Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69383C100BA811EEB64E8977C4F9AE02.roa
File: 69383C100BA811EEB64E8977C4F9AE02.roa (raw, json)
Hash identifier: l6nzTdTlIiWAJisbPZyYccBoGboEY1hTDBzjnneVtV0=
Subject key identifier: 21:DF:12:A5:C5:48:46:19:1D:1D:2E:C2:E0:5E:80:72:4E:CD:75:55
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C1F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69383C100BA811EEB64E8977C4F9AE02.roa
Signing time: Thu 15 Jun 2023 18:14:05 +0000
ROA not before: Thu 15 Jun 2023 18:14:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 113.203.220.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 15 18:14:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=648b54ec-bc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:a4:9b:ce:9f:d0:25:98:9c:77:fe:86:18:
88:bf:11:73:4c:d4:5d:5f:08:92:62:b1:c9:60:5f:
fd:58:3d:1f:a3:2a:1c:8f:fa:79:3b:a7:50:5d:09:
64:da:16:5f:4a:ca:8d:4a:ba:b3:70:76:85:32:59:
8a:5b:ac:20:79:40:9a:ea:a6:dc:da:15:62:d5:a0:
42:0a:96:9d:7d:dd:4e:a6:2e:1c:61:70:aa:e9:2c:
e0:56:7e:50:35:48:36:52:dd:3c:3f:05:1e:1f:4e:
26:d2:22:a8:35:09:cb:ec:9f:d7:54:98:a8:78:45:
98:3b:79:d7:65:c8:fc:3e:ae:dc:a7:2b:00:f1:84:
53:b5:f1:bc:cf:b2:52:52:c4:62:5c:7d:88:8d:a8:
e9:ac:4d:7c:7d:40:d6:db:d8:89:7d:0f:06:4d:52:
6d:bd:18:f8:6f:6f:44:83:90:43:d8:49:57:28:c2:
bd:8d:08:a3:6f:a7:a4:cd:15:8e:62:66:e1:d9:06:
3d:7e:9e:c2:c7:a7:be:b6:c5:35:00:aa:86:c9:0f:
c4:7e:48:b8:2b:f4:29:d0:67:1f:8d:79:6e:4d:92:
e3:a5:b1:20:05:d9:bf:b9:2c:c7:93:f2:05:d7:d5:
c4:d5:32:99:3b:8a:a8:ed:76:27:af:3b:e1:0a:f4:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:12:A5:C5:48:46:19:1D:1D:2E:C2:E0:5E:80:72:4E:CD:75:55
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69383C100BA811EEB64E8977C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.220.0/24
113.203.227.0/24
113.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ae:2f:7d:ea:20:b0:ff:4a:27:45:ae:29:92:60:60:f3:03:
d1:d5:c6:a7:50:b8:62:96:05:dc:a2:7c:39:4e:b8:6d:5b:77:
b6:cf:3b:e8:1f:1e:ef:83:ad:fb:48:54:18:fd:16:f0:7f:51:
da:be:10:4c:85:1a:99:97:39:57:32:20:b1:7a:15:93:a6:72:
c3:9c:02:61:fd:47:99:d8:c9:11:7e:dc:17:e0:a0:f0:dd:89:
50:56:5b:34:69:aa:57:16:1a:25:3b:93:c7:62:b8:0e:52:45:
53:ef:f5:69:df:a4:91:18:1b:5b:d0:9a:22:d3:9b:50:8c:d5:
1f:94:24:ae:e8:e8:0e:f7:33:0f:4e:fc:7f:e4:65:79:59:d4:
f8:46:a3:bd:87:9d:e4:7f:16:4b:f3:6f:d2:39:86:68:ee:97:
99:b2:75:79:3e:0b:55:cf:9e:bd:cf:14:e0:45:f6:de:ce:6f:
15:b9:eb:6c:21:8a:15:05:a8:a7:7f:f7:6a:f8:09:9e:68:c4:
e0:50:85:77:c1:8c:cb:4a:b8:d1:17:7b:fe:48:b7:ec:76:96:
4f:f2:19:51:e3:06:ac:0e:a9:79:be:c2:34:53:17:b8:83:b3:
ec:0a:4d:f7:70:ce:1d:f4:a7:ba:ea:e6:20:d4:59:e0:46:1d:
e2:d4:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:42 2025 by rpki-client