Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CEE3BE0067C11ED882FC127C4F9AE02.roa
File: 4CEE3BE0067C11ED882FC127C4F9AE02.roa (raw, json)
Hash identifier: oBiNepfM6ZGr/zYzyK+MhRiTj2k3vlnc1JjEHJZIy10=
Subject key identifier: 84:2D:3A:F0:DC:A7:3C:27:69:3A:C2:8A:0F:85:55:6F:49:2A:FB:B8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0835
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CEE3BE0067C11ED882FC127C4F9AE02.roa
Signing time: Mon 18 Jul 2022 14:28:44 +0000
ROA not before: Mon 18 Jul 2022 14:28:44 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.100.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 18 14:28:44 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62d56e1b-be61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:63:13:e6:ef:ec:9f:a9:57:45:58:8b:7f:
a6:78:e4:ed:bc:18:75:eb:48:7d:38:e8:d9:d7:a5:
83:f6:7c:f5:b9:27:da:ab:37:ac:9f:8b:76:e0:e9:
44:3c:1a:e3:cf:0b:88:34:eb:b7:b2:b7:ff:7f:39:
69:31:ec:7b:8c:91:d2:52:ff:03:1c:ee:14:54:11:
e1:01:27:ba:d7:60:a0:5d:a3:36:c8:ca:46:52:0c:
db:f3:9c:42:e9:10:d3:d9:dc:3d:19:58:ee:0d:ac:
db:d5:a9:26:31:64:65:c7:ec:e4:cf:09:3d:03:6c:
d3:97:8c:dc:36:5b:1c:31:1b:87:cf:3b:87:ac:67:
4d:8a:a5:e1:c4:13:71:7e:4c:74:02:e4:b1:73:db:
8a:e3:7a:1e:b0:02:33:05:2b:c6:06:24:c5:61:a2:
ee:eb:d2:52:a2:b9:80:c4:c9:c4:4a:5b:0b:58:b1:
ff:9f:ae:ab:ac:cb:0e:4c:9d:f6:88:52:5f:da:2b:
7d:49:4d:6a:e4:64:ed:69:6a:56:f8:0d:22:d8:d1:
d4:c9:54:30:0c:1d:44:fa:42:69:43:2e:e0:0c:05:
a9:d4:91:e2:10:05:51:37:f7:17:d6:af:90:ad:73:
62:23:42:f1:5f:6e:e2:8c:17:3f:8c:eb:97:a2:30:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:3A:F0:DC:A7:3C:27:69:3A:C2:8A:0F:85:55:6F:49:2A:FB:B8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CEE3BE0067C11ED882FC127C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.6.255
115.167.48.0/23
115.167.72.0/22
115.167.100.0/22
175.110.64.0/22
175.110.72.0/22
175.110.80.0-175.110.91.255
175.110.96.0/23
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
7c:b4:1f:a9:35:7a:46:da:cd:71:cf:f0:85:73:4c:e4:3e:8e:
f3:ac:a3:c4:bd:ef:62:0a:ed:66:95:89:7f:8d:85:29:29:20:
01:b2:18:3f:18:ab:43:43:73:76:3c:17:22:b6:8c:90:c1:3b:
b9:34:60:db:b2:ff:bf:60:3a:c0:f8:a3:96:83:09:8f:ab:61:
cf:36:53:d2:7a:e9:22:69:de:14:78:2e:b9:60:6f:d0:78:a8:
46:97:a9:e7:4a:e3:42:08:e6:be:c4:ec:a0:11:73:dd:b4:9b:
23:dc:a6:e8:45:e7:17:42:ed:4b:8a:57:fc:fe:5d:9e:84:ef:
6d:3f:f7:ce:92:48:95:97:22:da:a5:fa:52:d1:3a:fe:73:be:
69:25:a2:75:a0:e8:cb:45:a7:f8:8e:82:82:3d:29:04:5e:86:
a9:6e:86:5f:b5:e3:2e:bd:65:8b:15:eb:b1:89:a6:a3:e0:56:
d6:9e:69:f4:98:fc:ef:07:b6:e1:b2:42:18:34:88:37:15:48:
75:51:9e:6b:8c:c8:3e:15:e0:6d:d6:04:f2:e8:df:67:af:fb:
08:56:6a:01:14:6c:68:ee:60:4e:1c:8a:d4:e3:79:64:64:09:
4c:6f:74:0a:57:14:7e:52:ff:ca:fe:7d:6c:ee:1a:9a:81:c1:
4c:e9:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:22 2025 by rpki-client