Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
File: 10A6CAA2F01411EEBFCE5E13C4F9AE02.roa (raw, json)
Hash identifier: 7jqy+dnM8N4P1E91E3ppz5AHu3KaaTRnP94qdDrIiMc=
Subject key identifier: FA:BD:9F:E8:85:EC:B7:96:5B:2F:B2:58:C5:62:FC:04:ED:A6:8E:8D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1024
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
Signing time: Mon 01 Apr 2024 10:39:07 +0000
ROA not before: Mon 01 Apr 2024 10:39:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 1 10:39:07 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=660a8eca-1f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:8f:38:a0:90:45:c3:5d:6c:57:94:38:bf:
26:9c:89:a1:a3:63:68:6c:35:d8:9e:a0:04:c7:a7:
f3:f5:72:e3:5e:75:b2:14:2c:39:95:c8:4d:4b:c0:
70:0c:77:9c:0d:e3:0a:7d:33:79:85:25:a2:80:a1:
24:bf:2d:5f:87:63:a9:c8:a8:cf:5e:3a:cf:f0:b8:
29:a2:cd:e4:33:35:e7:98:aa:90:cb:a9:42:bd:45:
f3:49:68:0f:4a:0e:31:2e:e4:c0:cf:62:40:77:27:
31:11:d8:69:c2:32:6d:70:df:89:d4:6f:6c:94:d7:
d9:72:77:ba:1b:e4:05:b7:2e:ef:76:f7:61:46:47:
c6:a5:48:66:e6:4e:7f:b1:92:1d:eb:3f:98:ac:c9:
0a:a2:35:c2:7b:66:0f:84:51:f2:b4:1d:e2:3d:ea:
6f:68:04:42:15:d1:0e:99:56:95:28:2e:8a:13:bd:
a6:6e:c9:7c:49:9f:43:e8:3e:62:fd:ea:47:73:de:
20:f7:db:e6:96:12:48:88:ef:66:89:fc:6c:f6:b2:
9f:4e:7f:c3:3c:f7:5e:a4:0a:f7:f3:eb:ff:62:d2:
df:d3:0f:a5:28:71:be:fc:ae:c4:45:7f:fc:cf:e5:
5e:76:43:2d:df:db:98:e6:46:e1:40:7b:1a:c5:62:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:9F:E8:85:EC:B7:96:5B:2F:B2:58:C5:62:FC:04:ED:A6:8E:8D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/10A6CAA2F01411EEBFCE5E13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/22
115.167.76.0/24
115.167.124.0/23
223.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d4:3c:f8:5a:ee:84:9b:33:d1:8b:45:6f:95:df:fe:01:9b:
d4:4c:ec:fc:a1:7c:65:d3:0b:21:e2:22:31:a7:c2:26:1f:1c:
af:83:9a:44:f4:7b:da:27:bb:9c:0a:52:ea:f3:33:18:bc:af:
41:8b:be:39:10:7d:8a:dc:49:25:fa:04:b1:60:cc:17:c7:f2:
f3:25:ab:8e:e6:b0:3b:8f:8c:c1:90:95:cf:6c:9e:fa:29:49:
86:ff:0a:66:4d:d3:53:5e:72:e4:46:13:be:71:dc:be:2b:bb:
8c:bc:69:02:4b:dd:a3:d8:80:d0:38:80:65:2e:e5:33:2a:e7:
70:30:38:6f:66:54:66:1e:9c:75:2d:02:6b:72:42:f3:c0:cc:
8b:1c:28:98:79:dd:92:df:a7:61:fe:e7:31:a2:d3:16:a8:37:
74:4a:4a:a3:31:28:e2:75:de:dc:e8:aa:16:86:4e:18:86:e4:
7f:77:74:da:af:c5:85:30:36:a8:63:a0:f0:85:e5:34:cd:41:
c5:b3:14:61:93:7c:bb:36:87:4a:91:4e:b5:74:74:b9:ed:c0:
68:6a:04:97:af:c9:e1:6b:ce:6c:ad:49:ae:21:96:b3:58:6e:
62:11:f6:ab:26:38:e5:d2:a4:24:ca:04:d8:32:0e:63:f2:00:
5e:08:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:00 2025 by rpki-client