Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/219F8A48248511EE8673B278C4F9AE02.roa
File: 219F8A48248511EE8673B278C4F9AE02.roa (raw, json)
Hash identifier: muGsr0XUha2YL++tPbrWTDCEwvFV+48HQIfMmRqo3XQ=
Subject key identifier: 50:F7:7B:80:FA:E7:21:6F:04:55:1E:D1:55:87:93:4B:D6:97:D3:9A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C5B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/219F8A48248511EE8673B278C4F9AE02.roa
Signing time: Mon 17 Jul 2023 09:39:48 +0000
ROA not before: Mon 17 Jul 2023 09:39:48 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.79.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 17 09:39:48 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b50c64-0731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:f6:7b:8c:bd:4b:3a:60:30:c6:d5:1d:97:
e9:56:25:9c:80:2d:46:17:70:80:be:fb:5b:76:11:
4f:08:6c:c5:46:15:1c:76:ed:3d:cd:d8:2c:9c:4f:
e3:af:82:a9:a6:72:b8:03:68:5c:1d:ce:12:54:8a:
9c:14:2c:ae:1c:1f:cb:9c:b9:57:eb:d3:35:b6:d5:
b8:da:40:ae:5c:a3:50:5a:15:b5:29:4e:eb:51:08:
65:59:be:72:aa:ab:32:a0:6a:22:f3:5c:fb:16:e6:
c4:34:e1:8e:fd:47:b8:34:a5:a2:0d:b5:e4:48:70:
8f:d1:06:b0:a3:8e:ef:05:8c:5e:85:0a:a7:70:ec:
df:68:8a:65:b5:9f:1d:ab:e7:8d:50:1c:88:ce:21:
cf:c3:ee:08:f2:d5:01:50:ca:7b:de:52:8a:e9:3d:
3e:db:60:e1:cb:b0:fe:5b:6a:59:3e:fd:6a:84:94:
e3:db:94:43:e4:b1:a5:e6:bb:f4:c6:bd:42:13:ad:
cc:eb:c9:c5:f2:96:ab:d4:f7:4f:80:fd:5e:81:c0:
ec:ae:f7:6e:d1:a8:59:fb:70:b3:1c:31:63:f4:08:
02:01:fa:60:18:e7:25:46:69:a1:ce:8a:c1:48:81:
53:c3:5a:84:4d:f4:0b:10:c6:91:33:b5:a3:0e:9b:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:7B:80:FA:E7:21:6F:04:55:1E:D1:55:87:93:4B:D6:97:D3:9A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/219F8A48248511EE8673B278C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.24.0/21
115.167.48.0/24
115.167.77.0-115.167.79.255
180.178.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:ba:dd:96:e8:cf:4b:f9:52:89:8f:48:94:30:3c:86:1b:0f:
78:90:d3:cd:6d:71:14:bf:09:54:55:ce:db:38:4d:6c:cf:29:
d9:f8:6e:36:95:4c:55:23:75:49:34:f3:8c:ef:5e:47:d7:63:
63:4b:28:87:d7:ef:3c:43:44:d7:a6:a8:fd:e3:e1:3b:b5:89:
4a:71:46:0c:af:df:f4:38:f8:5a:44:01:ce:a9:6e:b1:e5:fd:
33:b4:0a:d1:57:3a:24:ee:fb:b4:2c:b1:19:e1:6b:18:f1:90:
bc:52:70:d4:b3:31:e9:d1:fa:7f:a3:15:55:e6:29:3e:80:37:
29:70:bf:5b:22:50:ad:8f:92:ca:4e:2b:12:7a:d5:6e:e5:cb:
16:0f:02:12:9e:4f:9f:57:25:f7:64:39:2a:a0:e1:c7:de:ff:
a4:04:04:c0:18:40:36:18:b9:1a:ae:d9:ee:e4:c8:87:72:06:
56:3d:71:b3:7c:e0:9e:6f:23:f4:97:63:fe:7a:0e:39:21:cc:
43:61:09:40:9b:ae:ca:b9:a2:c5:76:ba:aa:2d:72:54:13:82:
9f:03:c0:f4:b3:99:0c:27:31:24:45:d2:00:17:d7:05:d0:c0:
3a:f5:eb:22:66:66:27:30:95:df:5d:27:32:9b:09:76:98:4f:
aa:63:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:45 2025 by rpki-client