Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3515D6D2F0B811ED9780AD26C4F9AE02.roa
File: 3515D6D2F0B811ED9780AD26C4F9AE02.roa (raw, json)
Hash identifier: VZskd9lFd/O+/sxwvyln5f1RGA3Ec7lqX1POrcLY3DY=
Subject key identifier: BD:88:F7:B6:B4:05:11:FF:84:E4:CC:5D:CF:C1:3F:AF:01:83:85:A2
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F8A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3515D6D2F0B811ED9780AD26C4F9AE02.roa
Signing time: Tue 16 Jan 2024 06:19:02 +0000
ROA not before: Tue 16 Jan 2024 06:19:02 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.48.0/24 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3978 (0xf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 16 06:19:02 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65a61fd6-fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:04:c6:31:4e:89:15:30:e4:27:10:39:bd:
ca:5f:54:ff:ca:dc:c1:7b:9e:6a:5c:81:54:94:32:
ac:c4:04:38:fb:33:aa:41:f7:fb:61:bd:7a:49:fc:
2c:e9:8c:b9:5b:3c:00:88:33:78:ec:c6:09:93:c5:
90:35:a4:50:8d:8d:4c:37:32:ed:4f:29:ba:a1:c2:
58:67:24:3f:0b:65:62:33:30:62:d7:06:68:4b:0f:
52:96:19:50:24:4e:73:08:09:b0:83:40:9a:60:40:
3d:1a:7b:14:c3:78:7e:e6:d6:2d:2f:13:62:54:c8:
e5:ce:73:e6:b6:00:e0:ee:69:7c:73:0b:9c:68:ea:
63:28:19:e2:e8:3e:10:c7:10:82:ac:66:e3:d0:07:
a3:ff:6f:c1:6d:13:89:5f:a9:a7:b3:46:4d:84:2d:
7a:97:53:aa:72:03:ec:cf:95:60:4f:ed:f0:37:fd:
f4:b2:03:84:cb:fb:69:07:81:7e:2c:bc:0b:d4:54:
01:da:c7:7c:51:4c:18:c2:fd:b0:c9:a3:e7:77:c8:
7b:e3:d8:3f:56:3a:76:44:99:73:f8:4d:e9:af:70:
6a:47:87:ab:39:11:0a:5b:b6:ea:8b:1d:90:25:33:
c2:ae:2b:9e:a8:ed:c7:48:e8:38:c6:e9:0a:13:a0:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:F7:B6:B4:05:11:FF:84:E4:CC:5D:CF:C1:3F:AF:01:83:85:A2
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3515D6D2F0B811ED9780AD26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.16.0/22
115.167.24.0/22
115.167.48.0/24
115.167.52.0/22
115.167.60.0/22
115.167.77.0/24
115.167.100.0-115.167.107.255
115.167.112.0/21
175.110.64.0-175.110.75.255
175.110.84.0/22
175.110.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b9:d3:40:70:c5:4e:07:5b:24:4d:53:d0:1f:b0:09:33:7f:
08:ae:b9:09:eb:ea:ed:d0:d8:ef:2d:c9:f1:b0:bc:dc:45:bd:
1e:fb:e5:3d:43:86:d1:0a:f0:3c:00:12:4f:a5:65:e1:b4:cc:
14:82:7a:f2:48:ec:46:a0:e7:e9:90:a5:67:98:d7:96:b0:94:
20:60:24:01:c0:56:8e:11:c4:14:70:5a:c8:66:54:0f:ec:12:
3c:81:2a:a8:ce:46:0b:cc:db:52:f6:20:f3:23:94:4b:2b:3d:
9f:18:5c:36:d1:82:1e:3b:0e:4b:51:b3:65:4a:a3:11:8c:24:
9b:a4:83:9c:5a:93:dd:0d:64:1c:a9:7d:45:bd:58:e4:61:25:
64:87:16:e2:e9:7b:14:0e:0b:cc:25:a0:0d:23:b5:2e:12:18:
2b:d7:b2:9d:29:4d:01:df:fc:c2:63:d3:ee:a6:5d:c9:d1:ea:
27:60:2a:15:da:fc:55:b6:20:ca:fb:35:85:bf:d2:3d:ac:e7:
68:dc:4f:dd:70:5c:74:af:d5:86:6f:0e:a1:59:96:c3:ce:06:
90:e0:46:0e:ed:b6:c6:fe:cf:ac:21:77:7f:67:6c:92:62:b5:
a3:e2:01:ea:c0:6e:61:8c:73:bb:0f:50:ed:e8:09:34:58:61:
7f:47:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:23 2025 by rpki-client