Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD0C391E136711EFAB807A7AC4F9AE02.roa
File: BD0C391E136711EFAB807A7AC4F9AE02.roa (raw, json)
Hash identifier: +Hf1XJEAS+l2xUijDOrX3Qj1hRVq+irPNijrH1pJ5Z0=
Subject key identifier: DE:03:18:7F:AF:9C:36:ED:E5:B3:33:F3:21:08:FE:EB:7E:5D:97:C8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1206
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD0C391E136711EFAB807A7AC4F9AE02.roa
Signing time: Thu 16 May 2024 10:13:38 +0000
ROA not before: Thu 16 May 2024 10:13:38 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4614 (0x1206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 16 10:13:38 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6645dc52-3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:b3:8a:71:58:de:15:26:c7:a8:77:5f:3a:
58:1c:46:d7:af:15:ed:f0:b2:eb:45:0f:db:99:87:
f6:45:8f:ca:c9:5a:8c:15:af:fe:aa:66:44:85:70:
77:fa:f5:c2:01:9f:9e:ac:64:84:5a:9f:5b:f7:79:
21:3b:b8:af:4b:b9:5e:06:b5:5b:af:6c:7c:fb:11:
3b:16:2c:b3:db:84:10:86:ba:12:24:7d:dd:fa:1f:
19:e5:e8:ab:28:dd:f6:52:31:a9:32:62:55:a6:4f:
54:14:99:0b:08:ae:7e:e3:8f:43:a6:8f:79:02:27:
14:83:18:94:69:00:40:88:25:c0:22:d8:c3:02:fb:
18:0c:13:ba:9e:3f:21:4e:f6:04:24:a2:7b:4e:4d:
c6:c5:b0:3c:51:c9:b4:4a:da:5b:e2:4f:55:1d:8b:
aa:e7:be:5a:e3:11:30:41:2c:d9:e8:58:28:ab:cd:
8e:2a:82:db:0d:ce:50:44:85:8e:ce:23:3b:be:0d:
cc:15:63:ee:08:f5:f2:e3:85:ed:f0:38:2d:03:12:
b2:bb:c9:11:ad:2f:38:70:59:f2:c2:6f:a8:94:d9:
bb:c8:b2:45:ba:c5:76:e9:10:8a:26:bf:0f:c5:13:
7d:64:fe:f7:82:fd:d7:c3:78:76:c5:08:d8:5a:dc:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:18:7F:AF:9C:36:ED:E5:B3:33:F3:21:08:FE:EB:7E:5D:97:C8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BD0C391E136711EFAB807A7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.171.255
180.178.176.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
b7:fa:da:94:dc:35:61:73:8d:3e:97:a7:5f:77:10:cb:a3:c1:
c1:43:b7:47:68:6f:22:d6:fd:7e:f8:2c:67:6d:71:3a:b3:c1:
75:a6:78:e7:55:b9:12:74:94:aa:1b:89:b1:e1:79:43:36:c1:
14:84:11:a8:ed:c8:b7:6c:f7:aa:68:50:ea:66:04:fb:69:5a:
df:a2:22:24:c2:63:a9:64:b2:43:05:9f:d6:aa:52:15:f5:61:
a4:bf:6d:c5:92:ad:7e:76:8d:ce:c7:eb:ce:37:bd:15:c1:0e:
bc:78:3b:05:04:86:b3:87:6f:8c:eb:a0:46:f2:81:1a:d8:c4:
c1:60:07:df:b4:03:96:4e:8c:ee:01:24:49:93:ea:65:d7:fb:
84:a9:63:23:7b:b5:b7:cf:16:88:f1:2a:ca:69:88:85:df:80:
90:e2:94:ba:95:98:37:e0:3c:a0:ff:ae:92:6e:1f:e6:85:61:
67:f6:7c:f5:46:b4:07:ec:de:83:34:4f:7a:52:32:da:e0:a7:
95:6c:73:7d:12:a9:78:b6:28:7b:b4:5f:6b:90:0d:68:36:f9:
62:eb:2f:0d:17:33:80:70:d0:f0:dc:4a:99:6f:66:ab:b5:a4:
7c:6e:dd:e7:18:eb:f5:84:21:25:9e:aa:48:ac:86:6e:37:69:
4b:22:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:08 2025 by rpki-client