV7kGZD6eEF3oIMDMNkmigjqUXgg1pS5C5NFS1t2SmwlZWUM4xejas+kzcLZa
GhCpjkgbuZDI4gaX8F8lHUxi1HDy9s0QaSMjNYAcCvZiba2NHt3lDn8GoIjtKVUG
kDmrimWf2xJsmC3HuAkLIN/B70VabvQwv9TCcAXpIqYGEvnWnQcsFARcBrLO9Lsd
YKdQcmrjjDWA3UQb0jLtDMILTFWM1FN+pDMIWguc/gI+O/xAChfjmGpB4vs8DbxK
Js/ahMdGRvPXy9nAb/RwnBEbawIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBwpCdZ/
7V+znnnQM+TvK7FDNcP2MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMDFEOEIzMzY2
MEY2MTFFRDhGNDhFMjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAJzpwgDBAJzp2QDBAKvbkADBAKvblgwDQYJKoZIhvcNAQEL
BQADggEBAEo3H44bK3PatBg0FpYgLLJN7+1maBQyS3dXft9dufk7OOEmM3qaAxgV
8Xl6GUimg4A0XbzO6dYTYjfTsj73Uw4glL6a31gdAny3GJPrNoGLlSTzc5eXKaCn
otuS6wVJgWlO6WaTPAGa/HPdUyfDymBWkxynJw/EjuJ/uGeblFejacGrpQXYBfi0
iBqI8Gp0ajB3XZpFZI6+/EyOlmY3HY/iRqQsFf50z7kn46ah+l2thcZVlO+pxyFy
1kMnUdicOEpSMAsAckH863LeuLDZj9bxvX9UxVIi/5PLfaEnWweYiUdN84Olpspj
R480Kfgag+6mY60+G26dIQQMdvumgmE=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:21 2025 by rpki-client