Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
File: 38E9176402D311EFB9E2A81DC4F9AE02.roa (raw, json)
Hash identifier: CSxYD4J+wC880jl60XhmXw1LmGIF3TB+iSowRtY3h1M=
Subject key identifier: DC:D1:28:0F:64:8F:26:BC:10:07:F6:49:4F:77:5B:0C:B7:1A:E9:CB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 115D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
Signing time: Wed 01 May 2024 19:12:47 +0000
ROA not before: Wed 01 May 2024 19:12:47 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 131275
IP address blocks: 223.29.232.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4445 (0x115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 1 19:12:47 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6632942f-46ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:37:de:14:ff:ba:13:09:fa:1c:c9:63:88:
8a:76:57:61:18:91:dc:42:b1:70:fc:38:42:64:81:
9c:67:6f:80:3c:0e:ce:bf:f1:69:d5:c5:15:6a:c4:
10:cd:df:a8:cc:92:a2:62:0e:9a:2b:c4:2f:1b:fc:
42:5e:cd:5a:9a:57:db:e6:cd:b8:ba:c9:2f:f1:c6:
fe:76:5b:d2:dc:25:41:b0:1d:cf:9a:c5:22:9d:15:
7c:46:97:63:44:bb:64:da:f6:61:79:22:94:e2:00:
1d:bf:2d:ba:23:86:8a:2f:0e:73:bb:ea:3c:49:d0:
2d:de:44:b8:8a:a0:c8:2b:3d:38:a0:64:fe:1b:ea:
29:84:7c:e1:8c:9e:33:e0:bb:cc:06:c5:74:85:e3:
c6:bb:63:ad:94:69:d3:b1:d2:8d:71:45:c6:fa:a9:
07:47:26:c5:0a:6f:a7:19:a7:c7:75:b1:ea:5c:1a:
ea:10:79:ad:00:1f:16:17:fe:66:8f:20:ca:97:33:
ed:bf:58:d9:a1:1e:ce:ac:fe:a4:bb:6c:0a:f7:9a:
8d:1c:cd:85:6e:0b:00:fa:56:d7:22:b3:6a:45:d0:
20:31:d1:8d:ad:46:5b:50:c7:88:19:6b:e0:fa:07:
60:ff:90:01:f0:26:4e:3e:10:6e:ff:0e:0c:34:dc:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:28:0F:64:8F:26:BC:10:07:F6:49:4F:77:5B:0C:B7:1A:E9:CB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.232.0/24
223.29.234.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d4:3a:89:37:01:29:54:50:21:7c:9f:0c:41:e8:35:da:a9:
0c:f9:9a:90:f0:8b:83:dd:a4:ac:6a:6b:71:cc:69:8f:14:17:
49:12:56:b7:76:9a:49:f4:6e:40:7f:6d:01:84:e6:51:bc:5e:
20:15:d1:0c:99:7f:da:b3:64:42:46:b5:ba:52:29:54:01:2c:
08:22:cf:0e:9d:82:b5:8d:11:21:6b:f0:34:c5:c8:fe:72:26:
b2:ce:64:43:63:8e:92:ee:56:d2:bb:3f:a0:d7:a2:17:dd:c4:
79:c6:43:a6:c1:c8:fd:2f:8a:e2:39:95:cb:8c:4e:53:27:22:
f4:14:07:a0:14:c8:10:76:2f:66:b1:b7:60:91:1f:41:4e:8b:
e9:5a:ac:1c:b3:90:af:b4:bd:14:a1:7d:df:60:3c:f7:85:10:
c3:34:32:3e:60:80:b5:93:69:fd:42:f8:e8:17:30:b9:63:b9:
dd:38:20:cb:92:d1:cb:f3:51:54:5a:79:f2:94:dd:7a:05:4a:
42:cb:64:f4:81:cf:58:42:ed:fa:df:9b:2b:c9:50:7a:a4:bc:
04:fd:87:ba:cb:af:50:d2:4f:06:2c:0f:1e:bf:28:ae:0f:d3:
91:03:a6:b2:41:1b:0f:f7:73:bb:ef:61:3b:4a:42:2d:08:f3:
9f:47:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:40 2025 by rpki-client