Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
File: 1917361A746811EC825C5260C4F9AE02.roa (raw, json)
Hash identifier: XVvjN3rChGk4h9oMW4to5IayJFZ085VT4xRDKZJd7NU=
Subject key identifier: BB:C6:47:4A:AF:7F:37:53:22:9A:4B:72:C1:A1:58:B3:29:1F:1C:13
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 05F0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
Signing time: Thu 13 Jan 2022 11:58:19 +0000
ROA not before: Thu 13 Jan 2022 11:58:19 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 211252
IP address blocks: 115.167.0.0/22 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520 (0x5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 13 11:58:19 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61e013db-fab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:df:7d:28:de:34:f9:d8:09:95:17:bf:cf:
ef:9e:71:6d:62:6b:9e:20:40:09:a4:c1:c8:42:5b:
a9:42:4e:45:39:30:65:1c:77:f5:80:9f:52:fe:c0:
9e:2f:df:5e:ca:59:21:f9:ca:13:2f:cd:80:c8:22:
09:b9:35:58:ed:96:3b:c9:86:87:cc:a7:17:34:89:
a9:0f:07:47:fe:97:ca:f4:2d:19:6c:66:9b:00:14:
3a:f9:18:c1:26:58:89:53:0c:bb:71:f9:79:ee:e3:
48:85:49:fc:2b:d3:e1:dd:c5:5b:61:85:d9:72:49:
d8:f7:79:35:9f:f0:1a:ff:f8:73:3a:99:ef:a4:30:
7f:e5:e8:6d:41:be:21:05:ef:f6:e5:8b:19:70:45:
57:a6:34:74:79:e9:d9:bf:35:b7:d2:34:b7:57:b0:
2c:3c:5e:e8:d0:df:43:75:19:47:68:2f:df:90:f0:
fa:56:0e:75:9d:92:2f:4f:b1:ca:7e:9f:2e:5b:2b:
8e:21:cc:99:ac:f8:37:55:93:a8:50:45:fb:31:cd:
3b:90:76:04:4e:38:f3:9f:d6:78:6e:91:53:82:44:
72:da:42:e6:8b:e5:5c:84:15:15:bd:af:0b:e4:27:
d4:09:d6:d3:16:cd:18:ce:01:7c:8d:69:5a:c5:20:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:47:4A:AF:7F:37:53:22:9A:4B:72:C1:A1:58:B3:29:1F:1C:13
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.6.255
Signature Algorithm: sha256WithRSAEncryption
00:70:9b:02:fe:45:70:b3:c5:19:c9:1d:0b:1d:c3:76:76:7b:
d7:0b:30:66:0a:49:32:16:7f:1e:a5:29:ba:32:86:21:ba:af:
d7:99:93:1d:d7:0f:e8:81:72:19:ff:e7:66:90:62:cf:12:bf:
73:37:7b:a1:00:3f:40:15:4a:c1:63:9e:5c:f5:95:5f:0c:05:
6f:a3:96:8c:af:88:15:f2:7c:be:fd:d2:9b:52:6b:83:0e:a7:
74:f2:39:5c:53:57:d3:8d:39:08:20:be:12:20:36:ec:f2:98:
b3:c5:20:cc:9e:4a:26:12:37:66:e4:2e:05:f9:38:1c:86:84:
fb:a8:c9:13:e9:94:2a:42:8e:7b:bf:73:3d:4a:a9:60:c3:78:
d5:5a:a2:73:1d:62:61:d4:42:3d:d9:83:b6:d4:91:05:28:0a:
c2:da:a0:6b:60:b0:13:b3:c1:82:06:62:7d:ea:34:f7:d5:d5:
53:0d:bb:63:16:2b:ff:a7:c7:b1:30:aa:f1:7e:35:63:4d:7d:
2a:1f:90:40:f8:a8:c2:a6:1d:fe:c2:cb:15:1b:ca:50:a8:99:
c0:72:40:2b:8c:f3:9c:2d:2e:1e:b7:80:fb:56:1d:f3:09:0c:
1e:ba:6b:e7:fb:ab:df:64:48:c9:ec:94:39:47:98:4e:de:14:
7a:2a:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:32 2025 by rpki-client