Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/778D388A40D511EE97BC2F1EC4F9AE02.roa
File: 778D388A40D511EE97BC2F1EC4F9AE02.roa (raw, json)
Hash identifier: 9AZGGjYAvHZEOjvMwYV291H8JIdMUm6tLk9GqDfErBM=
Subject key identifier: B6:3F:FD:62:18:D3:02:67:C9:71:B8:F0:62:79:B4:3C:89:1A:CA:AD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D13
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/778D388A40D511EE97BC2F1EC4F9AE02.roa
Signing time: Fri 15 Sep 2023 11:27:21 +0000
ROA not before: Fri 15 Sep 2023 11:27:21 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.28.0/22 maxlen: 22
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 15 11:27:21 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65043f99-9528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:63:59:07:5a:89:12:fe:71:a5:98:a2:3e:
9b:1c:d7:a9:94:db:f2:05:9e:7c:62:66:43:79:d8:
70:88:6e:9d:10:86:d9:ea:83:88:26:69:b2:7b:4d:
b2:88:e5:69:d5:54:b4:0f:75:ea:18:79:fe:ed:3c:
a4:fe:f8:e8:69:4e:37:f1:57:dc:ba:a3:9a:f7:44:
b1:c9:61:78:07:31:88:02:44:b5:06:d0:25:1e:f7:
b2:da:4d:52:09:c0:92:83:52:ea:53:fd:c2:c2:96:
08:8d:d6:c9:55:9e:e5:a2:4d:ae:36:16:9f:93:d6:
8a:6e:19:d9:da:3b:8f:45:fc:bb:ee:55:e3:53:6a:
7c:c8:99:3a:89:b1:7f:94:7b:db:86:5b:85:56:90:
7e:f1:bd:0d:ad:57:30:26:28:60:ed:b5:31:0d:c9:
92:9a:83:7b:51:0e:7e:07:bc:b1:c5:fa:04:1c:4f:
b3:92:99:88:f3:27:bf:8e:e4:7a:02:9f:fe:87:cb:
e6:15:10:8c:6d:09:6b:84:b4:14:34:d7:d4:fd:d7:
d2:88:86:21:32:14:51:72:aa:e8:34:61:be:dd:8d:
3b:7c:4c:02:8c:e5:20:3c:52:a0:48:e9:1f:02:5a:
57:9e:0d:a0:77:4d:ed:5d:2a:e4:96:86:a2:e0:5f:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:FD:62:18:D3:02:67:C9:71:B8:F0:62:79:B4:3C:89:1A:CA:AD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/778D388A40D511EE97BC2F1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.24.0/21
115.167.48.0/23
115.167.77.0-115.167.78.255
175.110.96.0/23
202.92.19.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cc:29:e7:d3:d1:88:cb:ed:8e:77:fb:07:7e:17:57:4a:ca:
ad:8d:df:44:3a:a0:47:cb:64:30:5f:e6:53:b9:98:57:64:e4:
d2:41:a4:b5:d4:e7:1a:6a:c0:26:b9:b7:3c:2a:ee:36:a9:64:
6a:3a:d2:c5:18:ba:f3:07:61:04:c5:4e:f6:9f:19:c2:1f:33:
9b:c3:d4:00:32:2c:b5:63:86:94:a4:f6:25:a0:fc:f5:3f:a0:
b8:4d:9a:8f:e3:45:18:e3:18:6b:44:f8:e1:2e:31:77:a8:28:
eb:de:90:04:1d:cd:0b:51:41:e6:6c:e7:1f:96:2d:c8:22:f3:
49:50:24:91:3a:91:3c:f4:67:33:18:0d:65:75:1b:87:ea:8f:
b8:ca:85:ce:b1:77:1c:b7:59:fd:b0:1a:ca:dd:86:af:5e:97:
ad:e8:6e:c3:60:95:f5:3a:d0:b4:85:69:47:f8:10:49:55:26:
39:a2:ee:3a:5b:d3:52:eb:c0:05:a3:89:b3:b3:76:8c:19:36:
4d:e4:79:be:56:a2:e0:66:e7:8d:60:37:95:bb:26:40:76:10:
bc:db:b7:17:10:dc:f7:17:fb:13:6c:d2:4e:e5:3e:84:f9:d3:
a7:3f:ad:5e:50:09:ee:17:55:fe:85:b6:6f:5c:68:57:82:60:
1c:0d:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:52 2025 by rpki-client