
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
File: 3ECC087213D211EDB30E3D61C4F9AE02.roa (raw, json)
Hash identifier: zPO9wEX0RKC93e8AeJFc8kpz87tMJE4tN3l9aYoAb0Y=
Subject key identifier: 47:E7:31:84:CC:B9:65:27:EB:18:E4:79:D6:79:44:FF:95:56:C6:76
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0898
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
Signing time: Fri 05 Aug 2022 08:28:35 +0000
ROA not before: Fri 05 Aug 2022 08:28:35 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 5 08:28:35 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62ecd4b3-86d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:0b:6b:58:12:e7:b3:d3:7a:fb:f5:f1:bf:
c3:b2:33:d2:c5:a7:42:b9:89:27:8d:be:37:d3:07:
88:43:ca:d2:91:4a:d4:4b:c4:a9:57:eb:e7:dc:23:
ec:c4:83:39:e9:42:e0:c4:76:d3:1e:c6:37:7d:65:
d0:37:94:e7:ac:99:73:58:4f:27:db:6c:4e:df:4b:
9a:42:89:8f:7c:93:3e:5b:e7:37:10:bc:00:a2:41:
56:fd:51:e4:12:d8:9f:3d:63:1f:f9:d1:34:97:25:
2a:94:38:70:3d:5a:3c:c2:44:45:78:ca:33:01:4d:
74:87:06:4e:20:db:8e:d3:82:a6:26:5d:f0:0e:2c:
b4:c7:77:7b:b7:8f:07:e3:b7:d4:66:ee:53:0d:e1:
38:b3:00:07:b5:02:2b:d0:79:96:0b:9a:5e:44:75:
b1:54:6c:bc:24:a1:57:35:5e:80:d4:c1:66:b6:5b:
a2:7f:ca:88:10:d6:bf:a4:87:84:a1:d3:e4:c5:1d:
18:7b:06:ff:8d:6c:00:e8:39:70:92:fe:2d:31:87:
78:e0:39:fa:cf:61:5b:28:29:25:c3:46:71:0a:b7:
c7:22:91:fa:51:31:cb:8c:39:ec:c1:42:4b:29:88:
5c:1b:45:4d:c9:5d:0b:b1:bd:a5:48:87:ed:ca:5f:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:31:84:CC:B9:65:27:EB:18:E4:79:D6:79:44:FF:95:56:C6:76
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.48.0-115.167.50.255
115.167.72.0/22
115.167.100.0/22
115.167.112.0/22
175.110.64.0/22
175.110.80.0-175.110.91.255
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
5e:a0:47:c8:c1:3f:7f:ed:1c:0d:f0:15:ec:e4:d4:54:02:86:
b7:fb:62:fc:9e:ed:ed:81:69:4c:9c:0b:4e:ae:45:73:44:df:
83:01:19:f7:a7:c4:9d:46:62:da:2b:38:d6:8b:46:64:5e:15:
67:d4:b1:e6:7f:02:97:b9:58:e8:61:96:81:f9:92:85:a6:37:
75:11:9f:dc:90:95:68:de:ee:b7:10:37:df:87:4a:4a:c0:b8:
26:a7:df:f0:f7:3a:73:4e:10:fc:43:a7:16:e2:a1:75:e5:37:
45:9e:da:5f:c6:91:6e:ce:f6:b2:0b:0e:85:51:25:f9:de:ac:
4b:39:80:e9:6d:d7:a5:d5:2d:ef:7f:62:0c:5b:b6:18:ba:18:
44:9e:72:63:70:06:e6:e7:c8:0b:94:af:2a:fa:0d:b6:42:67:
30:69:46:8e:ef:45:82:1e:bb:8b:c1:4e:79:5e:e1:92:f4:8b:
b9:c2:81:2c:f5:a6:13:cc:a7:ac:e6:0b:92:d5:5a:0e:5d:58:
04:4f:a1:07:61:5c:f7:08:cf:41:5c:82:16:ba:ca:d0:dc:fb:
dc:ce:c3:99:02:95:91:e9:5b:36:06:df:44:13:d0:b4:d4:74:
48:ca:34:94:11:81:44:bc:02:95:0e:0d:50:56:64:23:ed:e1:
77:f6:17:66
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwODA1MDgyODM1WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmVjZDRiMy04NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSQLa1gS57PTevv18b/DsjPSxadCuYknjb430weIQ8rSkUrUS8SpV+vn3CPs
xIM56ULgxHbTHsY3fWXQN5TnrJlzWE8n22xO30uaQomPfJM+W+c3ELwAokFW/VHk
EtifPWMf+dE0lyUqlDhwPVo8wkRFeMozAU10hwZOINuO04KmJl3wDiy0x3d7t48H
47fUZu5TDeE4swAHtQIr0HmWC5peRHWxVGy8JKFXNV6A1MFmtluif8qIENa/pIeE
odPkxR0Yewb/jWwA6Dlwkv4tMYd44Dn6z2FbKCklw0ZxCrfHIpH6UTHLjDnswUJL
KYhcG0VNyV0Lsb2lSIftyl+MgwIDAQABo4IDEDCCAwwwHQYDVR0OBBYEFEfnMYTM
uWUn6xjkedZ5RP+VVsZ2MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvM0VDQzA4NzIx
M0QyMTFFREIzMEUzRDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZkGCCsGAQUFBwEHAQH/
BIGJMIGGMIGDBAIAATB9AwQAc6cCMAwDBARzpzADBABzpzIDBAJzp0gDBAJzp2QD
BAJzp3ADBAKvbkAwDAMEBK9uUAMEAq9uWAMEAa9uYAMEAK9uaAMFAK9uawIDBQCv
bmsOAwUAr25rcgMEAq9ubDAMAwQEylwQAwQBylwUMAwDBADKXBcDBAXKXAAwDQYJ
KoZIhvcNAQELBQADggEBAF6gR8jBP3/tHA3wFezk1FQChrf7Yvye7e2BaUycC06u
RXNE34MBGfenxJ1GYtorONaLRmReFWfUseZ/Ape5WOhhloH5koWmN3URn9yQlWje
7rcQN9+HSkrAuCan3/D3OnNOEPxDpxbioXXlN0We2l/GkW7O9rILDoVRJfnerEs5
gOlt16XVLe9/Ygxbthi6GESecmNwBubnyAuUryr6DbZCZzBpRo7vRYIeu4vBTnle
4ZL0i7nCgSz1phPMp6zmC5LVWg5dWARPoQdhXPcIz0Fcgha6ytDc+9zOw5kClZHp
WzYG30QT0LTUdEjKNJQRgUS8ApUODVBWZCPt4Xf2F2Y=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:21 2025 by rpki-client