Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/845AE71479D511EDBBDFC527C4F9AE02.roa
File: 845AE71479D511EDBBDFC527C4F9AE02.roa (raw, json)
Hash identifier: sFbhtEBepI5vP6ydiqGIHolPrU0TzQJl1AZoCj4qNkA=
Subject key identifier: 8C:6B:E1:B7:55:C1:A7:0A:A3:0A:DE:66:C8:64:37:A6:C7:42:12:60
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BCE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/845AE71479D511EDBBDFC527C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:47 +0000
ROA not before: Wed 24 May 2023 23:25:47 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 115.167.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:47 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cfb-5343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:66:8f:fa:43:17:af:e8:d5:98:90:22:f2:
3f:75:ef:b9:7d:e7:2e:10:ac:cb:95:64:9c:5e:bb:
5c:36:94:06:0e:62:79:fb:c5:0d:19:bb:83:92:72:
9d:a6:e5:68:6a:a9:ac:e1:06:1a:a0:75:93:38:93:
45:c0:b9:a4:c2:ed:bc:2e:de:48:54:c6:d9:cd:48:
c3:8b:fb:71:f3:aa:d7:d4:03:78:31:82:f4:d7:a3:
52:af:64:8d:69:0b:1b:3c:5f:a4:eb:12:24:3d:d5:
e5:5c:ae:10:29:02:6a:c0:96:c1:5f:b3:97:96:ea:
e0:7f:32:17:00:f8:d7:4e:9c:ca:94:81:28:60:97:
9a:36:3a:2c:8f:50:62:5a:d7:13:6c:2b:82:ee:76:
ed:20:c9:43:64:e7:07:dd:c5:ae:04:33:09:4f:17:
21:c2:2a:62:cd:ac:52:17:1c:84:b2:d4:9c:9b:1e:
af:e1:ad:19:18:1c:b9:93:75:7b:f5:93:46:cb:c4:
5a:14:fe:69:a2:52:de:31:57:a3:43:86:47:82:98:
9a:f4:8a:79:ab:8d:b2:f4:88:2c:7d:36:1d:02:11:
64:7c:70:4d:f6:3e:8b:a6:cf:63:df:55:5c:52:e1:
c0:06:c9:44:8a:de:91:b2:87:61:d8:de:bc:6e:d4:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:E1:B7:55:C1:A7:0A:A3:0A:DE:66:C8:64:37:A6:C7:42:12:60
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/845AE71479D511EDBBDFC527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:6b:f5:7b:79:fd:1b:3f:a6:8b:2f:4b:5b:3a:81:9e:4f:30:
70:fc:1c:e6:2c:59:20:6e:1d:71:0d:ee:ca:e6:b9:80:39:dc:
4b:38:46:28:ac:67:05:4a:00:d0:10:5e:a0:78:24:56:29:f9:
ee:7b:d5:e8:1c:fc:0f:7b:1a:8f:e3:c5:0a:b9:66:6c:c5:89:
48:26:a9:62:3f:7e:10:f0:70:d9:de:6e:49:d7:6e:cf:fe:0c:
16:1c:d3:4d:4c:ac:57:65:4c:2a:f1:c6:71:0f:4e:13:30:8f:
e3:60:93:6b:51:ab:3d:10:3b:06:81:18:ef:6f:cf:d5:bc:93:
15:a9:2b:3c:1a:cd:10:d1:74:1e:2b:7a:c5:24:b8:0f:36:99:
08:7c:e2:94:6a:a3:2d:75:d0:b2:ec:ea:8c:40:f2:ad:96:db:
e0:5d:e3:3b:6e:c5:b7:b8:02:fe:c6:3b:15:b3:0d:d6:09:ae:
5b:bc:62:9b:f4:f5:f0:eb:ae:65:cd:52:6c:b5:7b:d7:94:3c:
6b:68:a2:91:02:2f:b2:80:17:bf:91:42:d8:e7:d0:5d:7f:89:
c0:79:f2:4c:5b:7c:de:90:a9:8e:6d:21:c4:10:fb:db:96:45:
63:81:cf:d4:10:a2:4d:ce:66:16:b9:93:33:1c:3a:96:76:ba:
ab:e7:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:57:59 2025 by rpki-client