Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15CD502CD50511ECB4BBD287C4F9AE02.roa
File: 15CD502CD50511ECB4BBD287C4F9AE02.roa (raw, json)
Hash identifier: wQQLAc76E6C2lC58gzGyWXoxCQgjnYHJbc3prgfbwPA=
Subject key identifier: 0D:B8:24:CF:A0:0A:6E:1F:17:82:DC:F1:A6:16:52:24:6C:EC:9A:50
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0756
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15CD502CD50511ECB4BBD287C4F9AE02.roa
Signing time: Mon 16 May 2022 10:43:57 +0000
ROA not before: Mon 16 May 2022 10:43:57 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.16.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.76.0/22 maxlen: 22
175.110.92.0/22 maxlen: 22
175.110.96.0/24 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 16 10:43:57 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62822aec-8486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:fe:cb:4c:be:62:d1:e5:c1:dd:a9:5e:2f:
2e:f0:19:07:7c:c0:56:be:19:10:e8:f7:05:00:cd:
11:28:da:47:61:0c:28:f0:69:58:ee:93:ad:c0:30:
72:96:fe:c8:57:10:1f:c6:12:c2:9d:92:c8:88:b9:
aa:54:fa:d5:aa:cb:d5:fa:7c:e7:d7:a0:1a:e4:53:
18:f9:6b:dd:d9:01:8b:f5:34:8c:6a:bf:ea:3b:f1:
e6:85:54:cc:65:98:c3:27:55:00:4d:e2:40:c2:9b:
89:30:1e:79:a1:17:4f:c2:3c:03:28:6b:13:4d:39:
ca:b4:87:44:53:1c:6b:41:41:fb:28:fc:66:9f:ac:
a7:ad:56:e5:17:d8:d2:ee:21:b6:89:5a:5d:56:a3:
73:82:8a:b4:cc:36:c0:fd:d7:48:60:1b:e5:fa:eb:
f8:d8:ef:c5:c7:1f:57:3b:1f:bf:c5:a5:0d:77:fe:
7d:37:b4:a7:67:76:d7:2d:ac:c1:19:b3:a8:02:5e:
23:dd:c3:aa:a4:6f:f8:01:61:bd:dd:49:bf:d2:7c:
00:37:fe:18:36:b8:85:72:19:b9:6e:db:ff:fb:5c:
9b:3d:0b:ec:b7:fc:a7:ba:88:23:57:15:7d:30:46:
6b:94:db:51:67:fe:3c:8b:d8:34:7a:2f:b9:e0:6b:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:24:CF:A0:0A:6E:1F:17:82:DC:F1:A6:16:52:24:6C:EC:9A:50
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15CD502CD50511ECB4BBD287C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.16.0/22
115.167.120.0/22
175.110.76.0/22
175.110.92.0-175.110.96.255
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:94:77:84:6a:36:f5:2c:3e:68:0d:a4:0c:a2:df:8e:30:67:
18:5e:4f:57:9a:03:f4:94:83:a2:ba:d2:0f:3d:60:45:93:fa:
30:25:2f:30:c8:bd:31:24:c1:4c:f3:f9:8e:fc:b8:bb:14:36:
60:24:6c:30:23:12:ce:8d:10:eb:48:c0:e7:4b:2e:0b:bf:02:
60:f1:00:e6:76:52:ac:08:09:92:55:70:bf:0e:b4:4f:76:38:
73:1e:28:d2:40:7a:03:a8:ad:03:24:6a:69:3b:85:13:28:64:
29:2f:4a:a0:31:ae:1a:99:c2:f9:ad:f6:d5:40:2b:82:49:01:
76:04:76:fa:89:6f:94:29:db:13:61:26:3b:3f:fb:d1:91:30:
91:ab:20:96:59:d1:a4:9d:7a:be:f3:a2:5f:dd:1d:cb:ad:91:
81:b7:0c:ad:fe:04:ea:52:1b:4a:61:6b:ed:8f:7d:c9:bf:23:
43:ed:7b:8d:4d:8d:c9:a5:92:26:65:5b:dc:75:b0:cd:24:24:
b2:89:e6:56:2e:2c:fc:31:a2:48:5d:8f:2b:8e:b0:24:99:ef:
b0:2f:dc:19:45:ca:fb:ad:55:88:62:55:6c:a5:93:57:da:85:
91:16:8c:13:7c:fc:3b:f8:0f:46:2b:64:de:79:f1:a6:65:ca:
e8:e6:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:02 2025 by rpki-client