Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
File: 6DB8ACB690BF11ED9A87EF53C4F9AE02.roa (raw, json)
Hash identifier: 32CaxbKWQ3tT17n9RQXbBvJeiQCJIs+KwsVJVyX3H5g=
Subject key identifier: 86:45:AD:72:43:69:71:6F:54:44:94:49:BE:45:78:F6:51:4C:03:AF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A65
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
Signing time: Fri 13 Jan 2023 16:29:02 +0000
ROA not before: Fri 13 Jan 2023 16:29:02 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 13 16:29:02 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63c186cd-c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:bd:7e:5e:7e:24:a5:d2:d7:eb:22:ef:bd:
4c:f9:2a:44:ee:29:06:9e:3e:86:65:00:bf:f2:2d:
0f:c6:04:57:db:e3:bc:67:25:df:70:d1:e8:67:62:
f2:33:99:4b:5e:fa:50:06:ee:67:c7:94:e4:8c:d1:
70:57:54:13:27:9f:f0:4b:a3:f7:ef:c9:53:1a:9c:
81:56:76:a9:0d:38:74:fc:4e:8a:98:97:61:1c:e5:
82:07:39:10:d3:87:82:b5:89:b0:bd:a9:fa:20:35:
2b:f5:af:17:ec:87:4f:d4:30:dc:d4:28:15:66:15:
d2:17:92:3c:9d:ac:e8:41:c1:96:d7:78:43:af:1e:
da:64:9b:38:69:5a:e4:fc:24:74:b4:03:4e:e1:83:
e1:68:a9:5e:6a:4d:d0:03:46:07:90:41:d5:93:b9:
05:0f:8a:b2:6c:2a:a1:7c:43:95:81:fa:3c:88:1d:
01:01:5a:93:17:cc:b4:27:19:0f:59:0c:17:7a:2b:
9d:b7:3d:7e:d3:79:b7:3f:87:07:5a:cf:2c:d4:3d:
83:28:26:fa:ab:d9:24:4a:f2:7c:c3:22:fb:17:e4:
56:4d:74:9a:b6:7e:bf:d1:ab:0f:79:fb:b6:61:c3:
3c:27:38:0b:52:f9:ef:c1:b5:ef:ea:b6:60:d3:1f:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:AD:72:43:69:71:6F:54:44:94:49:BE:45:78:F6:51:4C:03:AF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.2.255
115.167.4.0/24
115.167.72.0/22
115.167.78.0/24
115.167.104.0-115.167.119.255
115.167.126.0/23
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
a6:45:fd:71:87:98:a1:f3:69:5f:ea:d6:f9:a0:6d:70:e8:e3:
39:30:6d:e1:93:c3:e2:01:36:a6:f3:3e:04:33:20:6c:2c:a2:
46:15:a6:a3:31:72:a9:75:d8:f8:f3:1d:de:12:5a:be:be:f9:
60:4d:c6:09:7b:46:76:1c:9f:02:b1:a6:2c:f0:a9:5d:5c:98:
4e:63:6a:6e:5e:bb:77:fd:a4:3e:c8:8a:7f:32:38:a1:0a:a6:
f7:07:c7:87:ca:26:99:10:13:3a:61:31:ae:8f:5a:a1:6a:be:
87:5d:ec:bd:a4:0a:00:72:16:23:8d:e8:7d:39:66:80:0e:fe:
19:da:44:18:c5:8b:0e:7b:01:bd:23:7c:aa:b3:9f:72:7d:44:
e6:e0:a6:d6:39:bd:df:52:64:0e:b2:7f:0d:78:df:54:55:7d:
18:09:aa:aa:61:10:1d:ef:fc:c1:1b:22:e9:24:89:63:c8:17:
03:a0:19:b1:dc:a0:62:61:6c:d0:e0:61:d5:a6:e8:84:9f:59:
3e:7a:1d:53:ca:ad:7c:c6:72:6e:27:74:f2:ad:82:ae:fa:70:
bb:d2:79:55:d5:bd:b9:82:72:1b:a0:2b:23:68:87:e5:b2:55:
c2:76:c4:5d:be:2e:9e:3a:8c:6f:ba:10:dc:dd:5d:ec:52:d8:
25:d3:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:21 2025 by rpki-client