Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85CB174A629B11EE9EB06B19C4F9AE02.roa
File: 85CB174A629B11EE9EB06B19C4F9AE02.roa (raw, json)
Hash identifier: 6NYxELWpyMHQngUlQJ7k31DYNaDcuG9cPo54Jjt/Dto=
Subject key identifier: 34:D5:1A:02:48:0B:73:8F:F2:CC:3B:79:B8:D2:D9:8C:0C:E2:C2:61
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0DA0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85CB174A629B11EE9EB06B19C4F9AE02.roa
Signing time: Tue 17 Oct 2023 11:41:17 +0000
ROA not before: Tue 17 Oct 2023 11:41:17 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 11:41:17 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=652e72dd-447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:d6:cb:ad:2f:75:8f:aa:59:a7:f8:a2:6a:
da:70:fa:de:bd:eb:5e:a3:bc:81:14:23:d9:8e:b4:
ca:49:84:22:fd:00:7a:a5:3f:94:4e:a0:f5:65:f5:
f9:f6:03:fc:a5:0e:74:e3:05:aa:35:61:9a:4c:da:
4b:6e:d3:a0:d6:56:da:26:cf:86:0b:c0:77:29:5b:
36:45:d3:c8:a6:a9:54:46:c7:ec:e0:1e:19:4b:82:
0e:f2:6f:11:29:f6:d0:2d:a1:8d:8b:63:b0:d7:c9:
85:f1:31:57:4e:71:8d:d0:a5:5b:17:d7:93:64:71:
59:3d:36:5d:0f:e9:de:d6:98:6a:29:9d:30:43:a3:
69:6b:4a:9a:db:72:f3:d4:7d:46:02:e5:53:e4:a5:
eb:29:9d:13:e8:56:04:c1:81:73:92:be:de:d1:15:
e5:71:7c:5e:92:77:33:a2:f5:47:c1:ae:02:7e:58:
ff:89:99:f5:78:09:f3:3f:6c:37:f9:89:68:95:c4:
9f:14:b1:8c:20:ad:e2:33:a8:23:0b:58:3a:3b:c9:
54:b9:0a:21:ba:04:d4:eb:45:cf:c3:60:6a:64:a7:
b0:ad:cc:e5:ec:58:78:0e:36:ea:15:fa:6d:05:fa:
60:c0:86:c2:b4:52:7d:cc:eb:fd:da:68:43:2c:02:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:1A:02:48:0B:73:8F:F2:CC:3B:79:B8:D2:D9:8C:0C:E2:C2:61
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/85CB174A629B11EE9EB06B19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.216.0/24
113.203.229.0/24
113.203.231.0/24
113.203.243.0/24
113.203.250.0/24
113.203.255.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ad:a5:1b:af:31:d1:b2:ea:61:e5:fd:cb:a1:7a:25:a8:7a:
62:5a:6c:7f:63:3d:8f:35:9f:e3:5c:df:b0:a7:21:49:9d:36:
49:94:91:3a:6b:71:21:40:d3:16:cf:8f:4e:8c:48:90:ba:6f:
61:b0:a3:13:dd:47:77:b6:0d:33:d9:51:2c:b2:99:af:9e:f9:
d6:e4:e8:43:3d:e3:d8:ca:59:75:94:4b:4a:c3:0e:1f:ed:14:
38:64:21:a5:61:07:ab:b6:17:84:e0:93:10:bb:aa:1a:7a:e4:
81:40:df:db:f3:ac:41:a6:d2:f4:f6:20:8b:47:19:8c:03:8a:
dd:5e:06:8f:6e:39:90:f9:33:60:be:c8:7f:0a:da:6f:ab:5e:
cc:c6:7b:d2:9f:32:3e:dc:88:6c:ba:d6:cf:34:f8:47:00:b6:
b6:5f:b3:02:0c:f9:46:bf:18:b9:66:e7:5a:26:bd:f8:e9:ec:
6a:64:bf:66:e7:2a:3d:55:38:7d:4e:df:63:26:3e:5a:c7:c7:
52:93:6b:a5:07:1b:84:07:d6:dc:ee:b7:d3:de:5d:a3:fb:18:
34:f6:a8:ca:22:59:a2:b0:9b:00:e5:a9:c7:6f:d6:2c:dd:7c:
80:ac:1e:01:ca:25:4d:50:97:55:8c:bd:c1:e5:de:52:bf:d9:
18:63:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:01 2025 by rpki-client