Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
File: 88A20E66972011EDB621A458C4F9AE02.roa (raw, json)
Hash identifier: +A3StXZcBsLdNpJfwzyMNcG7TwYSXgZP4YABFHMfdLY=
Subject key identifier: 6E:DF:6B:85:85:69:DC:B0:E1:60:11:66:A2:87:EB:CB:4B:23:D0:F7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A6C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
Signing time: Wed 18 Jan 2023 11:09:11 +0000
ROA not before: Wed 18 Jan 2023 11:09:11 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 18 11:09:11 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63c7d356-b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:97:82:61:d0:41:c9:9b:f2:31:14:d6:f6:
60:63:e0:b4:b3:c8:80:fd:7b:56:d6:d8:ae:e8:da:
c3:15:d5:75:2e:62:b9:ac:23:fa:34:d1:7f:8a:a1:
8d:ed:f0:ae:a4:52:5e:77:58:73:2e:ba:bd:eb:37:
d7:d9:f7:87:c4:4c:01:40:a3:47:09:d4:21:30:3c:
06:6a:ae:1b:35:94:82:9e:08:f6:66:ac:11:7c:8e:
cd:d1:82:ae:80:22:2b:6f:ed:88:8c:c7:1d:b3:bc:
86:cc:59:20:b1:8f:b2:dd:55:ec:d0:96:71:6b:15:
4e:01:8e:7a:61:42:c4:47:50:2d:af:04:d0:80:d1:
8b:61:26:25:09:34:20:49:35:17:c7:2e:4f:47:cd:
d1:98:b5:a5:e6:ea:e7:c8:09:d4:d3:37:ef:cd:71:
83:af:78:8c:36:e9:01:b4:cf:7f:35:8f:2c:65:3d:
62:11:c1:f1:cc:b7:8e:a6:06:af:c1:90:f5:19:03:
2b:1c:35:38:05:5e:8c:83:b7:28:7c:d6:c0:db:90:
2a:19:ad:ed:d4:38:c0:2f:90:7d:ab:a9:74:3d:10:
63:4d:99:9c:ef:78:60:2d:e5:8e:70:39:7d:03:68:
d2:df:dd:f4:21:89:70:45:c8:ef:04:75:51:b6:68:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:6B:85:85:69:DC:B0:E1:60:11:66:A2:87:EB:CB:4B:23:D0:F7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0-115.167.2.255
115.167.4.0/24
115.167.72.0/22
115.167.78.0/24
115.167.104.0-115.167.119.255
115.167.126.0/23
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0-202.92.20.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
28:6f:71:f9:50:ee:cc:6d:dc:a8:eb:68:11:1e:87:49:4e:43:
cb:48:70:e4:c1:bf:bc:a7:f4:52:4c:d1:52:a6:53:e2:ed:a8:
da:d8:44:3c:bb:e1:c3:6d:ac:18:2e:9a:87:f2:b0:92:ff:e9:
54:f3:07:17:10:f0:e1:b0:11:2d:a4:5a:9d:0a:90:c7:e4:2e:
89:5e:46:69:c8:19:39:ad:48:ab:4b:52:0e:d8:a7:d5:3a:e2:
90:fc:23:87:e5:21:85:64:f1:a3:30:72:43:f2:4c:23:76:9d:
f9:53:1a:c0:cf:f1:db:b0:93:49:2b:41:bb:da:17:e3:7c:cc:
19:4f:27:81:40:7d:f7:e1:e0:f2:17:e7:89:24:11:6d:ad:36:
46:5b:3e:93:cd:12:ed:c6:c6:c7:a0:ef:e4:b0:46:9f:df:03:
69:22:4a:b2:d9:86:26:b6:90:e7:a2:5b:0d:4e:54:cf:b8:22:
8d:e6:b3:f5:8d:52:17:a5:06:b2:16:8b:f0:e1:85:b4:f3:d0:
08:21:83:77:a2:d7:3a:a6:f8:5c:dc:47:ab:3f:d0:ad:6e:79:
37:b8:26:83:22:5e:b2:4c:6d:0e:56:4b:4b:b3:5f:60:67:66:
6c:d1:2c:fc:54:72:d4:60:06:1d:69:22:f4:9d:00:50:ca:b3:
8e:b7:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:03 2025 by rpki-client