Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
File: 3896860024A011EEA307204EC4F9AE02.roa (raw, json)
Hash identifier: fqb/T7FZe2HukutXx3EkzG3+Yj6uE2r3d6zqIPDa/RI=
Subject key identifier: 45:6D:D1:A1:D5:F2:E5:CF:01:36:7C:74:35:45:67:FF:07:2F:4D:20
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C6B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
Signing time: Mon 17 Jul 2023 13:10:32 +0000
ROA not before: Mon 17 Jul 2023 13:10:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.79.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 17 13:10:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b53dc7-f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:06:59:63:be:f9:6f:2b:71:f0:d6:95:94:
45:f6:36:44:6b:2e:5b:b9:2d:d5:c9:e0:b5:69:fd:
00:da:ac:31:ac:d5:41:a1:6e:97:d9:18:f9:d5:c3:
7a:81:7a:6b:52:3a:24:c0:ba:54:bc:fa:82:84:1d:
ef:7f:2f:f3:24:eb:dd:ac:a0:04:97:0e:04:3e:32:
de:52:63:c5:b0:5c:a7:31:3d:ea:ec:a3:a3:4f:de:
9a:b6:1d:40:ce:84:a4:48:f6:ca:0d:1b:06:3c:1b:
2d:b6:93:c3:e5:d3:e0:63:82:b8:98:a0:c9:cd:eb:
be:76:97:89:23:7b:40:16:af:ab:31:de:12:05:45:
72:02:ab:22:dd:6b:07:3a:17:bc:3f:56:90:d4:a5:
95:1d:0e:ff:ca:3a:12:69:c5:34:4e:a7:b7:ce:f6:
52:2a:cc:a8:a0:02:d4:14:70:e2:5a:8c:38:ff:70:
1e:ad:3d:61:e9:55:f4:af:46:91:41:f4:c3:bd:91:
c6:93:3a:68:9a:9f:af:18:6d:19:4c:ca:48:05:29:
5f:3b:9c:0e:33:31:1f:cb:70:78:00:54:45:68:53:
6e:13:d2:b8:7f:e4:12:fd:1c:2a:27:e5:90:ad:69:
b2:63:91:f4:f3:ee:60:24:91:b8:93:e7:1b:76:42:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:D1:A1:D5:F2:E5:CF:01:36:7C:74:35:45:67:FF:07:2F:4D:20
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.48.0/24
115.167.76.0/22
180.178.164.0/22
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c4:fe:23:e8:be:56:63:70:20:39:05:79:5d:00:af:ca:f6:
f5:fc:c4:6c:9b:b4:0e:47:ae:f5:e5:3d:1b:cc:1c:86:dc:dd:
ea:b5:45:1c:51:50:8a:7e:17:f1:2a:ee:fd:6e:1b:f4:9d:cb:
4d:af:8d:8f:0d:9c:5e:41:bd:32:0c:be:ec:59:82:32:30:af:
5a:62:47:44:c8:76:c1:17:70:4c:0e:b2:d5:2e:26:14:c6:90:
67:45:f3:23:25:4e:52:15:e3:26:6d:fb:ad:be:ea:e8:9b:f5:
a0:ff:d7:0e:b4:ee:9c:07:65:4a:78:60:99:9d:55:3b:d0:b7:
3a:5d:f7:e3:5f:81:76:d0:cc:23:32:df:fb:b6:c8:a1:36:8b:
11:d9:1c:b4:23:b7:ff:a3:db:04:b7:9c:e9:ab:19:74:02:e6:
d3:d5:57:2e:f9:10:93:1d:e9:ae:7b:45:66:0e:86:a5:e1:11:
1e:ec:49:e3:ec:43:52:3a:2d:54:2c:0a:da:28:5b:e3:2b:73:
9a:7e:2b:72:f2:97:44:1a:2a:f4:02:3b:c3:fc:6a:f0:d3:34:
52:51:4d:21:9c:bc:76:15:d7:55:d9:ac:d6:ce:8a:66:18:b0:
6a:9a:04:18:c9:e1:b1:53:4c:9c:54:6d:38:bf:6c:6e:92:6f:
39:b7:82:53
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNzE3MTMxMDMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI1M2RjNy1mNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ocGWWO++W8rcfDWlZRF9jZEay5buS3VyeC1af0A2qwxrNVBoW6X2Rj51cN6
gXprUjokwLpUvPqChB3vfy/zJOvdrKAElw4EPjLeUmPFsFynMT3q7KOjT96ath1A
zoSkSPbKDRsGPBsttpPD5dPgY4K4mKDJzeu+dpeJI3tAFq+rMd4SBUVyAqsi3WsH
Ohe8P1aQ1KWVHQ7/yjoSacU0Tqe3zvZSKsyooALUFHDiWow4/3AerT1h6VX0r0aR
QfTDvZHGkzpomp+vGG0ZTMpIBSlfO5wOMzEfy3B4AFRFaFNuE9K4f+QS/RwqJ+WQ
rWmyY5H08+5gJJG4k+cbdkKedQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEVt0aHV
8uXPATZ8dDVFZ/8HL00gMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzg5Njg2MDAy
NEEwMTFFRUEzMDcyMDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAIr/gwDBABzpzADBAJzp0wDBAK0sqQDBADKXBUwDQYJKoZI
hvcNAQELBQADggEBAMLE/iPovlZjcCA5BXldAK/K9vX8xGybtA5HrvXlPRvMHIbc
3eq1RRxRUIp+F/Eq7v1uG/Sdy02vjY8NnF5BvTIMvuxZgjIwr1piR0TIdsEXcEwO
stUuJhTGkGdF8yMlTlIV4yZt+62+6uib9aD/1w607pwHZUp4YJmdVTvQtzpd9+Nf
gXbQzCMy3/u2yKE2ixHZHLQjt/+j2wS3nOmrGXQC5tPVVy75EJMd6a57RWYOhqXh
ER7sSePsQ1I6LVQsCtooW+Mrc5p+K3Lyl0QaKvQCO8P8avDTNFJRTSGcvHYV11XZ
rNbOimYYsGqaBBjJ4bFTTJxUbTi/bG6Sbzm3glM=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:12 2025 by rpki-client