Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
File: A57BC1DC64D811EDA41EF047C4F9AE02.roa (raw, json)
Hash identifier: 85qgBj2rC9RPDAWlec/7Xk+nEb6u+pvqe4aAXU7KSzc=
Subject key identifier: CE:46:31:98:7F:65:03:C2:7E:69:F8:4F:5E:C4:7A:1C:F1:19:F8:FE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09E5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
Signing time: Thu 24 Nov 2022 10:29:23 +0000
ROA not before: Thu 24 Nov 2022 10:29:23 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533 (0x9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 24 10:29:23 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=637f4782-357d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:84:e5:5e:6f:1c:a3:41:f6:e3:cb:67:c6:
eb:b5:a2:0b:4d:4e:7c:21:3b:34:b3:1f:4e:9a:4a:
98:20:37:3b:37:8a:14:74:ed:a5:43:1f:11:fa:fa:
ff:0b:69:23:c9:e1:0b:58:12:77:53:4d:fe:7f:29:
82:15:d7:d1:d4:be:ca:8c:7a:df:14:ac:7a:8f:a5:
ba:bf:d4:79:9a:d8:8f:c2:21:36:6b:fa:e6:31:3e:
69:de:2d:df:96:06:33:41:9a:76:6f:df:47:6c:2a:
19:8f:f3:94:4d:1e:33:9e:c1:58:58:88:ad:0a:21:
fa:90:35:10:35:5a:ec:bf:f1:5a:b4:87:2e:d8:15:
8f:09:c3:60:42:03:12:50:1d:0e:f0:a0:b3:a1:8a:
53:01:10:1b:a5:4d:2f:9b:df:b6:8a:a1:ea:fd:f0:
5c:c2:1a:49:48:f1:a7:a3:47:4b:56:2a:ce:4d:6b:
00:dd:1e:7d:6b:c3:ba:f4:4f:b5:d3:89:ee:59:e9:
96:7e:2a:be:67:87:1e:b6:dc:f5:c3:b1:b7:39:f8:
37:a6:2d:a3:68:d7:e2:bd:26:c4:db:c5:14:ca:a1:
b4:48:f3:03:3c:dd:4a:2a:77:e3:3b:31:41:64:26:
81:75:51:27:b5:97:a6:ae:4f:4b:af:c0:69:1b:f5:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:31:98:7F:65:03:C2:7E:69:F8:4F:5E:C4:7A:1C:F1:19:F8:FE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.72.0/22
115.167.78.0/24
115.167.108.0/22
175.110.96.0/24
175.110.105.0/24
175.110.111.0/24
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
a9:d8:9f:32:52:bb:e8:16:89:7f:97:89:db:69:12:b4:30:8b:
06:02:a9:e0:72:2b:69:b8:40:d5:f5:36:51:73:e7:36:37:d5:
8c:7e:a3:ee:2b:16:85:c4:e6:33:1f:ce:b7:05:3e:99:d1:26:
24:80:39:6a:3e:61:ea:5d:bb:50:88:57:72:37:16:b1:4c:23:
d0:a6:76:a3:ab:86:59:fe:f5:ed:5e:48:e6:96:85:86:d4:b8:
7d:99:c3:19:da:6b:cf:9e:2d:93:1c:a3:27:a2:28:26:4d:31:
ae:3f:29:bc:79:79:f8:47:06:e0:76:30:d3:5c:98:57:cf:3c:
34:6c:10:10:87:cc:e6:42:db:f2:4c:af:cd:3e:4f:66:f8:c5:
f9:15:f5:b0:7b:f0:4e:1b:d1:e0:ba:de:58:f7:bd:2d:4f:bc:
d2:8b:1b:3f:4d:f0:2b:be:bd:5c:fa:0e:5f:5f:88:ad:50:dd:
79:00:12:f7:4a:de:f1:0b:67:d0:3f:02:02:82:fa:56:1b:8c:
ee:fd:2d:4e:c9:bc:3e:3c:93:9c:d7:27:5c:6c:d1:7f:0a:94:
42:cc:8c:ce:b0:ec:5a:da:2f:57:ab:e8:5d:22:40:e4:79:87:
c7:31:72:78:c5:93:78:9f:c0:70:42:5b:8a:72:0c:c4:8a:0c:
8c:f5:8e:c0
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTI0MTAyOTIzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzdmNDc4Mi0zNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxyOE5V5vHKNB9uPLZ8brtaILTU58ITs0sx9OmkqYIDc7N4oUdO2lQx8R+vr/
C2kjyeELWBJ3U03+fymCFdfR1L7KjHrfFKx6j6W6v9R5mtiPwiE2a/rmMT5p3i3f
lgYzQZp2b99HbCoZj/OUTR4znsFYWIitCiH6kDUQNVrsv/FatIcu2BWPCcNgQgMS
UB0O8KCzoYpTARAbpU0vm9+2iqHq/fBcwhpJSPGno0dLVirOTWsA3R59a8O69E+1
04nuWemWfiq+Z4cettz1w7G3Ofg3pi2jaNfivSbE28UUyqG0SPMDPN1KKnfjOzFB
ZCaBdVEntZemrk9Lr8BpG/V2GQIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFM5GMZh/
ZQPCfmn4T17EehzxGfj+MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTU3QkMxREM2
NEQ4MTFFREE0MUVGMDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwegYIKwYBBQUHAQcBAf8E
azBpMEQEAgABMD4DBABzpwIDBAJzp0gDBABzp04DBAJzp2wDBACvbmADBACvbmkD
BACvbm8DBAHKXBAwDAMEAMpcFwMEBcpcADAhBAIAAjAbAwcAJACVYAABAwcAJACV
YAAFAwcAJACVYAAJMA0GCSqGSIb3DQEBCwUAA4IBAQCp2J8yUrvoFol/l4nbaRK0
MIsGAqngcitpuEDV9TZRc+c2N9WMfqPuKxaFxOYzH863BT6Z0SYkgDlqPmHqXbtQ
iFdyNxaxTCPQpnajq4ZZ/vXtXkjmloWG1Lh9mcMZ2mvPni2THKMnoigmTTGuPym8
eXn4RwbgdjDTXJhXzzw0bBAQh8zmQtvyTK/NPk9m+MX5FfWwe/BOG9Hgut5Y970t
T7zSixs/TfArvr1c+g5fX4itUN15ABL3St7xC2fQPwICgvpWG4zu/S1Oybw+PJOc
1ydcbNF/CpRCzIzOsOxa2i9Xq+hdIkDkeYfHMXJ4xZN4n8BwQluKcgzEigyM9Y7A
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:23 2025 by rpki-client