Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
File: 71C7BCBCDF6A11EDA2793924C4F9AE02.roa (raw, json)
Hash identifier: b6OJhie0SpC2J4jXL/gH6Y2L4q72BVf+/1mf0NEyj2w=
Subject key identifier: BD:37:04:AB:06:B4:26:F0:7B:35:86:29:07:64:8B:B7:C4:95:A8:0D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BC2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:33 +0000
ROA not before: Wed 24 May 2023 23:25:33 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 149419
IP address blocks: 113.203.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:33 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9ced-b459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:78:d5:55:34:f3:0e:54:49:d1:85:ea:60:
e9:e8:b4:cf:ac:39:d6:10:42:ba:a8:51:92:42:fb:
48:d0:49:45:2c:87:33:b1:c5:d9:b0:82:7d:e9:5e:
44:57:64:ce:8c:3e:99:3e:59:cd:5f:0e:c7:03:4f:
93:15:9b:9e:76:3f:73:fc:44:3d:c5:44:34:7e:ab:
82:3c:6b:4c:8e:92:08:ea:5a:39:bc:a6:05:0d:72:
fb:e2:22:2c:8c:ce:82:c0:97:fc:ba:47:d1:be:46:
f6:11:e8:8a:4e:f8:e3:0a:8d:68:cc:88:b4:04:e9:
47:d7:8e:26:07:ac:37:ef:4b:19:d0:ad:e1:d1:8a:
76:a3:f5:18:fc:e3:d4:f1:d2:3e:78:72:4d:10:fc:
a5:94:35:b9:ab:f4:2f:72:ed:6a:75:d6:c0:66:12:
58:18:af:a6:71:17:9c:31:5a:bd:ec:b8:04:f6:d4:
ee:1a:11:1f:c3:80:be:e1:68:f9:4a:7a:06:80:30:
86:00:78:a5:82:db:99:ba:84:75:2f:71:c1:9d:ef:
7c:5c:83:ac:50:57:16:6a:18:8f:ae:de:50:9b:0f:
1b:23:06:dc:b5:10:9a:f2:be:0d:66:b0:56:2c:ab:
36:d7:af:a6:3a:38:f8:91:0a:e4:6c:f7:7d:7b:08:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:37:04:AB:06:B4:26:F0:7B:35:86:29:07:64:8B:B7:C4:95:A8:0D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
10:65:a3:90:47:f4:da:b3:b0:d6:83:7d:6f:21:f9:a9:f4:f2:
27:90:ac:3a:93:e9:f2:15:e0:56:7c:19:c4:a9:95:63:00:fe:
89:a6:a1:08:b9:97:1c:03:d4:12:29:16:12:7f:4e:68:42:16:
fc:14:0b:4b:ad:3f:54:9d:41:b3:42:c5:81:89:d8:fe:1e:d0:
06:f5:9f:a5:9e:5f:be:cb:42:fc:a6:b4:ab:9f:4c:cf:92:69:
c3:ad:70:01:a1:c0:b1:90:e8:c7:f4:7a:ab:5f:c6:d9:31:74:
1f:0a:d1:97:e3:ee:e7:b3:1a:67:67:1d:d3:98:79:d4:04:b0:
8a:b0:8e:52:d3:92:db:ab:b6:74:66:bf:84:72:06:6e:e8:9a:
2a:42:7b:0d:4b:35:1c:f4:c8:e5:e1:ae:6b:81:7c:87:0c:fe:
e8:37:0a:66:8f:e4:43:88:3b:94:fd:bc:ff:89:46:98:6a:41:
ad:54:c5:a1:c9:57:0e:ec:af:43:0d:f4:f3:60:f5:45:71:7b:
f3:62:97:2f:8e:24:d2:31:38:26:17:dd:d4:65:ec:48:8a:67:
83:eb:01:a0:c0:30:79:95:41:9d:8f:a3:c2:53:e2:af:95:91:
90:b7:84:1b:1a:0e:76:21:e3:5e:bc:01:db:e4:60:a1:1f:5d:
45:12:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:23 2025 by rpki-client