Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/59AD55468ED911EEB703DC80C4F9AE02.roa
File: 59AD55468ED911EEB703DC80C4F9AE02.roa (raw, json)
Hash identifier: MUlRUmlATqD1eWcEGSXzZCeT2xDLkJ7Vk3JaHtbG2qw=
Subject key identifier: 5F:D9:D6:3E:65:73:4D:E7:A5:23:2D:55:66:2E:F9:2A:B1:A7:60:49
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E28
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/59AD55468ED911EEB703DC80C4F9AE02.roa
Signing time: Wed 29 Nov 2023 17:04:26 +0000
ROA not before: Wed 29 Nov 2023 17:04:26 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 29 17:04:26 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65676f1a-84e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:90:6f:f4:75:ed:4b:1f:ad:3c:3d:26:47:
e8:24:a2:2a:01:8c:dc:9b:c2:c2:9e:6f:e5:37:54:
f8:ac:b1:09:8b:f5:f7:b9:74:bd:47:dd:33:85:c2:
43:7d:f0:3e:16:a5:03:80:20:b0:57:91:b1:15:49:
97:40:be:85:e6:cd:58:36:9c:22:54:c9:2f:3a:38:
63:5f:e7:ac:95:ea:bc:6c:97:7e:71:95:c7:b4:32:
a2:01:d4:ee:8c:ac:9a:56:00:24:da:40:83:04:14:
fc:97:cc:94:12:a0:42:5e:3e:f5:48:09:2b:55:03:
b6:fa:34:13:8a:20:20:71:61:e9:ad:ff:9e:2c:7f:
4f:c0:c0:22:4c:80:4f:3c:6a:56:8c:fe:6e:ef:b3:
29:c7:20:2f:75:14:8e:a8:39:d1:33:9a:33:4e:2d:
90:d3:8d:d6:dd:79:99:e4:f2:64:87:88:5c:ff:ac:
e5:4a:85:52:d7:4a:7b:08:fb:e0:a9:5a:3c:c8:47:
5b:a1:0e:f3:1b:a0:67:b1:5d:70:db:bb:25:d4:23:
71:06:4c:ce:7c:62:84:e3:e5:cf:69:c3:df:57:c8:
01:45:c7:ea:c8:04:d5:6c:71:76:c2:5a:10:5a:6e:
be:2e:0b:9b:8c:74:b1:70:09:93:51:5e:33:09:a3:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:D6:3E:65:73:4D:E7:A5:23:2D:55:66:2E:F9:2A:B1:A7:60:49
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/59AD55468ED911EEB703DC80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.216.0/24
113.203.231.0/24
113.203.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d5:8b:3c:b3:d2:2e:3a:ee:eb:d6:ef:7b:ed:a5:67:4a:61:
56:f8:e6:e2:61:6a:2a:2c:13:50:ea:50:44:14:7b:c9:c9:4e:
cc:7e:b9:a6:98:72:b2:81:82:5b:80:b7:ac:9f:ba:6f:d5:6b:
ed:e2:9d:5e:52:f5:70:90:20:83:e4:bf:a6:29:a5:ae:b1:2b:
bc:5c:2f:22:96:b8:6d:b1:82:7e:78:d1:a0:72:2a:2b:54:f8:
b9:9a:3d:dc:28:54:e9:40:71:e3:05:90:89:5a:11:52:66:ad:
fa:d2:ec:9e:64:7a:4c:e9:92:93:c7:30:e9:3e:1a:f5:8e:f4:
1b:4a:85:24:21:c0:ec:e2:6d:2e:9b:3c:5f:7b:72:21:f0:54:
68:61:c0:99:0e:0c:40:00:1a:09:ee:c1:7f:6f:37:9b:ae:3c:
57:53:8c:a5:60:b5:92:7b:6c:13:bf:82:5e:bc:ce:a6:33:cb:
26:8f:7c:ac:16:f3:61:58:f0:54:70:c4:bf:b9:7a:63:59:5a:
8d:11:67:14:8c:a0:92:21:8f:b4:7b:6b:0c:29:ad:3a:a5:84:
09:c0:88:01:48:58:c8:4c:19:3c:01:12:ac:85:71:38:f8:ea:
a9:52:3b:7d:7d:ea:0b:f1:98:d8:c4:a9:d2:f6:d6:64:26:75:
e9:d5:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:53 2025 by rpki-client