Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
File: 9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa (raw, json)
Hash identifier: GUPav2+QAufo/jZdli6wiMSrAkB5rcDn8mcEzTMoNFA=
Subject key identifier: 85:6B:9D:06:DE:B0:36:08:C0:7D:69:29:41:1D:D4:86:D0:E2:73:BE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BA9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
Signing time: Wed 24 May 2023 14:55:17 +0000
ROA not before: Wed 24 May 2023 14:55:17 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
175.110.98.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 14:55:17 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=646e2554-fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:06:c9:9a:2f:41:a3:f3:07:34:37:bf:e0:
da:48:83:76:d0:97:ef:5b:8e:98:bc:0a:a1:fb:67:
e7:04:c2:80:f6:02:93:d3:a9:31:d2:89:b5:0d:09:
7a:04:a0:32:10:8d:d1:86:3c:75:f1:cf:9d:e2:63:
24:bd:2f:a2:ce:28:c7:eb:fd:49:3f:8c:38:6a:4e:
67:d0:38:26:38:d8:64:17:25:87:54:e1:03:d2:10:
f9:ce:7f:8d:c9:44:e7:46:2e:73:b8:2f:e1:73:eb:
ff:d6:32:3c:bf:ab:32:5d:f4:6e:13:08:95:d0:10:
99:f0:68:13:51:93:83:70:8f:73:b1:e3:da:fe:e3:
51:b7:f3:50:3d:39:4b:53:2d:42:21:07:b0:cb:bc:
8f:9b:13:b4:98:e9:9b:ee:17:36:36:3e:2b:a5:2d:
ab:10:0d:f6:5c:56:1e:8f:e7:c4:b5:b2:95:74:5c:
88:6b:05:28:73:33:c1:0b:31:06:e9:6f:1d:da:3d:
f9:3f:46:ef:07:1a:39:67:5b:5d:67:49:1b:25:d4:
a5:18:26:b9:50:55:80:e2:46:28:09:74:e3:24:82:
be:0a:a5:fb:20:4b:06:fb:a3:28:00:80:f3:75:ac:
5b:52:3f:9a:28:73:de:40:87:a0:79:32:66:b8:ce:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:9D:06:DE:B0:36:08:C0:7D:69:29:41:1D:D4:86:D0:E2:73:BE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9993BCA8FA1511ED8FAE8B1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
175.110.98.0/24
180.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:82:e0:ef:4f:db:2e:93:14:38:90:28:eb:a6:a1:3c:76:39:
22:b9:bb:cb:02:53:51:57:81:a9:eb:4c:28:af:7f:1b:6d:3e:
75:a6:86:ac:01:b9:43:1b:44:49:11:32:93:75:13:d3:f0:43:
17:7a:33:f6:23:08:96:53:81:e3:9b:26:be:87:c5:81:d3:7d:
25:4c:56:06:9e:bf:e1:53:7f:9f:b0:0b:b6:dd:85:06:1b:b9:
ac:50:e1:ca:03:a9:fe:03:83:9a:74:77:0f:f3:5f:34:68:81:
96:bc:8d:53:a6:33:ed:a0:9c:fc:85:b3:00:eb:19:7c:c1:44:
d7:8c:d1:d7:2a:dd:1e:7f:7c:68:fb:16:2a:70:eb:c4:47:31:
50:ea:69:ca:f0:80:07:5f:9c:3a:cd:c6:a6:9d:da:a6:d8:b3:
f0:34:65:80:a1:85:5c:6f:76:7f:cf:be:eb:a5:0f:10:b5:cd:
66:d2:8b:65:12:c3:a3:98:6d:57:79:4b:c2:74:19:28:46:b8:
14:eb:c7:17:3d:50:53:ab:96:ee:9a:88:08:14:bc:fa:1c:74:
9a:02:53:69:2d:f1:35:26:10:a6:c1:d0:b0:0c:ae:d7:9f:9c:
40:8c:9d:d8:fe:70:65:2f:09:c5:8b:dd:c9:64:9f:6b:ac:2a:
8e:82:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:27 2025 by rpki-client