Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54B898D0173611EF864C9050C4F9AE02.roa
File: 54B898D0173611EF864C9050C4F9AE02.roa (raw, json)
Hash identifier: 4k2FQ1weSEoDSqspidgeGn+F0lqZuE6XEwxCwMUcHTY=
Subject key identifier: 55:7C:92:95:56:65:0D:D8:1A:A7:34:E5:B0:9F:35:B9:DA:66:AD:E3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 123D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54B898D0173611EF864C9050C4F9AE02.roa
Signing time: Wed 22 May 2024 06:22:12 +0000
ROA not before: Wed 22 May 2024 06:22:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4669 (0x123d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 22 06:22:12 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=664d8f13-a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:66:10:4f:f7:75:54:7e:98:a0:60:95:b1:
05:1f:cf:59:19:f9:39:b0:0d:9a:ae:e1:09:84:c1:
1c:5b:e9:1a:1b:1d:ec:79:b5:69:d8:2a:63:37:fb:
2b:72:93:f3:53:72:ba:f5:f1:93:57:cc:12:1c:d9:
11:57:41:ed:3c:48:b5:ab:b4:c1:fd:e5:b7:fc:39:
7d:34:7f:cd:6a:65:5c:9e:5e:fa:e6:59:9b:43:28:
b7:8b:47:e3:5b:e3:da:79:fc:a5:fb:99:d6:48:0d:
f3:46:fa:12:49:7f:c2:4f:dc:8d:16:60:21:78:09:
f9:b0:59:10:bf:46:24:65:76:f1:61:5f:9f:6e:6e:
6f:72:84:c3:12:10:d2:6c:31:db:f1:e4:ce:ac:7a:
3e:c2:ff:f9:f2:d3:88:cd:24:bc:6c:b5:f3:13:2e:
0f:ac:b6:46:cb:92:51:9e:5e:42:6d:ff:57:cc:77:
e5:9b:c4:dc:36:e9:f9:cf:ed:2b:78:cd:76:f6:b7:
af:98:7d:b0:6b:7c:1c:10:2c:5a:b0:35:9e:22:7f:
b2:d0:29:9b:e2:45:d5:a4:d9:5c:96:4c:d7:e7:13:
42:ba:a6:e5:0f:79:92:c9:28:3b:6f:6e:9c:70:a4:
66:0c:00:2f:48:c6:a0:e0:f7:f6:4c:65:6c:26:17:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:92:95:56:65:0D:D8:1A:A7:34:E5:B0:9F:35:B9:DA:66:AD:E3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/54B898D0173611EF864C9050C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0/21
115.167.2.0/24
115.167.49.0/24
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.170.255
180.178.179.0-180.178.187.255
180.178.189.0/24
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
a3:ab:32:a4:9e:c5:32:62:2a:43:de:b8:1f:d0:c6:76:34:5d:
f7:bf:86:db:97:b5:90:7d:3d:0c:66:95:87:3c:a1:0c:64:b7:
c7:43:07:9f:77:ae:e2:a7:6b:30:f1:03:1f:3e:00:de:b4:01:
5d:6d:2b:92:d2:21:64:59:0d:52:da:50:9c:4a:62:6e:2a:38:
f2:4e:4d:5f:05:98:24:4c:ed:95:d3:20:3c:da:5d:eb:79:bc:
b8:1d:4a:d7:7e:1a:b4:11:ee:c7:15:51:ab:bf:c3:6e:15:55:
bc:0e:67:eb:8f:6d:87:3a:fe:55:e7:db:a7:b5:7e:3d:8c:14:
f1:6a:ec:c0:5e:4f:22:5a:c1:09:8c:13:7a:05:b0:dc:00:31:
d2:56:2f:30:5b:f4:da:3e:e2:74:86:e4:b0:eb:7f:d2:d4:3c:
8d:2e:8b:cc:6a:86:6d:ca:34:a6:5c:a7:38:ec:76:00:42:0a:
e7:4b:35:14:29:7a:35:8a:0d:24:58:17:16:26:20:cf:ca:c8:
d6:f9:3b:41:55:7a:c0:41:6a:0d:1a:39:7f:20:99:21:83:37:
6f:3f:2b:00:6f:b2:63:f7:62:30:4f:4e:8e:4b:b8:6c:55:56:
1e:98:ae:c0:04:aa:ed:ae:48:af:0c:29:2f:36:eb:ce:d6:a0:
78:b8:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:12 2025 by rpki-client