Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
File: A52F6354A13911EC992FF474C4F9AE02.roa (raw, json)
Hash identifier: 6k3vd+bW3rOnfD3SduikLwojxqpRxmnEfcfe5vfsAVg=
Subject key identifier: 33:61:15:0C:7C:64:03:05:6E:A8:26:89:94:AE:10:33:38:76:3A:E1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0687
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
Signing time: Fri 11 Mar 2022 12:49:10 +0000
ROA not before: Fri 11 Mar 2022 12:49:10 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 42831
IP address blocks: 115.167.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 11 12:49:10 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=622b4546-a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:18:f1:d2:87:0c:4f:83:c9:4d:e1:d6:50:
9c:7e:b8:b7:f9:ad:5f:fc:4c:df:05:ac:bf:7b:cc:
88:56:54:a5:63:03:6e:49:8e:5a:00:a7:4c:ac:42:
66:e3:98:cd:d6:b1:07:20:41:82:72:24:f4:2c:37:
c2:36:0b:89:35:b9:73:3b:4d:c5:67:85:ba:7a:60:
e4:02:7c:bd:86:84:1e:db:25:dc:a3:ac:28:64:fd:
60:1e:bc:a3:d2:20:f9:b4:6b:48:4d:38:9f:c8:d7:
25:42:bf:a3:be:1e:aa:c6:71:da:be:48:da:a3:41:
4d:7c:c3:2b:51:5f:85:96:13:57:39:0e:9f:fd:29:
61:98:f7:be:e3:c0:73:8a:49:e5:43:84:69:76:ef:
51:86:fb:dc:bc:56:eb:6e:fe:00:e2:b1:ed:49:63:
45:86:86:04:23:57:7c:09:8b:19:e5:53:2f:60:d3:
68:ef:45:34:90:1a:fd:52:fb:c3:dc:44:bc:ae:56:
49:e8:e4:9e:72:6e:f6:16:95:90:b6:93:d9:d6:c1:
ec:3e:ea:94:d5:2d:26:f0:25:69:78:b5:a3:12:8d:
e0:c8:e6:69:9c:bf:db:06:50:e5:12:3f:3a:50:ac:
ed:86:69:b2:ec:db:0b:c2:ce:2f:b8:34:b0:dc:76:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:15:0C:7C:64:03:05:6E:A8:26:89:94:AE:10:33:38:76:3A:E1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.96.0/22
Signature Algorithm: sha256WithRSAEncryption
08:53:64:1f:6f:cf:be:42:f3:54:1c:1a:50:85:1d:9a:3a:68:
5b:fc:b1:bb:b4:3a:3a:1e:27:37:70:64:20:ef:24:e0:9c:7a:
00:f6:49:4e:40:63:27:9d:d5:54:3f:bf:ef:75:1b:09:c4:dd:
c7:ec:e2:0b:ae:f8:e3:40:86:d3:28:a3:9c:c1:5f:93:6b:db:
0f:50:8f:bc:20:93:a3:a6:bd:4f:b1:ab:e7:51:81:35:19:63:
d7:f3:f7:4e:e7:16:34:80:ef:17:49:11:50:ef:6b:0b:35:0d:
99:e3:a0:9f:8d:a8:e6:07:3a:83:82:46:bf:ed:e0:7e:89:ee:
de:03:24:c7:7a:d5:da:19:ed:4c:b7:c2:35:50:96:5c:e9:e7:
0c:4f:23:36:a6:e6:b3:47:68:d5:8e:56:34:bc:82:47:94:d1:
26:2b:4c:0f:86:5c:b1:d5:26:92:b3:f4:58:30:7e:b7:60:79:
c8:f9:68:dc:fd:c8:d6:96:2e:5a:52:1b:13:62:14:2d:16:83:
0a:30:6a:3b:49:d3:dc:5e:4e:5a:c5:b4:f6:fb:7f:60:9e:9d:
f8:3c:f1:52:df:af:31:5f:0e:da:0b:49:d8:32:22:a5:cc:62:
9d:17:39:94:47:8e:aa:7d:87:16:96:ed:fc:51:11:05:78:bf:
7f:20:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:49 2025 by rpki-client