Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9248117C1C9111EDB7CECA3FC4F9AE02.roa
File: 9248117C1C9111EDB7CECA3FC4F9AE02.roa (raw, json)
Hash identifier: 41hzdPPaovRD4tX0Yxt235YDTzDyNzr4EUN5pECZbs0=
Subject key identifier: 11:E1:25:0B:E4:89:70:2C:2F:ED:B1:1E:08:E5:96:7F:FB:F1:56:EC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 08B8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9248117C1C9111EDB7CECA3FC4F9AE02.roa
Signing time: Mon 15 Aug 2022 11:58:27 +0000
ROA not before: Mon 15 Aug 2022 11:58:27 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 15 11:58:27 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62fa34e3-7184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:e2:72:bc:72:29:f1:ef:13:b4:03:e7:0e:
1b:ac:df:9c:83:8f:fd:5e:48:0f:82:38:86:4e:0f:
34:9b:b2:93:6c:61:ad:ca:c4:e5:56:88:30:de:60:
6c:53:89:14:3b:c4:f6:06:bf:ef:d6:92:d2:7c:c3:
ec:0f:f4:c7:ba:3e:5f:f2:83:a0:4b:36:2b:4e:7e:
ab:5d:dc:0c:ab:7f:33:5f:06:ef:f8:89:d7:46:2c:
35:35:68:b2:72:61:c2:44:65:21:db:04:5a:cd:82:
16:52:86:83:78:70:22:2d:86:ef:1c:97:42:72:69:
fc:dc:5d:53:13:71:34:35:dc:da:58:92:25:06:e0:
55:31:92:c0:be:7d:ff:03:79:2c:95:a3:e5:87:87:
79:95:3d:22:d0:93:f1:0b:05:df:dd:4b:c1:0d:83:
3a:16:34:d2:8b:1b:1e:ad:bb:81:f8:84:b1:c6:59:
b7:6a:af:6e:69:65:a5:3b:1f:f0:c4:a5:1f:74:68:
f4:a8:04:49:57:04:c5:15:87:53:60:52:0d:7b:1e:
10:3b:d2:00:e2:49:cc:62:53:f1:b9:3f:fb:61:83:
55:9f:ac:0e:bb:ce:08:e2:b7:f0:c6:22:8d:33:5f:
21:79:b0:f9:2c:af:a1:2c:92:bd:d5:a2:dd:91:64:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:25:0B:E4:89:70:2C:2F:ED:B1:1E:08:E5:96:7F:FB:F1:56:EC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9248117C1C9111EDB7CECA3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.48.0-115.167.50.255
175.110.96.0/23
Signature Algorithm: sha256WithRSAEncryption
99:bb:46:19:3b:e8:f1:6b:62:30:36:77:0e:b1:f4:eb:2d:dc:
ce:62:d0:55:17:f3:89:88:b1:86:f9:e8:a4:cd:68:cf:9d:55:
c2:b3:93:59:4a:ab:0a:3c:8e:6c:30:37:27:bf:18:81:21:40:
60:0e:3b:c4:6d:ba:a4:d5:bc:e1:3a:b6:9b:71:fa:e2:a6:35:
4d:dc:9c:67:a0:87:e1:4c:76:b5:1f:da:7a:fc:df:2f:2b:71:
93:98:25:4a:40:72:8a:3a:b6:90:4a:8e:b0:0f:18:c3:9f:87:
13:3d:40:38:b8:4d:99:f8:94:c1:31:98:9c:76:aa:52:9f:67:
26:a6:c9:f8:0c:dc:90:da:73:18:a7:7c:98:37:1a:c2:47:13:
5a:9d:16:24:6b:21:0a:88:b0:84:29:dd:c3:47:ae:6b:2a:37:
97:04:93:9e:3b:86:32:76:88:80:19:4e:9d:ec:09:cf:ff:46:
69:78:b4:8c:ab:a7:69:ed:00:f3:b3:d1:c8:f3:bc:eb:72:1e:
50:6d:87:b7:5c:21:3f:a5:f0:e8:c9:c2:33:4d:1d:a1:37:8f:
28:12:ed:9f:fc:cf:9f:83:0a:1e:ce:7e:27:32:f3:78:51:6b:
fa:3c:f4:27:bb:1b:4d:08:a0:33:8c:f7:9e:d6:a2:b6:0c:e7:
5f:93:84:86
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwODE1MTE1ODI3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZhMzRlMy03MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGricrxyKfHvE7QD5w4brN+cg4/9XkgPgjiGTg80m7KTbGGtysTlVogw3mBs
U4kUO8T2Br/v1pLSfMPsD/THuj5f8oOgSzYrTn6rXdwMq38zXwbv+InXRiw1NWiy
cmHCRGUh2wRazYIWUoaDeHAiLYbvHJdCcmn83F1TE3E0NdzaWJIlBuBVMZLAvn3/
A3kslaPlh4d5lT0i0JPxCwXf3UvBDYM6FjTSixserbuB+ISxxlm3aq9uaWWlOx/w
xKUfdGj0qARJVwTFFYdTYFINex4QO9IA4knMYlPxuT/7YYNVn6wOu84I4rfwxiKN
M18hebD5LK+hLJK91aLdkWSu6QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFBHhJQvk
iXAsL+2xHgjlln/78VbsMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOTI0ODExN0Mx
QzkxMTFFREI3Q0VDQTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEBHOnMAMEAHOnMgMEAa9uYDANBgkqhkiG9w0BAQsFAAOC
AQEAmbtGGTvo8WtiMDZ3DrH06y3czmLQVRfziYixhvnopM1oz51VwrOTWUqrCjyO
bDA3J78YgSFAYA47xG26pNW84Tq2m3H64qY1TdycZ6CH4Ux2tR/aevzfLytxk5gl
SkByijq2kEqOsA8Yw5+HEz1AOLhNmfiUwTGYnHaqUp9nJqbJ+AzckNpzGKd8mDca
wkcTWp0WJGshCoiwhCndw0euayo3lwSTnjuGMnaIgBlOnewJz/9GaXi0jKunae0A
87PRyPO863IeUG2Ht1whP6Xw6MnCM00doTePKBLtn/zPn4MKHs5+JzLzeFFr+jz0
J7sbTQigM4z3ntaitgznX5OEhg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:13 2025 by rpki-client