Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721489C27E7811EEAF9B8643C4F9AE02.roa
File: 721489C27E7811EEAF9B8643C4F9AE02.roa (raw, json)
Hash identifier: BlXzygaYgyLwd0C/HeGxrA0AZdgGiduUD5XpkY6dA3w=
Subject key identifier: FA:CF:5C:F7:DC:AD:DE:34:04:DF:68:BC:42:76:6A:78:99:C0:F9:DD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0DDA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721489C27E7811EEAF9B8643C4F9AE02.roa
Signing time: Wed 08 Nov 2023 20:50:27 +0000
ROA not before: Wed 08 Nov 2023 20:50:27 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 8 20:50:27 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=654bf493-a680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:1c:8d:ce:f5:28:79:dc:bc:83:5b:23:c7:
37:9c:4f:c8:27:fe:70:99:31:5e:2d:7d:ad:8b:18:
c1:fa:81:3a:d3:6f:dd:80:29:dc:55:b3:73:bf:cb:
15:e0:06:72:64:af:d2:d2:40:82:6d:b8:bb:9a:1f:
c0:eb:9c:30:54:73:c6:82:64:a4:2e:0c:48:b7:9f:
53:09:24:c8:05:25:f9:98:f5:6c:b1:31:ca:6e:c3:
66:6e:8a:23:68:5d:78:f3:b7:94:ac:12:22:d5:45:
e4:60:cc:2a:75:dd:7e:68:69:f7:73:e2:90:41:e1:
6a:98:b3:6f:4a:ca:f9:f2:5e:26:59:aa:9d:46:72:
b5:a4:66:74:65:3d:8f:97:70:20:a4:1b:95:fa:40:
ca:e2:4e:e5:6c:63:35:25:ed:69:2c:17:ac:79:1a:
e7:49:c8:ca:15:5c:36:b2:80:1c:18:1b:f3:21:2e:
1b:30:c5:b6:34:f1:3c:97:77:74:9f:16:00:6f:96:
33:08:49:99:0d:4a:27:d3:db:bb:24:63:a0:68:6a:
ee:22:39:ed:88:6e:53:5f:84:9d:fe:dd:10:c6:34:
e1:a2:41:32:38:a3:42:46:4c:4f:32:3c:f9:2e:ff:
cd:91:6d:bd:6e:5e:62:de:19:7e:69:49:fc:8b:44:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:5C:F7:DC:AD:DE:34:04:DF:68:BC:42:76:6A:78:99:C0:F9:DD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/721489C27E7811EEAF9B8643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.216.0/24
113.203.229.0/24
113.203.231.0/24
113.203.243.0/24
113.203.250.0/24
Signature Algorithm: sha256WithRSAEncryption
59:32:24:36:6d:67:e1:6e:eb:8d:db:62:60:c5:4c:70:08:ec:
b1:70:47:ba:eb:66:27:ed:7f:e2:8c:8a:92:c9:b5:27:30:48:
07:7e:ea:86:17:ad:e1:f8:5f:2a:10:97:3f:d3:87:e7:a8:b0:
da:b4:74:a8:41:72:cc:ab:19:85:9e:04:a8:01:59:77:09:c5:
81:1c:1c:97:7a:34:cc:c9:5d:01:cc:89:1a:ca:94:66:cd:9c:
5c:86:8d:ff:45:6b:61:f9:47:15:b3:b4:71:05:db:61:00:4a:
60:26:f0:98:79:05:a8:75:32:27:05:2f:08:55:dc:f0:bd:dd:
6f:29:15:48:1d:b0:f1:d1:97:ae:86:59:11:29:91:17:85:50:
43:09:b8:84:f4:3b:a8:68:78:b2:3a:b2:ad:9b:25:f3:c3:b9:
2b:13:3c:b4:5c:63:4b:70:64:86:63:5c:3a:73:93:b3:c7:6f:
19:b7:60:7b:0f:40:63:5f:16:88:eb:3a:bb:a7:91:52:d7:a1:
43:f2:97:1c:5f:5f:c4:00:de:59:9b:48:0f:20:7e:47:4f:50:
76:83:0a:40:20:d6:17:b9:0a:0e:f2:3f:e1:13:d2:fc:a0:3b:
d1:0f:25:52:30:4c:15:06:64:96:e1:d2:fa:a2:3f:21:15:26:
74:e5:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:43 2025 by rpki-client