Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CCA860EB59711EC9D6E426DC4F9AE02.roa
File: 4CCA860EB59711EC9D6E426DC4F9AE02.roa (raw, json)
Hash identifier: Ssys/R5e18vhwLrDdMFcROqRfSzWW1vNWKGQb340JMs=
Subject key identifier: 65:D6:F6:6B:82:A4:DD:F5:38:C8:86:45:1C:3C:F1:0F:CD:42:E3:DD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 06D6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CCA860EB59711EC9D6E426DC4F9AE02.roa
Signing time: Wed 06 Apr 2022 10:49:58 +0000
ROA not before: Wed 06 Apr 2022 10:49:58 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 205220
IP address blocks: 115.167.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 6 10:49:58 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=624d7055-a764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:d8:6e:91:d7:87:1e:8d:1f:80:c9:01:7c:
e3:55:b9:d1:88:16:8f:61:5a:00:a6:d7:0e:bc:03:
45:c1:ed:d4:89:db:0a:3b:ed:16:72:74:f6:d2:23:
a1:cb:0d:b4:27:0f:f7:cd:65:66:0d:34:08:c2:c9:
28:34:9a:4a:42:2e:5a:f0:cb:ab:ed:1c:89:15:90:
0e:c1:7c:e3:59:e3:3b:51:45:f0:22:ea:69:4e:4b:
4e:94:ca:7c:29:a3:7a:51:ac:b8:8a:52:27:e8:3b:
45:cb:ef:87:61:5b:e1:da:ab:0b:5c:b6:f8:94:43:
20:96:a2:81:38:b6:c2:8f:07:e3:37:a1:18:b3:17:
7d:48:f8:77:95:30:27:5b:c5:16:0e:68:d9:bd:ab:
57:94:4c:a8:76:e2:a6:22:c9:e1:f0:9e:13:3c:52:
49:a4:4c:f2:97:4f:16:54:9b:09:6c:c7:71:1d:4a:
2b:8f:68:46:54:ac:06:88:c8:c9:0d:ca:81:62:34:
52:1b:1c:eb:cc:bc:35:f7:ba:14:41:4d:54:bd:69:
30:f5:04:ca:16:c7:4e:0c:dd:a9:01:7e:1a:f7:34:
49:48:5c:a7:34:7c:b8:61:87:0a:6d:40:76:8a:97:
90:74:bd:0a:2e:6e:b9:77:9a:ca:7f:2f:5e:f8:23:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:F6:6B:82:A4:DD:F5:38:C8:86:45:1C:3C:F1:0F:CD:42:E3:DD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CCA860EB59711EC9D6E426DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.20.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d9:07:fb:51:18:66:b2:ae:c5:9f:ef:76:1c:72:1d:fb:2b:
77:33:81:82:f2:00:5b:4c:3b:a0:90:c1:7b:b1:a0:2c:61:b6:
cb:6a:f1:96:af:1a:8e:6a:68:20:38:98:ff:f9:ad:af:fa:96:
8a:62:cd:4e:67:35:51:51:ac:5c:67:0a:a9:82:f2:d5:2a:95:
46:3e:81:2c:01:79:a2:0e:d7:e1:54:ce:7f:8e:bf:43:2c:22:
0c:63:c0:d0:ef:8f:c2:66:e0:fc:8d:94:4f:cf:ad:b7:f5:46:
2a:3b:e1:d4:67:b2:80:3f:44:2f:73:13:6f:86:ac:04:6c:2f:
2b:a8:04:f5:99:5b:06:6b:57:1e:06:e4:18:e3:02:0a:d8:81:
58:b9:f0:35:7b:c0:de:69:73:46:2b:3a:d9:e8:e6:d8:01:65:
09:9d:5a:a6:33:86:d1:0a:2e:b1:05:87:f9:1c:ca:b1:18:82:
cb:9c:c6:fa:4a:5f:74:b7:73:40:24:b3:9a:46:c4:b2:7c:2d:
64:7b:27:16:37:f2:9f:05:53:5e:0b:b9:60:2f:94:a3:54:f1:
44:2d:09:27:a5:7d:66:bb:c3:34:e8:3b:34:58:71:f4:bb:68:
10:af:e1:5d:d3:18:a9:46:cd:a1:81:6c:c9:79:60:9d:8e:2f:
22:7b:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:48 2025 by rpki-client