Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54139A22A01911EEA4613384C4F9AE02.roa
File: 54139A22A01911EEA4613384C4F9AE02.roa (raw, json)
Hash identifier: si+JInQiJDegnaEVOiZmesl6XDxsP1JHWw1T0WFXP4k=
Subject key identifier: 5A:CB:6A:28:63:52:7D:F8:68:10:D2:B9:CB:B1:4E:44:3A:46:F9:99
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EBA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54139A22A01911EEA4613384C4F9AE02.roa
Signing time: Thu 21 Dec 2023 15:55:14 +0000
ROA not before: Thu 21 Dec 2023 15:55:14 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 18450
IP address blocks: 180.178.167.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3770 (0xeba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 21 15:55:14 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65845fe2-d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:29:fb:dc:0e:d4:ac:90:67:19:a3:98:f8:
43:71:46:da:c6:17:9a:c7:3d:bb:0c:2c:d0:67:31:
76:04:35:d2:0d:da:39:da:36:13:e0:b2:be:e1:49:
3b:b3:57:23:97:90:18:68:20:74:1a:e6:79:8c:96:
49:fe:33:55:19:fe:20:11:2e:fc:6e:2a:ca:35:c2:
e8:fb:95:66:3d:99:15:41:0f:6b:3c:77:00:78:6a:
1f:9e:9c:2e:80:15:75:76:3f:66:d7:85:12:03:6b:
ef:42:f7:47:8c:9b:59:4c:41:15:bb:b8:a6:6a:5f:
a9:3e:fb:92:23:c6:ce:38:3a:f3:aa:b0:86:a1:64:
ca:00:e6:d0:cb:71:20:68:9e:7b:d7:b3:75:f2:27:
b8:4c:f4:b0:ea:ab:5a:7b:b2:11:8b:35:4b:7c:06:
4d:78:de:ee:ee:0f:00:b7:9c:d7:fd:27:11:52:42:
45:17:d1:46:06:84:41:e9:9c:7d:c4:f9:8d:ce:e1:
44:65:7b:d5:b7:1f:c1:45:ec:b4:6a:ec:2b:38:d1:
44:02:90:25:7d:6b:8a:ac:2d:fd:df:cc:e1:80:fc:
20:11:34:57:f1:12:3e:07:23:37:e2:45:aa:74:13:
77:8c:36:58:cc:5d:b3:54:ed:41:f6:3e:93:a9:6c:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:6A:28:63:52:7D:F8:68:10:D2:B9:CB:B1:4E:44:3A:46:F9:99
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54139A22A01911EEA4613384C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.167.0/24
223.29.235.0/24
Signature Algorithm: sha256WithRSAEncryption
78:32:0e:b7:cd:44:b6:e8:3f:d4:ef:1d:db:e2:77:dc:0e:15:
20:0e:69:63:7d:80:49:6b:4a:83:da:4d:d4:20:e9:9f:86:9e:
37:e1:04:3d:55:0a:87:21:fb:27:63:83:d5:1a:91:eb:89:93:
a2:22:a5:a9:ae:b0:26:34:6b:af:02:56:4b:fb:ed:9d:ad:1b:
a8:ae:7b:f0:02:c8:66:d1:d2:4b:48:a1:ed:cf:ad:60:c4:7c:
1f:cd:5e:62:38:58:45:5a:6a:56:3c:1f:ce:41:7c:7f:b5:61:
20:b4:67:a4:63:e6:8e:cb:07:41:c8:ac:60:c5:94:59:d6:18:
90:2f:ca:32:1b:c1:e0:41:88:4b:4a:37:27:9c:9a:b4:88:1a:
30:03:b0:57:96:6e:4e:6b:d9:c6:45:2d:4d:25:39:ea:e3:51:
b0:7c:cc:45:80:fe:ae:24:7e:d4:c1:ad:37:d8:61:90:f2:e2:
36:07:7d:e0:a2:eb:7c:07:3d:65:54:2d:22:4f:51:41:4d:fd:
94:fb:2f:65:ed:5c:bb:74:77:6b:c7:91:6a:60:04:51:84:69:
7c:3c:ec:6d:ef:0c:dc:67:6f:f6:37:d7:08:1f:7a:64:0e:18:
77:7c:81:bb:8e:dd:50:c2:b9:9f:59:99:0a:0d:06:28:d9:a8:
3c:fb:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:47 2025 by rpki-client