Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/60CC0F2A7E9111ECAD5E4654C4F9AE02.roa
File: 60CC0F2A7E9111ECAD5E4654C4F9AE02.roa (raw, json)
Hash identifier: hpWfgjRAJkJZoMCx/SSjLyff/v1XH30qZTuE4OtfwZI=
Subject key identifier: C6:C3:E7:6C:C2:A8:63:5C:E8:9D:A0:BA:A0:55:00:26:FF:6B:9C:AE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0610
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/60CC0F2A7E9111ECAD5E4654C4F9AE02.roa
Signing time: Wed 26 Jan 2022 10:19:00 +0000
ROA not before: Wed 26 Jan 2022 10:19:00 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.52.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.68.0/22 maxlen: 22
175.110.76.0/22 maxlen: 22
175.110.92.0/22 maxlen: 22
175.110.96.0/24 maxlen: 24
175.110.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 26 10:19:00 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61f12014-38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:50:c1:8c:20:4d:27:6a:c8:c2:91:55:a2:
5e:8c:61:98:0b:41:aa:72:d4:39:f4:ea:71:78:13:
09:21:6a:22:48:75:28:58:04:c6:6a:c8:5d:ac:25:
31:0c:5d:92:f3:72:50:f2:30:6a:63:f8:30:c2:4a:
4e:a7:68:2c:d3:1b:c1:02:cb:e8:88:eb:d3:41:e2:
7a:1e:9d:ed:d5:82:e2:a0:3b:62:d0:b7:3a:f6:8b:
2c:ad:3a:bd:10:af:d8:d9:0a:3f:a0:ba:98:67:ff:
57:9c:ae:09:aa:ee:dd:72:9c:08:28:ec:93:ab:4b:
9a:a2:33:10:11:6b:e1:3a:f0:62:70:31:04:97:1c:
8d:8b:94:08:d3:cb:01:c2:43:1a:5a:21:4c:6d:fb:
2b:54:eb:33:60:44:69:e5:66:8d:ba:01:a4:49:40:
cc:cc:81:17:70:a8:d4:82:95:cd:26:3e:e1:50:e9:
b1:b1:e6:a3:ba:a7:dd:dc:d8:7a:f1:05:95:df:d4:
0d:fd:f3:9e:24:16:0a:6e:32:8d:24:48:8d:c0:2b:
b3:f4:c0:a8:ae:a7:5d:bb:8c:e1:a1:ac:43:f0:36:
ae:4b:61:22:f9:c0:06:02:8d:b3:1d:fd:5d:15:51:
1a:e4:85:97:d3:7c:2b:13:c0:38:7f:ad:1d:07:ca:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:E7:6C:C2:A8:63:5C:E8:9D:A0:BA:A0:55:00:26:FF:6B:9C:AE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/60CC0F2A7E9111ECAD5E4654C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.52.0/22
175.110.64.0/21
175.110.76.0/22
175.110.92.0-175.110.96.255
175.110.100.0/22
Signature Algorithm: sha256WithRSAEncryption
42:43:9c:3b:9c:6c:91:5f:fa:9f:23:fe:8d:c9:c2:16:bf:1a:
dc:5b:b7:85:3a:93:e6:97:ad:a8:1b:bf:a4:b5:0b:6f:34:8f:
23:ed:f0:1c:52:f5:48:1a:5f:01:57:e5:b6:49:dc:39:25:20:
a6:dc:d5:6b:92:a4:02:19:da:ff:1a:5c:0c:25:54:5f:13:c4:
48:61:a6:72:5b:c8:45:fc:21:75:c2:8b:47:fd:a9:18:94:db:
89:72:73:6f:c1:4c:aa:97:e0:63:f6:e2:07:13:35:22:76:11:
6a:d4:6f:9c:d8:f6:45:0f:c5:6f:79:33:60:27:2a:ee:a0:84:
50:1d:b2:0c:d1:4c:54:33:4c:72:a7:d5:23:4d:92:f8:ef:b8:
e4:7a:db:6a:bb:45:c6:7b:d8:21:01:81:f0:00:84:f0:5a:24:
eb:c5:ef:4d:d5:81:6a:2a:0d:a2:43:ba:76:35:52:51:7e:eb:
42:71:01:dd:43:3c:92:ee:0c:25:ce:cc:5e:70:01:40:97:3e:
90:89:2f:65:e5:59:36:03:08:b1:a7:8b:08:e7:2c:9d:ff:7e:
53:ce:4d:3c:88:a5:05:d8:f9:a6:58:07:0e:7f:8e:e5:42:68:
f0:e9:7e:3b:1a:cd:72:21:30:3a:2d:0e:37:d7:db:d3:a8:ab:
14:46:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:41 2025 by rpki-client