Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
File: C3918600E4C311ED8A8CDA83C4F9AE02.roa (raw, json)
Hash identifier: BzL91tfgwvlkzpR8jL1OI1hL/7ON0ii9UoIm5D/kVjo=
Subject key identifier: ED:8A:D6:1E:C2:28:F8:57:7B:C1:FC:27:A1:C6:AA:90:5D:59:F8:FD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B37
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
Signing time: Thu 27 Apr 2023 06:40:54 +0000
ROA not before: Thu 27 Apr 2023 06:40:54 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
175.110.98.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 27 06:40:54 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=644a18f6-4488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:95:09:f0:e6:ad:c9:c8:2a:c4:3f:90:83:
59:ab:38:17:09:e3:7f:58:5c:74:a8:5f:54:1b:16:
83:fc:89:ea:13:36:5e:85:2e:83:09:57:95:c3:d4:
15:46:d0:ab:e7:0f:8c:cb:39:69:5f:f1:39:a5:3d:
03:ca:df:ee:01:96:e0:c9:95:22:12:f4:59:39:fa:
96:6b:34:53:b6:d7:13:cd:be:02:36:c1:3a:02:d6:
f3:14:46:e4:59:a3:44:98:33:92:11:9b:2b:ca:87:
c3:14:20:19:00:24:62:9a:cd:e7:2a:a9:6a:74:ff:
c6:fb:40:00:c1:ae:bd:ae:c0:92:77:49:4b:a0:ea:
77:52:f3:5e:85:1e:16:6e:67:96:a1:6b:33:bd:7e:
db:7b:4d:4b:9a:6a:37:c5:d4:04:5c:44:a2:b5:83:
76:00:db:7e:09:d6:a9:47:2f:03:5b:ad:43:8b:a7:
60:d4:35:80:c2:8e:cb:12:4c:9e:bb:8c:f9:7f:c4:
09:a8:43:5b:40:58:3e:b1:b9:5b:fa:20:cb:eb:98:
cc:70:b7:79:06:1e:16:7a:59:70:85:1e:14:41:14:
2b:61:a9:3d:c1:dd:d9:5f:2b:3b:6c:ff:e5:a4:07:
c8:9f:13:1c:e2:5d:fe:b4:85:5c:c4:e1:41:4b:c6:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:D6:1E:C2:28:F8:57:7B:C1:FC:27:A1:C6:AA:90:5D:59:F8:FD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.208.0/24
113.203.210.0/24
113.203.218.0/24
113.203.220.0/24
113.203.222.0-113.203.225.255
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
113.203.252.0/22
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
175.110.98.0/24
180.178.148.0/24
180.178.151.0/24
180.178.162.0/24
180.178.173.0/24
180.178.179.0/24
223.29.226.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
a4:ef:8d:63:dc:28:5a:42:d8:79:8c:5d:96:9e:92:4a:68:92:
d3:06:60:22:a2:e6:4b:50:65:e6:33:c4:ab:ff:18:27:48:f6:
b0:1c:39:cd:5a:02:8f:3d:3e:5c:7b:16:4d:4f:29:01:8c:c0:
79:a0:8d:55:45:f0:3b:84:03:88:c3:1b:b5:fb:01:50:13:45:
07:f6:ea:63:c2:6b:56:15:7c:a9:74:19:ff:0c:ff:3f:82:fc:
d1:03:4c:80:ad:ae:f6:0f:65:d7:82:2b:b9:7d:e5:20:cb:f2:
03:59:52:24:f6:57:2f:20:42:f8:6a:4b:d5:35:a6:bd:0c:ce:
53:c0:2d:5e:3f:bd:76:d2:21:a2:f6:40:94:48:b8:af:66:bf:
cc:11:8c:97:66:43:6d:0e:5d:7c:6c:c7:8d:ac:b3:ae:98:9b:
33:61:df:ca:af:d0:08:61:cd:07:b2:5c:a9:7b:73:42:4c:10:
f4:90:ba:f8:81:81:1b:88:0a:92:08:ef:76:c7:14:f3:ed:04:
a3:49:de:bc:8c:82:dd:2c:8e:00:71:47:f4:1a:fa:41:ca:ed:
48:66:b3:d1:28:f2:ea:c3:bb:ab:73:1e:f5:df:5a:af:2e:85:
d9:63:cd:86:c4:d3:c2:7a:9c:cf:92:7c:41:d2:ca:b2:20:ed:
ec:26:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:29 2025 by rpki-client