Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BDCBFDD2D75811ECA8AA5A14C4F9AE02.roa
File: BDCBFDD2D75811ECA8AA5A14C4F9AE02.roa (raw, json)
Hash identifier: QPDRCdYzjMhusGcPB8QuTDRIW7RIWc86okD/XL1g0CU=
Subject key identifier: 4C:E8:8F:28:AF:9B:26:97:A7:3E:8B:E7:F4:F6:61:80:A5:AE:01:8E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0761
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BDCBFDD2D75811ECA8AA5A14C4F9AE02.roa
Signing time: Thu 19 May 2022 09:47:48 +0000
ROA not before: Thu 19 May 2022 09:47:48 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 13768
IP address blocks: 115.167.7.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 19 09:47:48 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=62861244-95c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:31:ef:48:9c:42:ce:fa:f9:ab:a0:0c:8c:
46:ba:b9:a2:36:79:af:df:1d:cf:9c:08:12:9d:9a:
e8:5f:1c:4b:eb:5a:ff:53:1a:4e:4a:af:ba:dd:b2:
38:20:bf:f3:5c:80:45:47:77:a9:8c:51:59:c6:64:
26:8b:ed:8c:8c:ca:30:d1:09:3e:1b:d0:32:6b:f3:
69:a7:c6:63:27:40:15:91:4b:5e:9b:61:bc:e8:90:
3c:84:f9:52:df:0f:41:e8:d9:de:7d:2f:03:cd:56:
57:d7:91:94:f9:63:c0:6e:48:88:f6:91:5a:fd:fa:
8e:ac:7a:d0:9c:fa:66:91:b6:3d:64:ed:33:a0:69:
54:0a:8a:11:1d:31:ab:5a:4f:f0:bd:29:ae:69:55:
43:90:82:ac:06:cd:d5:bf:e3:0a:78:30:1e:f2:85:
23:4c:cd:bf:0d:de:1d:ec:25:95:f0:16:32:2b:26:
14:02:6a:7c:69:e2:32:30:f2:88:34:0f:4b:4f:0a:
f5:09:ba:80:79:0c:93:15:e9:83:e8:b5:77:61:5a:
ca:58:ec:55:ca:12:16:1c:83:16:c1:0b:54:d8:6a:
8b:28:90:5e:af:fc:4a:a8:00:7e:19:7e:4a:e4:fc:
34:e0:8b:98:ea:7a:36:69:40:79:ca:2b:e0:5a:5b:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:8F:28:AF:9B:26:97:A7:3E:8B:E7:F4:F6:61:80:A5:AE:01:8E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BDCBFDD2D75811ECA8AA5A14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.7.0/24
115.167.12.0/22
115.167.52.0/22
115.167.77.0/24
175.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:ac:6c:a1:73:64:fd:66:50:3f:ef:46:a2:1f:91:7d:f2:1d:
79:a8:7d:ce:6a:14:08:b3:0b:a3:68:8c:bf:ac:ff:69:17:ad:
02:0b:43:82:b3:6e:2b:cc:d6:08:cd:f9:99:43:6c:66:a0:49:
a2:c3:b6:69:7f:95:c2:b1:30:49:a4:48:f6:d4:c7:2b:0b:a8:
a7:97:de:89:41:c2:a0:7d:db:26:c5:38:33:f4:1d:89:e2:91:
ce:a9:07:98:a3:4c:68:31:b8:72:86:ad:d8:d7:f7:5a:6b:21:
fe:b7:55:9d:b2:72:df:13:d0:40:17:51:2a:be:1d:85:99:c9:
61:96:8b:49:9f:c0:f6:c1:a8:b8:f6:5c:ad:4c:71:94:17:ab:
50:33:22:d1:a3:52:00:8c:51:6d:f6:02:dc:56:b5:d5:36:12:
ea:d0:06:60:26:ad:80:5a:eb:72:62:68:82:46:be:16:84:0e:
2f:64:e3:bd:f4:b7:cb:9b:ec:d4:6b:d4:d8:da:d1:e1:12:b5:
1a:06:f3:c9:3a:20:3b:c9:6b:70:9c:24:bb:49:b0:91:09:f1:
b3:5b:33:b8:90:9d:26:39:7e:4f:18:09:4e:d1:e7:e1:df:b0:
5e:b7:98:a0:a8:c3:0c:6f:15:05:a4:5a:bb:da:72:1f:2b:a9:
be:d8:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:40 2025 by rpki-client