Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC51553C07EE11EF9A061E49C4F9AE02.roa
File: CC51553C07EE11EF9A061E49C4F9AE02.roa (raw, json)
Hash identifier: XfCq9y70l0Wr07DbyjzCbeDL4dff6Q8v1O64u/fNF8o=
Subject key identifier: 47:FB:F1:95:D2:D6:36:4B:1B:83:D9:22:5D:E3:12:D6:71:7C:39:1F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 115E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC51553C07EE11EF9A061E49C4F9AE02.roa
Signing time: Wed 01 May 2024 19:12:48 +0000
ROA not before: Wed 01 May 2024 19:12:48 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4446 (0x115e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 1 19:12:48 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=66329430-c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:cc:c4:c9:29:f4:51:a3:01:5a:f4:b4:75:
ba:a9:5d:11:70:50:51:14:52:ef:4d:d7:34:24:e8:
3d:5a:46:9e:fe:0a:ea:bd:3c:92:c5:96:0c:b2:18:
5c:59:05:e3:8d:9d:6a:9d:7b:b6:df:02:19:36:f4:
5f:22:67:18:db:3e:19:01:48:d7:ce:bd:c7:a5:8c:
1c:7c:c1:db:23:73:e3:0e:a5:48:55:03:3b:ce:03:
68:ef:13:80:20:dd:96:4f:22:65:05:c0:ed:c4:88:
4a:dc:ec:29:de:52:2b:88:f2:c1:ca:d8:3e:ad:a6:
6d:3a:d9:48:c5:7d:91:36:fa:17:8e:5b:f3:6d:9b:
91:fa:b3:d7:5d:1b:94:6a:6f:63:8b:c2:5c:53:81:
28:71:d2:b0:19:87:cf:8c:f6:df:07:90:54:06:f0:
87:bf:fd:60:45:97:0b:16:40:72:40:ae:1b:eb:8a:
a6:12:2b:45:a1:ab:8d:7e:d8:4a:d2:62:82:22:d4:
3c:39:f6:26:3f:ce:b7:bd:0f:42:53:56:2b:94:62:
b0:7d:95:3f:a9:3b:63:67:b0:81:4f:39:45:f0:b1:
30:f7:be:a2:76:27:cb:be:ef:e2:c9:a6:71:66:48:
99:d6:14:c6:7b:02:46:26:9d:ea:67:5f:5d:9b:60:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:F1:95:D2:D6:36:4B:1B:83:D9:22:5D:E3:12:D6:71:7C:39:1F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CC51553C07EE11EF9A061E49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.216.0/23
113.203.231.0/24
113.203.250.0/24
115.167.49.0/24
115.167.78.0/24
175.110.68.0/22
175.110.80.0/22
175.110.97.0/24
175.110.109.0/24
180.178.142.0/24
180.178.152.0/21
202.92.18.0/24
202.92.20.0/24
223.29.225.0/24
223.29.227.0/24
223.29.235.0-223.29.236.255
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a5:bb:c0:2a:5e:ec:8a:32:fd:a3:c5:ea:10:d8:6d:80:92:
77:c0:71:46:a1:d9:d3:c9:2c:03:f6:dc:a4:00:2a:ea:52:2e:
f1:e6:3e:61:9e:97:2d:3a:82:cc:4f:4f:54:31:a3:2a:51:4d:
5b:77:0e:82:0d:3b:a0:68:94:09:dd:e3:e6:f6:de:17:48:b8:
8f:00:26:fe:d9:77:d0:ca:cc:c5:e5:81:fc:6b:42:d8:76:6b:
1d:f4:b0:c2:e1:7c:70:3c:d8:09:52:ac:07:f5:88:6b:41:89:
29:8e:53:73:c9:52:d9:92:18:b5:5b:3c:f4:9a:67:74:68:45:
15:ea:fe:46:0d:2c:f7:fe:a9:f9:91:bc:ac:9d:07:ea:d4:09:
72:ad:d6:12:b5:eb:09:f2:51:ce:34:45:83:63:63:c0:b7:03:
74:0e:1a:aa:e5:f8:73:ec:93:ea:01:5f:b6:76:c3:e2:7e:8d:
91:11:55:1b:bd:1b:13:05:8c:8c:4a:6c:be:ee:0c:60:5a:97:
c8:89:2f:79:82:60:56:63:c0:89:73:72:89:a1:4f:24:8b:b7:
1a:ec:57:1f:7f:57:09:6b:c1:99:57:44:46:e6:5b:d6:e6:8b:
d2:fd:be:ad:24:36:84:b2:0e:8b:93:37:21:18:30:fd:93:fb:
3a:e1:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:50 2025 by rpki-client