Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
File: 4737945A5C5511EEA565E21CC4F9AE02.roa (raw, json)
Hash identifier: BD14Tp2DHZOhzNoeSI+7Eo08zxOOpBSz6LUNU6VLENw=
Subject key identifier: 1A:BB:17:F4:2B:E4:E9:A4:C8:CC:17:45:92:12:A6:01:2C:4C:C7:3F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D4C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
Signing time: Tue 26 Sep 2023 10:13:03 +0000
ROA not before: Tue 26 Sep 2023 10:13:03 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 180.178.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 26 10:13:03 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6512aeaf-5312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:77:12:3f:3d:50:a8:9f:1c:a1:b0:6d:6c:
7b:f2:ce:b1:88:68:0c:a4:5e:08:f9:02:b3:8b:c0:
98:05:13:72:d9:bd:8d:dc:a8:1e:6a:e3:89:11:df:
a8:7d:c3:f4:70:24:c0:83:cc:d3:7b:a2:32:6c:27:
83:54:5d:d2:ca:c6:d0:21:8a:8d:e8:66:eb:93:a4:
d9:ae:57:ea:37:03:f9:dc:04:e7:18:34:53:a8:56:
fe:4d:3b:2e:43:93:ce:90:58:f0:6a:e4:9f:dd:8a:
44:af:25:6f:44:63:e0:37:b9:3c:f7:92:ef:9f:9c:
92:a8:ba:a0:45:12:75:2e:54:0c:47:f6:ce:54:53:
1a:78:5b:ed:da:89:34:7b:a4:df:60:b1:af:74:12:
fc:c6:7c:17:e7:3d:32:00:40:c0:a9:9e:32:f3:0f:
0f:c2:85:9c:af:50:61:e9:6b:dc:65:3b:82:d7:a5:
a7:d3:6d:21:ac:90:77:b4:5d:d9:69:a7:29:df:01:
1a:fe:e2:05:48:46:bf:18:1c:58:7c:38:e9:9f:2e:
d6:03:ba:c4:e4:a7:68:55:2a:8d:e2:fe:70:d2:5f:
ba:3c:bd:c0:6f:11:67:87:c3:c9:d2:c6:9d:07:87:
27:ef:9e:f9:c3:da:ca:28:27:c2:57:e7:9d:37:8b:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:17:F4:2B:E4:E9:A4:C8:CC:17:45:92:12:A6:01:2C:4C:C7:3F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:37:1a:50:91:0e:58:f1:b6:18:d3:29:f8:f4:cb:3e:f1:1d:
c1:4e:69:7f:77:f2:9f:e7:04:09:10:70:16:13:e4:74:51:1f:
a4:2f:71:0c:dc:29:ff:c9:25:47:8b:98:4e:7c:80:b0:8a:30:
b3:db:f1:57:c0:db:5c:95:81:dc:c6:85:8d:76:a2:11:ae:ee:
cc:af:63:86:65:d7:fa:28:97:5c:3e:f3:7e:db:3f:c3:59:59:
39:4f:81:70:72:cd:fa:fc:98:08:1d:de:2a:40:f6:93:07:e0:
cd:b0:55:e9:64:d0:52:e7:fb:da:70:bc:48:20:5b:76:bb:7c:
17:c3:40:3a:82:0f:6e:02:7c:e0:9d:81:fc:a5:13:41:41:f1:
1d:b7:76:3f:32:c8:58:a0:90:ce:d5:e0:42:86:6e:99:af:d5:
57:e5:7d:75:7a:04:c3:f6:af:72:5f:3c:46:6d:e2:5d:00:99:
0e:63:83:84:3b:d6:3c:af:1e:3e:ee:9e:f1:d3:87:48:55:48:
d1:89:bd:aa:ef:fb:ad:9d:69:83:b4:79:db:01:e7:c8:1b:5d:
05:61:6c:50:93:7c:26:6f:46:4b:f7:e0:f8:9d:8f:69:b1:07:
7e:b6:84:9f:9b:d9:0f:f9:1e:55:06:b5:a8:40:10:12:a8:e8:
ea:03:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:10 2025 by rpki-client