Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D55B9A455C611EDA424C24EC4F9AE02.roa
File: 2D55B9A455C611EDA424C24EC4F9AE02.roa (raw, json)
Hash identifier: zd2vLzUz4UlBvEFfYQdSKcDNcLmtc3vyBwp4kWdR4ek=
Subject key identifier: E2:10:DB:A3:48:47:A0:07:76:6F:8E:0D:09:F0:8E:A6:BE:9A:36:9A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0996
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D55B9A455C611EDA424C24EC4F9AE02.roa
Signing time: Thu 27 Oct 2022 08:49:08 +0000
ROA not before: Thu 27 Oct 2022 08:49:08 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 27 08:49:08 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=635a4603-87d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:2d:cf:22:41:df:26:b8:94:f9:5d:9a:82:
eb:dc:85:98:87:4a:e2:b6:ae:52:7f:bb:ba:2c:3f:
3a:fc:b9:04:87:2c:20:0e:6e:6c:65:3d:2c:03:14:
ce:bf:e0:be:30:46:f1:65:3a:10:17:89:66:77:77:
33:fb:5a:d2:4a:a8:9b:15:5b:50:6d:dc:db:ef:b1:
3b:64:c4:53:b6:48:7e:be:4a:ea:57:71:df:82:d3:
51:9d:07:94:2c:d2:a2:fc:48:30:5d:85:fa:42:1c:
86:18:6e:5c:73:85:cc:c7:71:58:75:08:1b:fb:32:
94:d4:f5:b6:3e:f1:3a:48:fe:4a:b5:ee:e6:3f:f9:
f2:da:19:66:fa:e9:b0:63:ec:8b:bd:c8:16:10:6c:
f8:97:39:f2:94:25:20:11:11:2a:1b:42:55:91:af:
e3:7e:5b:af:93:cf:e3:62:d3:e8:da:99:5a:d4:a5:
dc:80:ee:1a:9f:45:06:f4:06:c1:cb:f5:68:f5:d1:
b6:c8:d4:73:73:88:0f:91:13:3b:56:87:ee:a2:e9:
7a:75:5b:df:47:57:66:65:eb:63:44:19:dd:d8:80:
61:6d:ee:15:69:eb:cd:8e:2a:82:13:d5:05:6e:6e:
07:b9:87:c9:f8:53:54:93:09:b1:5e:d1:7c:13:16:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:DB:A3:48:47:A0:07:76:6F:8E:0D:09:F0:8E:A6:BE:9A:36:9A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2D55B9A455C611EDA424C24EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.2.0/24
115.167.24.0/21
115.167.72.0/22
115.167.78.0/24
115.167.116.0/22
115.167.124.0/22
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
21:6d:52:81:c3:ea:d9:7c:81:3e:78:3c:51:5a:90:87:2a:31:
73:de:5e:8e:ed:da:f2:47:62:e5:a1:99:49:d5:97:ce:0d:3f:
ff:02:94:19:39:1b:f4:21:86:de:2e:db:85:5a:89:16:b9:b0:
7b:75:06:ee:d4:6c:b3:c3:93:06:1a:3f:6c:85:b5:86:72:aa:
1e:ba:81:ee:7f:99:e6:01:df:12:98:ed:a4:6e:46:b4:9e:ad:
c6:04:da:f5:70:be:b4:74:cf:14:9a:c5:cf:c2:6d:f7:1c:9d:
dc:86:db:64:0a:98:c3:c1:0e:34:6b:09:43:ff:c8:1d:e5:a3:
27:52:d6:a6:54:9a:cf:89:b0:73:4e:ea:10:eb:70:68:ea:c4:
71:e1:0f:c3:04:94:2e:5e:73:9c:ff:da:15:38:02:ef:6c:14:
91:8d:b9:1c:ab:2e:9d:cf:9b:4b:bc:f9:a7:68:b4:a3:e7:9d:
48:a8:d9:80:26:08:04:18:a4:81:04:6c:fb:63:69:0a:f1:e2:
93:00:48:dc:34:85:6e:5a:2f:98:f1:c9:be:b8:f0:8e:51:68:
c0:7d:be:3c:c2:31:f2:c2:42:b7:5e:37:36:c9:ea:06:ee:5d:
c3:bd:01:36:30:2d:87:6a:c9:c8:87:20:3f:e2:00:d4:b0:d4:
4b:4c:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:33:59 2025 by rpki-client