Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
File: 4D3FB64A4A0211ED9F5C287DC4F9AE02.roa (raw, json)
Hash identifier: 938rYRnx/NotGbsxLA87rGYalST/vDxMg2DQxrZVHmg=
Subject key identifier: A4:0E:65:9E:83:6D:B3:22:60:4F:4D:13:A1:B3:0A:C3:52:07:26:B8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 097B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
Signing time: Wed 12 Oct 2022 07:48:47 +0000
ROA not before: Wed 12 Oct 2022 07:48:47 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 115.167.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 12 07:48:47 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6346715e-4898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:6d:2e:37:92:18:b1:6c:03:2b:b3:0d:54:
a3:dc:6a:bb:65:c8:cb:c9:a8:12:a1:e5:01:10:4b:
e1:ad:56:98:33:77:9a:9d:34:4f:81:62:53:dd:96:
8d:c2:62:71:e2:e6:e6:c5:e5:8e:86:75:81:8c:e4:
38:58:9d:9c:b8:59:73:c3:b6:cc:bb:16:99:36:1b:
03:b5:c1:ff:97:dc:03:f8:d7:5b:9c:ed:27:b1:a2:
2f:a7:bd:62:35:d4:06:a3:28:7b:23:0c:e8:9d:6c:
0a:20:1d:a6:89:1f:ea:b3:bd:67:ad:d4:7f:2d:62:
b0:16:c6:b4:88:24:da:3c:b4:ff:9e:4d:b3:f4:f4:
ab:e4:a3:cc:23:b1:1a:0d:ed:d2:3a:e6:e8:3c:90:
b4:82:66:5a:89:b5:53:fb:29:ae:d6:69:96:2f:e2:
23:37:df:b5:6c:31:9b:e6:b5:5a:b3:6d:f8:b0:b6:
71:75:36:bb:5c:07:36:ee:0f:e9:ba:df:5f:75:41:
3d:5e:f7:b3:d5:f3:2c:1f:25:34:f7:5f:c8:77:4d:
0c:c3:5e:7f:bd:cc:4b:15:36:25:a6:5e:c7:33:7d:
d7:d4:29:52:03:c4:88:24:16:d0:24:df:04:7b:15:
54:a7:59:07:73:e8:52:d7:43:c4:bf:8e:1a:11:71:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:65:9E:83:6D:B3:22:60:4F:4D:13:A1:B3:0A:C3:52:07:26:B8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.108.0/22
Signature Algorithm: sha256WithRSAEncryption
05:bb:07:17:c1:3e:6b:5d:07:0a:54:76:b8:64:5f:ad:42:3e:
27:6e:9f:49:5c:e4:ee:fc:b0:41:0b:6d:1e:b3:f1:66:41:97:
2b:08:d5:5e:bc:d9:49:ac:da:bf:03:a1:4f:a0:ac:eb:4f:aa:
e8:e2:0e:1f:0a:12:ea:dc:eb:a1:e8:91:bd:c2:87:55:68:50:
1d:60:11:0d:a8:e2:8a:e0:29:0b:b2:18:5c:1d:ea:57:da:c8:
2e:18:eb:46:bd:db:4a:ac:fd:f1:7d:16:65:d7:49:b6:3b:8a:
f6:d9:b8:9a:44:6d:e1:1d:a3:32:e3:83:e2:61:0e:30:25:06:
6e:5e:16:a0:17:f6:b6:e3:94:17:86:73:20:f8:11:85:a1:84:
57:09:83:46:ff:1d:73:e7:21:fa:1e:3d:f1:ef:6f:73:8c:f2:
6a:07:d4:4d:91:66:e7:12:b3:f8:98:65:93:34:08:0f:e3:f3:
c8:c0:fe:2b:82:07:49:4c:42:90:99:2c:87:e2:1c:77:37:ec:
86:01:a6:e7:9b:fd:c4:a2:b5:27:9e:52:ca:25:7a:55:09:27:
00:3d:2d:ad:43:74:8e:4a:d0:4e:ba:96:29:c3:26:b7:39:ff:
28:37:e4:e7:4e:df:ff:de:b2:d4:e8:5a:00:2b:04:9d:e8:52:
4c:85:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:00 2025 by rpki-client