Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
File: BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa (raw, json)
Hash identifier: 3LAr698KKAy3vtLvLSMZ4DcXX5+YErY3Y+GxzMCCJoU=
Subject key identifier: 3B:19:09:1F:5B:7E:E5:5C:00:6B:A5:F6:C5:18:9F:F5:A3:A8:1A:9F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0AEF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
Signing time: Wed 19 Apr 2023 10:19:59 +0000
ROA not before: Wed 19 Apr 2023 10:19:59 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 149009
IP address blocks: 180.178.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 19 10:19:59 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=643fc04f-2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:91:67:73:e9:41:6d:de:89:92:1c:a9:30:
20:45:ce:94:ac:97:37:b8:21:95:ef:38:13:c6:1f:
7c:81:98:c6:2e:53:41:ea:71:39:b8:67:81:5c:0f:
ad:b4:e1:45:88:f4:fc:0e:e5:8b:1f:dd:9a:8a:4c:
64:75:45:ee:e0:2c:d0:48:50:4e:22:b9:28:26:86:
9e:c4:56:6a:18:9a:d0:95:a3:d8:de:b4:d9:e4:c5:
d9:df:61:73:05:e8:2b:9a:fb:bc:1e:82:15:18:53:
b2:ba:0a:d1:de:a3:5c:4a:21:d9:de:ac:4c:1d:76:
45:d3:75:7f:5b:75:ba:c3:8f:16:c6:4f:b0:1f:d8:
ec:ba:ac:65:cd:28:39:e4:34:49:3b:ce:39:4b:c0:
73:ad:64:f9:12:05:e7:d3:70:34:38:8e:16:d9:68:
0b:3b:5b:05:88:5d:50:f7:76:d3:a1:6a:66:2f:29:
25:cb:72:3b:bf:3a:94:43:f1:b1:eb:7e:86:c2:10:
03:89:05:87:f3:0e:be:f2:0f:4f:26:b8:f0:e4:9c:
5b:a7:a8:b5:9f:50:06:82:67:18:da:78:fe:e9:72:
51:a8:21:9e:2a:47:fd:85:20:69:f7:53:50:8d:8f:
a0:d5:68:a0:39:d1:ba:80:75:31:7e:f4:fa:27:d4:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:19:09:1F:5B:7E:E5:5C:00:6B:A5:F6:C5:18:9F:F5:A3:A8:1A:9F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cf:19:26:4d:d5:87:b9:b2:69:92:c4:52:92:fa:8a:f9:ba:
4d:f8:e7:76:38:02:03:d5:eb:97:cb:78:c1:5b:b1:78:25:0f:
a6:1a:54:b0:8e:fb:da:2e:55:b0:8c:fe:ff:4b:30:94:e3:1e:
c9:56:b6:ae:e6:a8:c2:7a:68:70:27:9f:82:68:07:6b:48:fe:
e7:44:30:fb:25:41:23:68:4a:a0:01:4c:57:3e:fa:df:19:28:
0c:7c:ac:c7:82:9e:ae:5d:04:f8:a8:cb:fe:9e:cd:e0:0c:e5:
5d:82:fa:e6:7a:48:a8:44:dc:22:48:d6:db:c9:96:4a:64:ef:
b6:cb:81:0f:de:c9:33:36:84:7c:22:71:2d:89:2b:ea:38:71:
f5:74:b2:f4:f9:86:47:32:1e:3a:5f:69:19:4d:ca:89:9c:30:
53:02:b3:7e:93:b7:39:29:ca:c0:91:f1:53:34:59:33:3f:9c:
01:a9:d2:06:0d:41:59:29:a3:df:42:f8:a4:78:30:01:76:e3:
0e:80:9b:ad:d5:3a:df:cb:f7:ff:dd:ea:5f:77:80:fd:37:a0:
a3:52:6e:8c:c1:cd:0f:ef:4b:c4:93:c6:dd:08:1d:da:3b:63:
db:60:89:00:5c:d1:5b:62:92:90:09:c8:cd:37:b7:51:cd:95:
d8:ff:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:13 2025 by rpki-client