Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA87C3D256E011EEA007A759C4F9AE02.roa
File: BA87C3D256E011EEA007A759C4F9AE02.roa (raw, json)
Hash identifier: 18aZW45vhUfjNTw3TcRauBbGSBw144pA4kU/+waIcNg=
Subject key identifier: 8B:1D:09:21:A8:1A:8C:FF:25:19:F9:A1:32:24:CF:D4:CC:8A:CC:54
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D48
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA87C3D256E011EEA007A759C4F9AE02.roa
Signing time: Mon 25 Sep 2023 16:12:51 +0000
ROA not before: Mon 25 Sep 2023 16:12:51 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
180.178.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 25 16:12:51 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6511b183-f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:22:81:35:eb:32:7f:26:ac:90:f9:5a:f7:
f2:c2:a7:4c:d1:9d:81:0c:c4:47:75:8e:b0:06:63:
a8:99:48:b8:d6:94:d9:4c:7d:81:a4:3c:5a:35:0c:
92:3b:b4:a6:ea:bd:96:51:97:b0:bb:3c:87:c1:cb:
13:fa:84:55:b3:45:42:01:ae:fc:f0:ab:97:dd:33:
45:40:ea:a5:1b:16:d3:73:4c:05:e9:85:fd:cc:e0:
a4:f6:8d:40:c6:06:3f:5d:2b:46:1e:c7:cd:ee:98:
8c:5c:f2:93:34:72:da:f2:73:ca:33:b7:68:b7:02:
6f:c1:28:ce:76:13:70:65:4f:a5:c0:af:72:00:3a:
9f:c7:76:35:c2:91:84:bc:69:82:a6:dc:ea:9a:65:
47:ad:8b:f5:3d:35:e1:80:20:ed:e8:7d:b4:41:e5:
d5:98:16:7c:54:b9:f3:50:dd:08:db:62:d3:b3:57:
fc:4c:b0:ee:b3:77:67:1b:0f:a6:72:3b:22:fb:a3:
55:13:18:9d:61:22:ef:cf:cc:be:16:e0:41:11:13:
13:ca:65:da:1a:a9:c3:a6:6c:a5:16:6f:e2:bf:20:
b8:d8:11:6d:60:4b:89:ca:a0:24:bb:7a:3e:7e:cb:
6a:17:eb:81:d6:4f:fc:85:a2:a2:94:d0:b6:e7:40:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:09:21:A8:1A:8C:FF:25:19:F9:A1:32:24:CF:D4:CC:8A:CC:54
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BA87C3D256E011EEA007A759C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.229.0-113.203.230.255
113.203.243.0/24
180.178.140.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e0:ec:28:4e:a5:86:0e:ca:a4:fb:d6:46:ea:8b:10:b5:2d:
78:f4:1a:a5:bb:9c:87:6a:c4:17:80:cd:6a:dc:e0:31:7c:bf:
a9:a8:5e:17:da:8a:bb:1e:da:bd:a1:4a:42:b8:bf:7b:6c:9f:
8e:42:d1:09:f1:3a:ca:c1:5a:8c:78:0c:6a:2e:13:43:71:1a:
6e:c6:77:ad:d4:2c:92:a8:3a:e9:da:43:ec:93:33:67:3d:45:
e6:41:08:29:42:0c:e0:fd:1d:ed:c9:b3:73:f1:0a:c1:51:4b:
21:ad:69:a4:ca:cd:47:2f:62:b6:c2:7a:79:26:5c:05:db:f0:
b9:f1:9d:b0:0a:df:65:1f:76:14:d2:f7:45:0d:a2:2e:e9:03:
5f:e3:ed:b9:92:41:36:8f:59:af:20:c5:8d:e9:c5:08:5a:d0:
2a:e0:79:99:43:d4:f5:c6:f7:fe:ba:fc:48:12:26:de:e4:00:
73:5c:fa:38:88:2f:46:91:c7:f4:c2:bf:8a:0c:7b:c6:04:9e:
e5:b9:68:f1:d1:06:b6:4c:f5:59:43:3d:d6:87:fb:fc:13:a4:
07:d0:58:8e:e8:1e:88:88:e9:8c:05:73:ca:74:b0:2f:f2:3e:
fb:9f:09:e3:2c:71:a7:9c:61:54:98:43:d4:26:a2:94:51:da:
42:ca:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:50 2025 by rpki-client