Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
File: 69E940DA05F511EFB286C82CC4F9AE02.roa (raw, json)
Hash identifier: ADiLWN+JMhnF9EMCdQ48C/f2kxKsbAekuQ9kWXdmv88=
Subject key identifier: 2F:AD:F9:87:51:AD:CF:22:4F:50:0E:A2:58:44:AD:A5:CD:EF:1C:BC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1133
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
Signing time: Mon 29 Apr 2024 06:55:08 +0000
ROA not before: Mon 29 Apr 2024 06:55:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4403 (0x1133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 29 06:55:07 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=662f444b-8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:ba:fe:e6:48:ef:f7:ff:5a:34:6a:2c:7d:
47:19:72:44:09:a9:ee:79:36:68:d0:d3:10:8a:bf:
7f:61:7a:6d:17:bf:51:30:0b:be:04:fb:c0:65:7f:
a4:c6:84:33:ad:ab:c1:a7:6e:f0:22:40:90:99:a6:
65:81:cb:5b:90:88:14:3f:1a:4b:22:68:fe:d6:b6:
7d:f7:46:fa:9d:0b:02:3e:e9:94:33:5e:1c:dc:d7:
b6:94:b1:a8:fd:e4:b7:97:48:cc:2a:9f:e9:92:54:
e6:ca:62:eb:f5:7e:08:43:7f:e1:1b:26:39:8c:84:
6a:45:d8:31:c8:17:70:76:7c:9e:06:09:1c:b3:92:
20:a4:da:a8:2a:75:09:ab:b9:0f:f2:17:85:01:e1:
de:3c:06:98:a3:ff:a8:ca:39:71:0e:2a:9a:56:96:
73:a2:dc:73:16:05:94:18:f1:75:54:57:17:57:c2:
43:4b:54:da:6d:6f:5a:34:7c:fb:c5:26:65:ba:f0:
0e:59:39:cf:8e:1b:ee:42:af:f6:ac:25:3d:80:92:
34:4e:5d:82:18:23:e6:3b:b3:33:94:a1:46:09:06:
cf:d6:5a:6a:65:4a:59:1b:fc:49:d4:f8:5b:3c:46:
c5:67:92:cd:ef:70:42:34:b7:ff:ad:a2:d0:1e:12:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:F9:87:51:AD:CF:22:4F:50:0E:A2:58:44:AD:A5:CD:EF:1C:BC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.50.0/24
115.167.65.0/24
115.167.76.0/24
115.167.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:77:7e:f4:9c:a0:ec:b8:d2:c9:32:f8:7a:04:4a:ed:ae:a2:
3f:d6:dd:56:c1:3c:34:1a:71:f0:35:37:88:e7:af:3f:e4:de:
36:83:1c:b7:85:1b:b3:dd:41:9c:5d:bc:2d:fe:3b:93:82:51:
af:f3:07:b3:4e:91:9b:6e:20:60:e9:09:9f:40:6b:a2:7d:18:
8e:ee:dc:08:60:a1:42:5a:e7:10:b2:44:da:bc:42:84:60:51:
b6:c1:bf:40:65:af:a1:30:28:4b:ce:fd:68:e3:fc:51:fa:bf:
2c:20:d8:6c:af:55:dc:4d:2c:97:82:4c:9b:99:c3:06:48:a6:
53:32:82:00:0a:f2:4c:48:14:e4:68:b1:dd:6b:64:26:95:45:
02:68:77:fc:05:68:4c:5b:3a:72:ba:5f:90:55:80:e5:d3:85:
38:95:78:83:ec:57:2f:86:b9:8f:fc:0d:e8:61:08:1f:f7:53:
64:ff:b9:fb:de:32:ce:9d:72:76:fe:f2:e7:ec:c8:e4:9c:6c:
28:13:16:47:24:97:37:2e:3d:0a:06:b2:49:35:ac:20:1c:8b:
df:69:17:14:c9:7a:9f:fa:55:ef:fd:2c:54:3a:62:71:64:03:
a2:15:02:63:cd:2b:23:0a:60:7f:bf:3c:7a:ae:79:26:12:04:
39:33:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:22 2025 by rpki-client