Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/895ECBD6BFBD11EC985C725AC4F9AE02.roa
File: 895ECBD6BFBD11EC985C725AC4F9AE02.roa (raw, json)
Hash identifier: c9IaFqiGjT+lXm5I1sz51Vbmi9Covrw82BTIeTs+bxM=
Subject key identifier: 04:4B:F3:8A:63:2E:FD:B7:9D:38:5D:16:AF:06:A7:9C:D2:65:F9:7F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 071C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/895ECBD6BFBD11EC985C725AC4F9AE02.roa
Signing time: Fri 29 Apr 2022 08:28:54 +0000
ROA not before: Fri 29 Apr 2022 08:28:54 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.8.0/22 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.56.0/21 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.22.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 29 08:28:54 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=626ba1c6-5bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:83:b0:ba:70:04:1e:94:c4:a3:ec:e0:3a:
15:a4:8c:7f:64:a4:42:3a:5d:2d:c1:d1:9c:88:6c:
1a:c7:f7:93:01:bb:31:3d:2d:24:44:a3:fb:8d:b2:
31:de:80:ce:d9:da:db:9d:a6:9e:4a:22:2b:44:7e:
0c:e4:e6:f6:05:bd:c7:85:22:96:61:6d:d1:af:19:
ed:2e:10:5e:d5:53:6e:79:f2:ee:a1:fe:a2:e1:f9:
bd:ec:8f:07:01:55:b6:b0:62:de:2a:be:da:d7:3b:
95:7d:f6:93:27:09:2b:b6:90:5c:b9:d2:37:35:3f:
64:17:c7:fc:fc:38:54:7a:8f:20:e3:f7:e5:5e:5c:
ed:d8:6a:51:44:f8:6a:b5:c4:ff:d4:da:49:56:15:
9e:e3:99:9f:3f:b7:28:66:70:31:44:00:6c:28:f4:
d8:c7:08:51:09:b0:84:98:c2:31:be:bf:88:68:7a:
fc:bc:a5:d5:7b:9a:95:3e:8f:41:2a:e8:96:a1:96:
8c:6b:90:0a:fd:68:4e:ba:0c:f0:0e:73:c0:dc:3b:
e0:71:0e:a3:a4:71:eb:20:bd:f1:76:2b:77:ea:f0:
03:37:0a:c9:2b:36:1d:87:82:c0:ec:f1:49:eb:8e:
5a:01:b3:ca:7b:62:18:5a:8d:6a:26:bb:04:06:59:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:F3:8A:63:2E:FD:B7:9D:38:5D:16:AF:06:A7:9C:D2:65:F9:7F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/895ECBD6BFBD11EC985C725AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.3.0/24
115.167.5.0/24
115.167.8.0-115.167.23.255
115.167.56.0/21
115.167.72.0/22
115.167.96.0/22
115.167.120.0/22
175.110.68.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.97.0/24
175.110.99.0/24
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
56:64:06:60:5d:b3:68:f8:10:1b:cf:2c:d1:74:b9:98:3b:0b:
30:78:2f:1d:25:70:e0:5c:f9:54:51:d0:cd:db:8e:49:7b:d7:
7b:b7:3c:81:d3:0f:cb:bf:fe:5a:4e:fd:54:38:03:c0:f0:22:
84:8a:69:74:4b:70:b6:0c:e8:34:2b:a2:87:1e:37:cf:91:c7:
3f:24:8b:b4:45:d1:1b:21:f4:2a:41:1c:b1:5e:9c:46:c5:99:
e5:9b:8a:53:40:d9:79:d1:ea:a9:d8:08:d7:9b:3e:ed:3c:2d:
b4:7f:3e:02:67:5d:4d:36:8b:8c:8f:cd:04:ec:aa:4f:ba:38:
b2:79:c9:ab:5d:0b:26:58:96:11:cc:a1:44:95:ce:61:5d:81:
da:81:22:75:a9:c7:46:03:f4:cc:14:fc:3a:8b:1b:64:10:fc:
45:cc:64:6c:11:5a:4f:07:a3:fd:15:0e:b2:9f:5d:08:84:6e:
25:e3:7e:7d:68:a6:9a:f2:c1:ca:91:1e:6d:b4:e3:4c:0b:11:
ac:a1:d8:4d:f1:e2:44:f4:b3:b7:04:bd:4a:8c:59:0d:08:ea:
5f:d8:d0:d4:bf:f4:dc:b8:55:8a:dc:60:b8:4d:69:a5:56:01:
90:46:c5:e0:43:63:72:98:df:1e:c8:11:d9:a9:fe:1d:d7:4a:
99:64:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:29 2025 by rpki-client