Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B6964489F7E11EE9BFE5F4CC4F9AE02.roa
File: 8B6964489F7E11EE9BFE5F4CC4F9AE02.roa (raw, json)
Hash identifier: d+l//2Z7Xizq82yf8dPQU3nRgQYddvDpSK5PcQ7ApNI=
Subject key identifier: FE:76:8A:5C:92:53:78:D4:B1:D9:32:CE:60:1F:1D:35:66:E5:F2:FB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EB2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B6964489F7E11EE9BFE5F4CC4F9AE02.roa
Signing time: Wed 20 Dec 2023 21:27:15 +0000
ROA not before: Wed 20 Dec 2023 21:27:15 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3762 (0xeb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 20 21:27:15 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65835c33-18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:cd:15:15:5b:a2:3c:f1:99:a2:b0:0b:f5:
16:a0:c6:c4:46:16:86:82:53:33:79:05:fa:30:e0:
93:a9:6f:56:53:a9:50:ce:d3:a1:f5:09:23:fe:a2:
e8:72:d7:6b:d6:0c:be:dd:44:ef:38:4b:ad:35:a0:
c3:b5:1a:d4:5b:98:0d:9f:cd:a7:99:89:7b:d0:c7:
90:00:36:6e:06:da:df:15:9c:ed:4c:12:a5:4b:bc:
ef:66:13:45:4c:cc:99:70:bd:18:67:62:02:53:1a:
70:c0:7c:9e:1a:a1:0d:99:1d:25:bb:98:20:7a:7c:
44:6e:ab:4a:17:08:34:1e:9f:0c:6a:9a:64:86:d1:
15:6e:3e:5e:22:a9:3b:2b:8f:03:3b:97:84:ac:bd:
b2:de:92:e3:9d:d2:af:d9:77:e7:89:66:f1:f3:54:
fe:27:24:4b:95:36:c7:e3:6b:06:ee:33:13:1c:84:
2a:b2:c3:d7:5d:35:7b:2f:87:95:47:b0:da:5d:1b:
38:41:98:36:d5:fa:c1:a0:7a:d1:c7:bc:a3:19:69:
43:72:7c:91:49:5e:f8:be:0e:c7:34:2f:66:08:e5:
f5:02:6c:65:11:41:e9:b1:31:6e:26:ac:6b:e4:4c:
c1:29:80:78:29:65:cb:f7:97:ac:e4:f2:2c:1d:8f:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:8A:5C:92:53:78:D4:B1:D9:32:CE:60:1F:1D:35:66:E5:F2:FB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8B6964489F7E11EE9BFE5F4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.218.0/24
113.203.230.0/24
113.203.234.0-113.203.240.255
113.203.253.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0/24
180.178.149.0/24
180.178.160.0/24
180.178.166.0/23
180.178.170.0/24
180.178.172.0/24
180.178.174.0-180.178.176.255
180.178.178.0-180.178.184.255
180.178.191.0/24
223.29.226.0-223.29.228.255
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
c2:81:3d:ff:d5:6a:a9:90:54:ef:e2:5b:1f:d9:f0:a8:69:fd:
b6:e6:9e:d2:43:e9:0c:48:9e:10:fb:71:1a:e6:88:63:76:8f:
a0:fe:3a:93:ad:52:bc:74:b5:61:3d:f3:80:6f:31:f5:4f:d3:
b4:15:28:25:89:c8:0a:5b:99:24:25:f8:c6:78:67:4c:c6:b0:
30:eb:7d:4c:90:3b:9c:44:bb:02:3d:de:bd:26:08:e0:cd:1e:
16:af:0c:ca:7c:cf:76:27:ec:63:02:bf:60:ba:af:7f:ce:76:
ca:a6:1f:41:68:5b:a7:0d:ca:2a:fd:3c:84:1e:b7:62:af:77:
da:10:bd:9c:20:0c:df:dd:14:84:1f:51:df:15:e1:3c:2e:da:
16:32:28:4b:3c:1e:39:f0:b3:43:f9:5c:fa:b7:6f:5b:06:88:
69:e9:5b:fb:60:c7:5d:b9:b3:ed:9f:48:a5:84:d3:d7:e3:e3:
8e:37:97:48:c4:33:13:1b:66:34:e5:a9:10:eb:21:83:b5:ed:
5d:b7:b4:09:c5:b1:56:0d:c4:c3:e5:bc:7f:db:08:a9:f2:87:
26:3b:64:1d:90:88:07:55:49:0d:68:0b:6b:f9:c1:85:d1:b6:
df:0a:b7:8b:ec:45:dc:bb:8a:ed:6b:3f:89:2a:11:49:50:0b:
7b:ba:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:24 2025 by rpki-client