Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/16731166E59811EDB79C1C0DC4F9AE02.roa
File: 16731166E59811EDB79C1C0DC4F9AE02.roa (raw, json)
Hash identifier: jKnCNsa4J8P4Gd7Th6hWSX/sLYLkbdem7QHnjqewGOU=
Subject key identifier: C0:42:4A:00:F5:E8:74:56:42:F9:3F:31:52:7C:BE:3C:11:01:AD:A0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B4D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/16731166E59811EDB79C1C0DC4F9AE02.roa
Signing time: Fri 28 Apr 2023 08:01:42 +0000
ROA not before: Fri 28 Apr 2023 08:01:42 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
175.110.98.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 28 08:01:42 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=644b7d66-9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:65:1e:e9:2a:73:f6:19:54:18:62:55:22:
cd:83:2a:a6:4a:31:a5:ac:94:01:df:a0:6e:da:07:
69:02:1c:0c:8a:59:58:e7:85:98:37:e6:4f:aa:b3:
59:9e:71:77:29:28:c3:27:b8:15:de:50:d9:78:46:
e6:4e:0c:87:51:f4:3f:7b:95:24:5d:71:9f:93:83:
96:f9:fa:72:9a:9c:ce:89:17:4e:1c:2b:99:8a:ff:
bd:84:8c:93:f9:fd:d6:39:c2:c7:bc:dc:fc:2a:5a:
0e:6b:94:b0:72:98:2b:fe:e2:62:32:a5:17:7f:36:
76:92:ee:4c:72:21:72:a8:d9:5f:ef:62:6b:b1:1a:
e6:10:1a:ee:c4:04:70:8f:05:14:6f:4f:7b:91:61:
d3:1d:5d:17:44:96:d5:a1:fe:90:b9:b4:ad:b5:3a:
49:16:61:48:3b:ae:27:c4:df:e3:55:1b:23:d7:91:
a5:20:64:0f:80:f0:96:48:65:ea:43:a0:7a:51:63:
ca:01:de:d4:c3:cc:24:b5:ff:fd:27:4c:43:96:0b:
72:28:92:84:d4:c3:2f:f9:ee:97:1d:68:5b:bf:4a:
1e:71:57:9f:8b:45:fa:ef:f9:63:ad:10:7a:66:71:
60:00:cc:49:23:8b:ce:e1:b2:54:e8:0e:f9:7c:44:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:4A:00:F5:E8:74:56:42:F9:3F:31:52:7C:BE:3C:11:01:AD:A0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/16731166E59811EDB79C1C0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.208.0/24
113.203.210.0/24
113.203.218.0/24
113.203.220.0/24
113.203.222.0-113.203.225.255
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
113.203.252.0/22
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
175.110.98.0/24
180.178.148.0/24
180.178.151.0/24
180.178.162.0/24
180.178.173.0/24
180.178.179.0/24
223.29.226.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
b5:f4:a1:1b:bc:83:b1:78:43:b7:ad:68:3d:e4:3a:90:b3:f7:
64:6c:63:5d:2e:f4:42:dd:00:d0:45:1c:49:5c:cb:88:e5:4a:
48:41:34:ad:42:06:7a:ac:f6:7d:b3:48:69:f2:4f:c6:37:16:
40:71:f7:b9:96:44:37:17:1c:48:b0:76:d2:a7:2d:e7:e1:a5:
0d:d1:21:56:39:67:4e:6c:88:75:c4:b7:d1:02:68:17:c5:4a:
6b:68:02:2e:be:fa:72:bc:06:82:9a:e9:30:df:d8:b7:b3:d4:
96:d4:0e:a0:fa:30:5b:f2:2f:fd:19:eb:9c:ee:d4:ff:df:4e:
df:a8:e6:d5:00:25:b0:bf:61:9a:25:73:c8:0f:49:a8:c7:0d:
50:87:37:86:0a:92:d1:ec:69:df:2a:fe:7b:b6:c6:5b:8a:92:
65:a4:4a:ed:21:d2:bc:01:b6:c6:cf:b5:4a:7a:40:93:31:3d:
2c:76:93:4f:61:87:31:fd:5d:8e:23:e7:72:0b:f4:ef:54:7a:
a8:96:6a:8a:37:d8:d0:a6:d6:64:99:5e:18:cb:ad:62:fd:3a:
24:0d:dd:36:ff:e4:52:d4:72:ce:2d:ca:f7:5a:e5:12:72:e3:
59:f6:8f:ee:f7:4c:5e:82:54:1a:7d:c9:d2:41:b7:b0:75:72:
e3:08:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:11 2025 by rpki-client