Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6E389186254011EEA5BF6F3CC4F9AE02.roa
File: 6E389186254011EEA5BF6F3CC4F9AE02.roa (raw, json)
Hash identifier: 3yr3L/R73bWia2RNsbpGhpynHU52Gk1+P27TDUAei5o=
Subject key identifier: 2A:6F:FA:91:38:AA:6C:27:B2:70:E5:D6:22:50:0E:AB:45:1F:36:D7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C6E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6E389186254011EEA5BF6F3CC4F9AE02.roa
Signing time: Tue 18 Jul 2023 07:55:15 +0000
ROA not before: Tue 18 Jul 2023 07:55:15 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.79.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 18 07:55:15 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b64563-34e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c5:4b:49:ab:c2:db:c6:fd:0b:a8:66:b2:67:
16:76:a1:94:67:ff:8c:5b:b2:d9:a4:e0:10:40:e1:
c3:01:bd:3e:a8:c3:18:49:1b:1f:20:25:d4:e3:db:
45:ca:a6:cf:78:91:54:bb:e0:95:57:c2:7b:09:e8:
08:d1:c4:9b:e9:21:99:0a:93:3a:f9:c4:65:4d:1d:
37:dd:ec:15:58:ec:47:3d:2e:0b:f0:7e:2c:06:18:
c9:e6:0a:03:99:76:59:35:b9:f9:5d:37:55:62:51:
5f:7e:03:d6:0a:36:b2:24:99:b5:85:b2:6d:77:62:
c4:33:c4:46:9e:1d:49:7b:53:ab:b4:b9:c7:6b:2a:
03:c5:a0:b5:4f:f8:21:44:10:92:43:46:f2:30:ce:
eb:9b:90:36:26:86:50:b2:13:93:ed:a1:b7:4f:e5:
88:ab:cb:16:97:1f:56:4e:00:1d:61:3a:ae:20:34:
cc:62:ed:22:98:1b:f3:69:de:2e:34:05:4b:81:72:
fe:51:fe:f9:ae:48:65:a3:da:93:01:d3:e3:07:ed:
66:a9:79:bc:26:3c:a1:74:89:18:dc:c3:e1:19:36:
49:2c:e0:86:b2:4a:51:fe:54:66:0f:25:62:0f:94:
1f:1b:e9:19:4f:47:2c:66:31:66:38:b8:c7:17:f1:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:FA:91:38:AA:6C:27:B2:70:E5:D6:22:50:0E:AB:45:1F:36:D7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6E389186254011EEA5BF6F3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.48.0/24
115.167.77.0-115.167.79.255
180.178.164.0/22
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ec:20:8e:ec:6d:5a:83:4d:2a:ac:44:d3:80:f2:4f:71:82:
74:41:d7:91:8a:b5:6b:01:ee:78:20:f9:6d:ba:49:a2:b9:1c:
be:5e:84:7e:50:34:48:3e:36:3f:c0:02:b8:bd:71:d2:6b:9f:
b7:b8:92:0b:73:67:76:fd:50:d4:39:2a:d7:f9:13:cc:0a:ed:
c3:a6:f7:a0:97:ae:94:c3:9b:96:67:79:ca:87:d1:cd:82:89:
67:3b:db:39:16:11:cb:8d:67:91:b1:79:e7:57:65:58:59:59:
46:88:0f:06:b9:41:68:89:28:ae:93:7b:e5:56:10:a3:c8:f0:
cd:0a:d0:de:11:ad:1a:d6:06:99:50:ce:8a:c5:10:66:e0:e6:
06:ec:52:38:9c:af:c0:e0:a5:cc:e9:22:23:17:e9:d4:64:21:
9a:c3:46:08:98:e8:f0:38:90:07:23:61:47:e2:b9:4c:a4:98:
5e:05:a6:5a:c1:cc:e6:19:86:a8:44:d9:1b:36:9d:ab:1f:e0:
13:a5:d4:43:af:af:6e:c3:7e:d8:2f:f6:fd:94:0d:77:bb:e2:
cf:a2:17:50:e5:d3:ef:1b:34:57:13:cd:bd:1e:db:78:03:14:
19:1e:4a:1d:4c:17:b9:52:bb:b4:7a:c2:4a:53:ca:12:c1:41:
fd:5f:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:29:49 2025 by rpki-client