Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AE167E47F3811EE9370A35FC4F9AE02.roa
File: 7AE167E47F3811EE9370A35FC4F9AE02.roa (raw, json)
Hash identifier: GAJQpHJeqZWCw4e1cUabgEbc5lxNc3IpjuZyl1IZCs4=
Subject key identifier: EE:ED:71:0F:A0:02:D5:15:B4:8B:81:8D:BD:47:74:31:B2:1D:2A:AF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0DE0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AE167E47F3811EE9370A35FC4F9AE02.roa
Signing time: Thu 09 Nov 2023 19:45:05 +0000
ROA not before: Thu 09 Nov 2023 19:45:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/22 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 9 19:45:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=654d36c1-1beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:99:85:1d:05:71:11:66:33:d2:7e:ad:58:
96:c4:10:cb:fa:f1:d5:51:5f:b4:53:86:2f:c7:cf:
d2:27:e4:a1:1b:73:14:10:b8:cb:a5:af:63:5a:9f:
eb:90:a7:fa:a1:9b:3f:88:50:6e:b0:d8:d4:7c:26:
f8:01:65:42:de:75:eb:a1:f4:93:19:72:b3:1a:26:
c9:8d:73:cf:6a:a9:78:28:98:a1:c6:2d:35:37:09:
cf:e7:98:a9:df:dd:ec:36:20:3e:7f:49:6f:09:be:
5d:8a:cd:4c:83:00:86:b4:9a:23:3b:70:56:dd:a2:
ae:8e:0b:24:f4:3b:ba:50:e0:d9:0c:e8:cf:27:cc:
5c:8a:cf:34:cb:d2:f5:18:f6:21:cf:15:25:e4:0a:
28:05:3d:32:a1:8b:76:f8:c2:90:25:16:a8:4d:54:
04:fc:c6:ec:aa:38:12:bc:12:0f:9a:e2:cd:37:71:
04:32:b0:30:cd:80:29:24:dd:89:bc:65:de:8a:5e:
be:e7:50:ab:ac:e6:e5:89:4c:69:67:d3:23:e2:a6:
66:b0:37:78:2a:c3:d8:0b:2c:79:6e:7f:d4:e4:aa:
3f:4c:d5:49:7b:27:b5:aa:dd:37:c9:a1:44:f1:f8:
9d:d9:14:9e:91:82:a1:d4:b0:35:c4:40:4f:8d:10:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:ED:71:0F:A0:02:D5:15:B4:8B:81:8D:BD:47:74:31:B2:1D:2A:AF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AE167E47F3811EE9370A35FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.210.0-113.203.215.255
113.203.218.0-113.203.220.255
113.203.222.0/24
113.203.225.0/24
113.203.227.0-113.203.228.255
113.203.234.0-113.203.240.255
113.203.245.0/24
113.203.249.0/24
113.203.251.0/24
113.203.253.0-113.203.255.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0-180.178.149.255
180.178.151.0/24
180.178.161.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.171.0-180.178.176.255
180.178.178.0/24
180.178.180.0-180.178.184.255
180.178.186.0-180.178.191.255
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
85:5b:fa:0a:8f:9c:29:9a:9b:dc:c1:7b:2e:5f:42:b2:59:e4:
5b:c7:c9:2a:9b:a7:f6:ac:c7:f5:57:94:aa:15:47:01:d5:e9:
13:a9:69:04:d2:8a:f5:ba:b0:aa:e6:60:77:9c:83:9b:7e:43:
24:f8:db:f0:bf:7e:41:55:e1:55:aa:9e:f0:33:4b:45:5d:40:
00:0d:a3:d6:fd:a7:28:8f:e4:78:49:d4:7e:3f:a7:ba:2c:00:
c8:73:69:c3:2c:ec:c0:98:32:e6:55:43:3e:25:ab:a9:58:5d:
05:09:73:7b:9a:ba:8d:ad:4d:a7:94:3a:30:ec:0d:6b:d4:b8:
07:68:b0:7e:93:a2:47:b9:56:88:2a:86:cd:38:10:bf:7d:2c:
f0:6f:b5:75:96:48:79:e4:d6:42:f9:6c:29:06:5f:28:26:f3:
65:c9:28:7b:3e:3a:8d:a2:04:ab:73:d7:0d:74:f2:64:7f:5b:
a0:3d:c4:4c:c6:51:17:5d:85:cd:ef:d6:51:37:fa:08:18:40:
a0:42:f0:52:8f:7f:49:a9:bf:40:83:3a:78:09:28:ef:2c:7c:
ac:28:4e:4d:7f:2a:e4:01:b9:91:c7:dc:a3:5e:90:93:a6:ee:
ae:8c:e4:ed:e2:ea:64:0f:f7:48:af:a5:bb:6d:e8:b1:30:e6:
62:72:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:38 2025 by rpki-client