Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/866A431079D511EDBBDFC527C4F9AE02.roa
File: 866A431079D511EDBBDFC527C4F9AE02.roa (raw, json)
Hash identifier: mhCR6ym2BTkt/IxEJ3HjNEUcvvmkB7BEtc1OC/AnPo0=
Subject key identifier: 20:1A:DF:D7:77:A4:7D:5D:F1:A3:07:63:72:E5:11:FD:4E:33:EF:9E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A0C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/866A431079D511EDBBDFC527C4F9AE02.roa
Signing time: Mon 12 Dec 2022 04:29:11 +0000
ROA not before: Mon 12 Dec 2022 04:29:11 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572 (0xa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 04:29:11 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6396ae17-3492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:7c:a0:a6:5b:2c:f4:a9:5f:49:25:bc:b8:
93:39:f6:c0:17:32:df:09:ae:4e:1f:16:92:a1:9e:
c7:1c:08:52:c5:c3:f6:0e:14:f9:44:9c:48:7f:1f:
ef:d8:24:18:01:52:f3:5c:4d:9e:db:df:15:f2:66:
c6:7e:82:ce:e6:37:9c:87:06:9a:de:53:65:ea:3b:
14:bc:7b:88:5f:37:80:3b:0f:ae:37:a8:db:cc:b1:
07:fb:17:0e:45:5c:61:a9:41:25:4f:b8:e6:50:fc:
ae:81:7e:62:9c:cb:93:a0:0c:0f:bc:cc:31:97:a2:
c3:c9:d6:8e:d0:7a:1d:d7:7d:4c:10:11:27:00:7e:
85:47:54:55:21:fc:fc:5f:39:3a:aa:82:7f:3d:49:
47:d9:bc:c7:82:93:03:28:56:3d:f4:bf:68:ab:68:
1e:fa:d6:19:f7:5d:8b:59:c6:2f:a1:fc:d4:79:a1:
87:38:38:2b:a1:71:3f:36:2d:db:9c:08:7c:4d:46:
91:fc:82:9e:92:3d:a7:1b:e9:73:c1:d7:db:24:47:
2e:4c:17:cd:57:fe:af:6a:37:ed:bb:5b:84:fd:36:
6c:2c:38:e0:28:7b:e4:46:31:cf:2e:1d:df:77:30:
61:7f:ef:e2:24:41:70:ca:be:d5:27:ce:f8:e1:a1:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:DF:D7:77:A4:7D:5D:F1:A3:07:63:72:E5:11:FD:4E:33:EF:9E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/866A431079D511EDBBDFC527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:24:4b:6c:6d:42:d7:84:90:1f:de:71:47:f9:f7:08:8c:bd:
4f:e7:06:11:2c:b2:b5:06:aa:d6:aa:ef:4a:cf:8c:f2:75:8b:
d5:90:b2:7c:ea:0c:b4:b6:9b:57:b1:cb:fd:02:24:18:24:26:
cf:fc:56:56:de:b1:ac:d6:1d:ce:97:87:d4:c3:25:c6:43:db:
2b:35:6b:e5:99:44:99:0b:35:97:09:35:18:84:15:0c:17:ae:
9b:33:bc:6c:32:8c:28:60:40:63:ea:27:fa:81:db:a1:1d:2f:
d5:70:80:6d:39:80:da:78:f6:0f:01:4f:e9:3a:f8:cd:db:60:
62:aa:b3:37:78:3f:94:be:fa:5f:78:f1:2e:2e:55:21:37:63:
ce:4b:40:58:53:45:15:4f:2c:bd:73:4e:be:0d:c7:09:ae:4f:
a2:ba:62:0c:68:32:50:27:54:29:5e:91:85:47:26:36:a5:38:
d8:7d:b7:03:9d:38:24:c9:d7:5e:33:52:d1:9e:81:47:eb:17:
33:eb:22:a9:f2:20:65:e6:2e:34:c3:96:c1:4d:53:24:fc:2e:
ae:09:7c:25:30:3d:4e:a5:c6:a3:0e:ea:85:6a:b5:cf:85:65:
37:88:59:10:37:55:aa:c0:bb:75:c7:c3:a7:d1:df:7e:38:41:
d6:88:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:41 2025 by rpki-client