Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42E52E28086A11EFA2F47A84C4F9AE02.roa
File: 42E52E28086A11EFA2F47A84C4F9AE02.roa (raw, json)
Hash identifier: InSM+nuwIuGs86V3G8UVGD9JhWFxbFacGNKEdJz8HVg=
Subject key identifier: 0B:E7:EF:E5:A2:6F:5F:A4:57:D4:31:BA:36:79:C0:08:E2:DA:0B:C5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1179
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42E52E28086A11EFA2F47A84C4F9AE02.roa
Signing time: Fri 03 May 2024 09:29:59 +0000
ROA not before: Fri 03 May 2024 09:29:59 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4473 (0x1179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 3 09:29:59 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6634ae96-d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:99:85:0e:60:cd:66:8f:c9:a2:26:a0:00:
d1:78:65:54:a0:36:2e:7c:d3:8e:cf:4f:a4:06:5a:
58:e9:9a:d1:57:19:a7:7a:e8:90:a0:42:9e:e6:43:
22:cc:f9:7a:d8:0a:65:2a:25:d6:8f:72:e1:52:21:
1b:c9:f0:51:9f:32:58:24:46:a1:39:b8:09:16:ec:
35:c4:54:1b:06:ab:d0:f7:50:c3:80:53:c8:7d:f4:
4b:e3:9e:3d:35:63:66:9a:ca:29:2f:89:80:19:aa:
ce:27:85:7e:b8:b3:42:b3:23:44:b6:61:76:f6:be:
53:5a:07:b8:dc:16:e1:f4:dc:88:55:d5:87:70:6a:
dc:f9:cb:e0:3d:ab:44:79:19:68:c8:c4:2c:6d:e9:
4a:12:28:e0:60:b5:d7:e1:ac:b1:2d:b7:da:23:49:
e3:a8:14:5c:81:35:d0:c1:88:1b:fa:47:eb:69:ba:
d6:b6:ae:e2:60:81:a7:61:42:2b:30:fb:5a:e3:81:
0f:17:27:e9:ad:ec:90:ed:ac:68:10:83:55:bd:b6:
db:0a:07:7e:4b:7c:12:4d:ba:97:8b:68:08:f9:e5:
34:d7:c8:4e:aa:ac:53:99:4c:15:0b:53:d3:12:e9:
43:29:a0:c5:ec:1b:6b:d7:a2:cc:00:d7:b6:7d:0f:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:EF:E5:A2:6F:5F:A4:57:D4:31:BA:36:79:C0:08:E2:DA:0B:C5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42E52E28086A11EFA2F47A84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.216.0/23
113.203.231.0/24
113.203.250.0/24
115.167.49.0/24
115.167.78.0/24
175.110.68.0/22
175.110.80.0/22
175.110.88.0/22
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.152.0/21
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.235.0-223.29.236.255
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
77:04:e6:17:12:0e:73:46:c3:4e:dd:d3:82:39:e6:11:5a:81:
d1:e8:15:28:22:08:96:e9:e9:93:4e:a6:c5:ba:fc:8b:e7:9c:
2d:85:b0:c6:e6:a3:23:d6:98:7c:12:f9:68:48:e1:79:de:3a:
23:8d:e7:35:2f:5e:7c:42:87:58:96:52:87:b2:1a:c0:ec:15:
46:67:b9:31:d7:60:eb:4e:7b:3f:64:e1:29:3e:99:7a:f5:f9:
6b:fb:b0:ff:ad:3b:7e:89:76:98:8e:e8:e5:24:c4:6e:5d:55:
d3:b4:2c:c5:41:59:39:47:99:c8:e5:c4:d5:bb:ac:1b:17:14:
34:27:be:47:3a:82:23:ba:eb:dd:88:cc:55:c3:73:d8:a5:1c:
71:df:c6:1e:c4:b7:5e:0b:d7:57:4d:b3:d6:95:32:4d:3f:08:
76:48:fc:96:77:21:58:07:fc:d0:4d:ee:c1:48:c2:a0:0b:ae:
f7:be:4b:dc:02:1c:07:e6:ed:6f:04:1a:ec:f5:b4:c4:c8:9e:
b9:7c:8f:00:73:1c:bd:f4:50:b6:f1:50:b6:26:3e:cd:75:24:
e1:8c:6e:9f:d4:02:33:d0:68:d7:20:24:2c:b8:ff:e8:76:68:
c8:2b:ae:a9:6c:a6:8d:1a:0e:68:fb:b8:9d:c0:ea:2f:60:dc:
86:00:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:41 2025 by rpki-client