Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
File: 44F814D0CF8E11ECBC56CF13C4F9AE02.roa (raw, json)
Hash identifier: m3GqZ9XkYzjPrE8J0zSgDJHMiP394csRn8MftUTPC2g=
Subject key identifier: 77:9E:85:13:35:60:BE:11:61:F4:93:3E:4D:25:39:00:3C:F3:32:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 073F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
Signing time: Mon 09 May 2022 11:50:49 +0000
ROA not before: Mon 09 May 2022 11:50:49 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.51.0/24 maxlen: 24
115.167.56.0/21 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.79.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.22.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 9 11:50:49 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62790019-72dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:c9:ca:fc:b3:ed:b6:5f:eb:56:47:b1:6c:
ce:a4:ba:f8:08:05:2b:55:4c:53:f8:ef:b1:e0:eb:
17:d4:a7:37:f3:ed:ab:69:e6:95:13:7a:8f:40:00:
03:27:f9:1c:37:d2:30:55:90:84:e0:94:d1:ee:61:
d4:eb:fe:7b:91:7f:c7:58:40:f9:f3:7c:47:7c:64:
73:3e:78:f7:d6:c5:c2:be:96:d5:c9:65:e4:ef:08:
b0:3c:8b:2b:ea:6a:89:90:91:18:3f:1a:35:24:77:
59:5f:5e:fe:65:59:27:54:ad:ae:93:b8:42:6e:79:
76:0c:41:50:7a:03:72:c2:3a:f1:5e:48:68:27:2e:
4b:af:22:25:70:c0:fb:c2:2c:40:66:f6:29:c3:ed:
f0:8c:59:90:91:2c:65:4d:bf:e5:18:71:27:5e:a5:
e0:be:8a:b5:78:89:c5:94:19:6c:ae:cd:c1:9f:f8:
a4:31:44:5a:5f:56:71:37:4b:06:ce:c1:a9:31:29:
de:56:c9:66:68:19:39:fa:85:10:fd:fe:df:d3:5e:
0f:6f:a5:27:84:d3:3b:54:fb:ab:46:c4:df:b2:7f:
ee:ac:e1:98:1a:90:07:e1:de:f0:25:8b:44:b5:cd:
6b:4e:87:17:94:6d:ed:68:fb:60:7f:ff:cf:d1:d5:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9E:85:13:35:60:BE:11:61:F4:93:3E:4D:25:39:00:3C:F3:32:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/22
115.167.5.0-115.167.6.255
115.167.20.0/22
115.167.49.0/24
115.167.51.0/24
115.167.56.0/21
115.167.72.0/22
115.167.79.0/24
175.110.68.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.97.0/24
175.110.99.0/24
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:97:6b:45:f5:c4:09:f2:c7:62:96:f5:a7:31:69:8a:42:eb:
a3:7a:59:1c:f7:cc:a5:fe:e0:1a:9e:42:b8:cf:aa:72:80:4f:
be:e4:2b:6b:d8:d7:73:41:7d:46:09:bc:a9:cf:61:48:46:36:
ff:aa:de:42:a6:37:8d:4d:d0:63:cf:c9:40:42:cb:16:81:6d:
b9:63:a8:47:b4:ea:34:bd:a0:45:d3:99:70:a3:13:1a:aa:ab:
a8:3b:23:fe:cf:d0:93:0e:5b:f1:7c:ee:a4:c2:32:9e:8b:77:
1e:8e:de:0f:6a:d9:23:23:ae:af:5d:7d:3c:30:96:76:98:3a:
29:b6:3d:2e:fe:b4:01:ad:f0:05:72:33:aa:b9:88:29:c7:1c:
5b:e6:13:42:ee:7a:6d:44:07:bc:6c:41:ad:e8:b8:42:f6:24:
c4:ae:a8:9e:6a:f6:cc:a5:46:72:f3:3f:45:3f:03:32:77:2b:
86:77:eb:ea:e3:6b:36:77:6e:b9:62:ca:ee:d3:88:6a:8c:2f:
4c:94:5f:a4:a7:de:c0:1d:a2:cb:87:39:06:3f:46:b3:40:84:
f8:85:1f:b6:5b:07:57:5c:be:39:5b:1e:4c:ea:17:9c:54:db:
da:bb:ed:79:07:e4:dd:14:f0:b9:8c:4c:7b:3d:7a:97:55:3f:
eb:7c:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:28 2025 by rpki-client