Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26A402001D4A11EDACA2D476C4F9AE02.roa
File: 26A402001D4A11EDACA2D476C4F9AE02.roa (raw, json)
Hash identifier: 8dZz6jczHU/EKoi3YtqhZZw/T9q3VL3OpVPKSrUXNTM=
Subject key identifier: AF:1D:F2:E9:5B:E4:DB:3D:B8:29:18:C1:DF:D6:94:85:7D:B7:B3:FE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 08BC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26A402001D4A11EDACA2D476C4F9AE02.roa
Signing time: Tue 16 Aug 2022 09:59:43 +0000
ROA not before: Tue 16 Aug 2022 09:59:43 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.16.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.76.0/22 maxlen: 22
175.110.80.0/21 maxlen: 24
175.110.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 16 09:59:43 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62fb6a8f-f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:38:fc:65:a5:c5:74:03:06:21:2b:9b:d2:
f9:b9:e5:96:f6:2e:a0:63:54:4b:40:c5:85:c2:ed:
14:47:f2:76:f9:6d:8d:5b:91:80:e4:23:88:4a:f2:
d4:c9:ad:84:5b:67:c9:0a:cd:60:78:d0:64:c5:dc:
a5:74:a5:d4:36:7a:a8:b8:61:f7:15:e1:b8:9e:d1:
bf:bc:bd:d2:33:2f:30:62:cd:4f:86:cf:a7:eb:8c:
d1:f4:ed:ae:89:21:97:06:df:38:91:7e:fd:77:5c:
b2:30:b0:3a:90:0e:50:1d:40:d9:bc:7d:5c:a6:78:
28:12:91:8a:cc:40:d0:07:1f:2d:14:79:16:1f:f2:
3a:23:e2:d1:19:b5:d6:09:fe:05:f6:be:50:91:b4:
0e:bb:f2:30:e7:02:8d:8d:30:a4:68:27:4a:5f:06:
d6:27:1b:5a:a6:cb:46:ca:d1:7e:6f:84:14:59:10:
23:bd:d1:d0:1a:73:bf:fc:24:89:32:d8:a3:32:52:
c4:63:0f:29:f3:50:e8:23:ce:d7:3a:cc:ee:32:aa:
0d:a1:32:56:ee:a4:7d:83:34:9a:37:d7:38:83:bc:
d1:9d:5a:58:6e:0c:64:42:82:5c:85:f6:a6:b4:d6:
5e:c1:35:74:fa:14:d2:d3:72:d2:9e:ef:58:3b:09:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:F2:E9:5B:E4:DB:3D:B8:29:18:C1:DF:D6:94:85:7D:B7:B3:FE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/26A402001D4A11EDACA2D476C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.16.0/22
175.110.64.0-175.110.87.255
175.110.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c9:d4:31:c8:7b:5f:2e:1e:da:90:e6:87:f4:d8:98:e1:6d:
c3:52:bd:7f:73:fc:61:0a:61:6f:d1:49:e3:a4:43:26:3a:25:
95:0f:68:74:ad:62:85:ad:bb:db:41:9a:8c:99:65:39:a7:cb:
90:6d:f8:d1:e1:17:3c:ef:83:10:6f:dd:fb:7b:2e:c9:52:9f:
5b:3a:50:fb:e1:9d:4f:0c:3d:77:54:62:a7:36:2f:34:9e:e5:
c9:a0:2b:8b:77:de:06:3e:6c:cf:bc:97:37:4f:59:02:9d:60:
86:e3:da:b6:8e:cb:04:ba:5e:94:71:80:22:fd:55:80:c4:34:
b8:64:88:9c:76:70:f8:9f:6c:4d:e4:dd:10:50:4d:f3:7e:d3:
27:17:d1:c3:34:d9:3e:ce:7d:54:1f:95:77:b8:cb:6c:8b:89:
e9:65:37:e3:bc:c3:c3:b0:b8:5d:8d:78:04:68:a0:2b:d9:9e:
5c:15:a1:21:95:50:6c:7f:7a:ca:20:23:c4:5a:37:8a:16:c1:
70:f9:a6:29:3c:14:a8:cf:46:58:a9:5b:d0:36:de:3f:d4:10:
37:b3:52:e6:e0:cd:15:d1:50:94:da:3d:01:ef:79:00:aa:15:
ca:1f:83:3c:0c:fa:49:7c:30:64:62:4c:51:4b:3f:6f:b0:3b:
21:dc:2d:65
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwODE2MDk1OTQzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZiNmE4Zi1mMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMw4/GWlxXQDBiErm9L5ueWW9i6gY1RLQMWFwu0UR/J2+W2NW5GA5COISvLU
ya2EW2fJCs1geNBkxdyldKXUNnqouGH3FeG4ntG/vL3SMy8wYs1Phs+n64zR9O2u
iSGXBt84kX79d1yyMLA6kA5QHUDZvH1cpngoEpGKzEDQBx8tFHkWH/I6I+LRGbXW
Cf4F9r5QkbQOu/Iw5wKNjTCkaCdKXwbWJxtapstGytF+b4QUWRAjvdHQGnO//CSJ
MtijMlLEYw8p81DoI87XOszuMqoNoTJW7qR9gzSaN9c4g7zRnVpYbgxkQoJchfam
tNZewTV0+hTS03LSnu9YOwlSIwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFK8d8ulb
5Ns9uCkYwd/WlIV9t7P+MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjZBNDAyMDAx
RDRBMTFFREFDQTJENDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAJzpxAwDAMEBq9uQAMEA69uUAMEAq9uXDANBgkqhkiG9w0B
AQsFAAOCAQEAPMnUMch7Xy4e2pDmh/TYmOFtw1K9f3P8YQphb9FJ46RDJjollQ9o
dK1iha2720GajJllOafLkG340eEXPO+DEG/d+3suyVKfWzpQ++GdTww9d1RipzYv
NJ7lyaAri3feBj5sz7yXN09ZAp1ghuPato7LBLpelHGAIv1VgMQ0uGSInHZw+J9s
TeTdEFBN837TJxfRwzTZPs59VB+Vd7jLbIuJ6WU347zDw7C4XY14BGigK9meXBWh
IZVQbH96yiAjxFo3ihbBcPmmKTwUqM9GWKlb0DbeP9QQN7NS5uDNFdFQlNo9Ae95
AKoVyh+DPAz6SXwwZGJMUUs/b7A7IdwtZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:41:13 2025 by rpki-client