Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/116A742E13BC11EDA7FA4A32C4F9AE02.roa
File: 116A742E13BC11EDA7FA4A32C4F9AE02.roa (raw, json)
Hash identifier: yGmHQkgs/oIetVslepAzWHqd36ODAZyOfGQFea2GzrI=
Subject key identifier: 27:8B:B7:FF:7F:5B:ED:A7:AA:F3:E4:92:D1:EB:12:D0:47:42:5C:93
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 088B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/116A742E13BC11EDA7FA4A32C4F9AE02.roa
Signing time: Thu 04 Aug 2022 06:09:58 +0000
ROA not before: Thu 04 Aug 2022 06:09:58 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.8.0/22 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 4 06:09:58 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62eb62b6-4afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:57:d5:e9:3d:f0:54:d6:88:55:9f:32:f7:
9e:c2:af:cf:69:42:1d:32:e0:9d:cd:85:58:6c:8c:
de:30:72:fc:6f:53:94:57:57:50:fe:5c:b3:7f:d8:
03:ba:4e:97:7b:90:f3:8b:19:b0:16:52:d1:e7:7e:
8b:f0:83:03:80:96:ec:7d:04:aa:86:86:b5:85:96:
35:0c:c3:0e:40:0f:5b:5d:13:8f:ee:e6:6c:62:d5:
90:66:aa:b4:57:86:85:65:8d:98:71:b2:26:a8:b8:
77:0e:fc:63:32:37:b0:4e:fc:d3:20:08:ad:23:5f:
64:a9:de:27:cb:fd:55:3a:8f:a9:f7:51:a5:e3:f5:
bf:d9:e7:f4:64:ed:9c:19:61:30:59:88:94:90:3b:
12:16:3d:5c:19:8d:b9:dd:94:e0:18:02:2a:46:ae:
a0:a8:03:57:c3:6e:76:58:15:c0:0a:8c:cc:0e:82:
e9:02:81:8a:49:0e:3c:24:57:07:12:00:43:ec:7e:
e9:32:94:8d:95:1d:ce:9b:65:b9:ad:87:9e:85:04:
24:49:73:c9:be:84:c0:77:07:fc:6a:e0:a4:6f:ab:
2b:30:fb:70:16:32:2b:64:8a:05:54:82:54:78:fe:
a7:03:16:bb:2f:bd:79:f7:fc:14:3d:16:5b:70:a3:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:B7:FF:7F:5B:ED:A7:AA:F3:E4:92:D1:EB:12:D0:47:42:5C:93
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/116A742E13BC11EDA7FA4A32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.8.0/22
115.167.49.0-115.167.50.255
115.167.72.0/22
115.167.100.0/22
115.167.112.0/22
175.110.88.0/22
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
69:c5:b9:b7:44:2f:5e:d6:a5:9a:95:c7:6b:21:ad:2e:e0:64:
23:2f:34:d5:d6:96:ca:13:70:ac:35:17:06:2c:f2:b4:b3:06:
99:1b:be:9b:4d:da:08:17:80:73:79:55:8c:d4:10:e8:53:a2:
be:47:42:66:05:bd:6f:53:c2:5d:d7:47:14:2e:98:d9:37:96:
5a:14:6e:b7:78:39:4e:f6:55:11:e8:6d:b4:25:51:c0:b3:7e:
4c:cf:40:b9:b7:86:b4:68:06:71:6f:9a:af:0a:4b:3e:d4:a4:
d6:d7:c0:49:b2:a5:19:32:2c:e1:c3:96:55:6d:2f:33:e7:56:
33:83:85:b8:cb:d7:b3:2f:15:40:67:96:42:23:4e:0a:4d:6e:
26:65:4d:38:8b:3f:2a:bf:21:7c:c0:d4:be:ba:48:03:d6:6c:
97:ac:4c:2b:1d:23:73:91:ab:13:6c:55:79:91:9a:7b:99:1f:
4f:d0:a7:27:bb:56:5c:cb:34:a0:c2:71:09:48:fa:d7:d7:44:
70:7a:a6:7c:ee:4d:94:4d:03:b4:63:ed:f3:01:71:15:9a:42:
58:80:88:63:94:4f:ae:bd:62:34:2d:50:a7:62:1a:d2:e3:f6:
a9:3e:e2:d4:f6:a1:38:ce:fc:b3:23:ac:52:50:c5:dd:38:4b:
cf:03:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:53 2025 by rpki-client