Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCACB716D75811ECA8AA5A14C4F9AE02.roa
File: BCACB716D75811ECA8AA5A14C4F9AE02.roa (raw, json)
Hash identifier: a63LCGZ6K5VBe529bXzFh+yopwf/ANrwqNF7Kvm9kGA=
Subject key identifier: AE:E8:EA:3E:BA:19:84:C3:D8:22:BD:CE:0A:4A:99:41:48:E2:CE:AD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0760
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCACB716D75811ECA8AA5A14C4F9AE02.roa
Signing time: Thu 19 May 2022 09:47:47 +0000
ROA not before: Thu 19 May 2022 09:47:47 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 9009
IP address blocks: 115.167.8.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 19 09:47:47 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62861242-a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:b0:8e:da:3d:74:51:3f:31:c1:91:e8:f8:
ae:f1:68:14:5b:15:33:c4:02:16:3d:47:84:04:3c:
e9:8c:d5:1f:c6:60:9f:21:87:10:fd:0a:ac:bd:3d:
03:9c:35:c8:dd:56:51:a8:bc:df:00:f8:22:ca:03:
fd:18:16:ee:2d:99:a7:87:2f:b0:95:8e:36:a7:54:
3e:71:bc:f2:99:54:0c:02:6a:ea:b1:d2:00:90:20:
ae:50:aa:b0:63:ac:dc:08:a7:e4:a5:74:f0:95:6f:
86:21:88:26:81:64:83:86:8b:f2:fb:a4:36:93:96:
55:a8:c2:22:96:a0:93:ae:24:15:a3:df:d5:45:a0:
50:d6:77:e7:f4:ae:54:fc:94:e4:c6:c0:e5:67:bf:
cb:ec:16:37:d5:d6:63:61:35:62:06:56:67:49:c4:
58:b8:1a:34:61:d9:23:64:d3:0d:39:ee:e0:a2:41:
a7:e5:84:17:f6:66:8a:9d:55:6b:b0:6a:4d:12:f0:
78:9d:55:ce:d2:f7:dd:c9:43:6f:7c:32:cf:32:8f:
a1:30:64:76:07:0b:3f:ce:b2:72:77:8e:b6:3a:c3:
aa:a1:3b:e0:92:17:fc:f0:bb:1d:cc:41:df:eb:61:
e6:e6:70:c6:66:a4:db:67:90:f7:83:dd:75:98:8f:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:EA:3E:BA:19:84:C3:D8:22:BD:CE:0A:4A:99:41:48:E2:CE:AD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCACB716D75811ECA8AA5A14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.8.0/22
115.167.20.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3f:63:c2:de:08:bb:9f:f7:cf:89:9c:83:f7:7c:6a:61:66:
39:df:43:06:b5:65:72:36:11:41:33:b4:3c:eb:f7:5a:79:16:
d2:b8:64:a2:ff:bc:7b:c6:0e:b8:07:bb:5d:d4:2c:79:0b:07:
95:e9:69:45:23:9e:03:34:87:8d:5d:ea:83:14:0a:44:a3:56:
0a:cc:8f:9f:70:17:30:0f:b9:4a:55:bb:0c:88:c4:d0:d7:1d:
11:5e:92:48:42:5c:ea:54:75:64:e3:99:f8:2b:76:9c:8a:59:
5b:c5:c2:37:18:67:a9:9c:92:5f:29:8b:0d:9c:a0:e2:03:af:
1a:05:d7:7b:86:fc:17:77:8b:01:bf:a8:98:b8:cc:5b:84:64:
09:85:b7:86:6d:c8:2e:f8:c8:f5:7f:c3:5d:70:3a:d0:00:95:
1c:d8:1f:b7:fe:41:b0:af:91:df:ce:d1:cf:b0:51:0c:ec:81:
24:fd:05:b9:9d:bf:33:fd:0b:4a:f2:13:51:00:ff:3f:fd:d5:
56:62:88:06:89:99:dc:da:81:68:78:24:10:7b:1a:8c:20:c7:
cc:31:09:ca:64:11:c9:7d:25:db:7d:73:30:7c:cf:b4:73:86:
3a:be:6f:ec:8b:80:1d:6c:2f:c3:6a:0d:8d:a1:53:36:8b:0f:
ca:e4:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:48 2025 by rpki-client