Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B58E2DD67ADA11ED96D52C3DC4F9AE02.roa
File: B58E2DD67ADA11ED96D52C3DC4F9AE02.roa (raw, json)
Hash identifier: 2pTL3p5xLrCNUTM1mm0RD4hrfC03QqdPMLXx8kd5ELU=
Subject key identifier: 9A:DC:BA:76:CE:57:89:AD:EE:1A:8C:38:1E:D4:C8:AB:8F:1C:3C:E8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B58E2DD67ADA11ED96D52C3DC4F9AE02.roa
Signing time: Fri 30 Dec 2022 13:18:53 +0000
ROA not before: Fri 30 Dec 2022 13:18:53 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2630 (0xa46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 13:18:53 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63aee53c-d2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:1c:ff:4a:1e:72:ab:9e:10:e8:72:b1:99:
0b:6e:18:8e:25:7f:81:49:e8:61:fb:64:7e:91:56:
98:42:56:90:1e:b6:f4:36:d5:17:3b:2e:1b:96:c2:
3f:29:82:53:34:e8:23:25:14:81:cc:10:29:92:de:
57:c6:0c:4c:e4:ab:d3:36:14:eb:09:c9:10:72:f4:
13:1d:94:03:b4:09:4a:f1:94:f5:ab:47:7f:49:8c:
ed:3e:d5:b1:96:1b:01:f4:89:e6:7d:4c:a8:aa:92:
e5:98:03:d5:f4:cf:78:b2:a5:b2:9e:9e:be:a9:fd:
bb:fd:3e:4f:31:6b:21:19:52:1f:59:ce:c2:a8:98:
f2:f1:2f:de:97:7a:a6:b7:0e:75:25:82:13:b3:f8:
01:87:07:b2:17:0f:fe:47:04:9e:48:b1:ba:b2:fa:
55:28:bb:07:7b:f1:d9:e6:9e:04:5b:7d:02:22:bf:
cb:a5:ce:21:24:cf:93:aa:4c:8f:aa:45:8e:cf:17:
78:1f:a0:27:0a:9f:c8:34:51:4d:91:3c:51:fd:be:
73:de:a9:00:71:0e:c8:a7:2f:a9:c8:5d:57:dd:57:
04:93:df:f6:30:44:34:f0:fd:51:a8:0b:ca:39:36:
b6:3c:c4:00:9d:52:b5:70:75:3c:e0:08:18:b8:5a:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:BA:76:CE:57:89:AD:EE:1A:8C:38:1E:D4:C8:AB:8F:1C:3C:E8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B58E2DD67ADA11ED96D52C3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.48.0/23
115.167.77.0/24
115.167.104.0-115.167.119.255
175.110.97.0/24
175.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:41:04:e3:ee:84:04:85:91:fa:5e:fe:43:b5:47:17:e5:f3:
36:63:84:b9:39:39:97:97:0a:93:21:b6:4c:7b:b6:db:fa:b3:
31:b3:d6:ea:e5:d8:18:32:13:17:53:3a:65:31:00:3a:f6:51:
c0:2f:36:d3:03:ca:b1:7a:1e:a1:ff:ed:5c:23:84:06:7f:f0:
7e:18:1c:64:78:cc:4e:7d:a6:f8:34:9b:01:90:0b:25:84:b6:
2a:b2:41:26:9f:47:0d:13:ab:54:20:ee:38:d8:b2:ea:8d:32:
aa:73:48:44:ee:9d:72:5e:a7:f9:f3:3c:a6:e9:89:af:07:15:
e7:af:47:d3:0f:71:26:01:01:6f:1a:50:35:c1:0b:98:ea:cc:
35:f2:f1:34:d4:a7:0c:b5:37:e8:73:f4:83:67:34:a0:04:f1:
27:26:b3:aa:94:08:4a:8e:e5:93:38:e8:66:5a:fe:32:6f:08:
2b:6c:c9:5b:d2:bc:20:53:f3:ca:3c:ac:b9:54:86:54:72:db:
d5:a0:e3:ce:70:22:ab:10:0b:02:b5:11:df:f0:75:6d:9c:6b:
12:1a:84:8d:74:79:cd:31:7a:60:59:f7:7c:ae:77:37:95:9f:
62:cf:03:75:e4:d3:eb:5e:59:82:23:7c:f9:bd:90:28:f2:4d:
31:b3:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:26 2025 by rpki-client