Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CD9C7AAE7D2D11EDAFFEDF7CC4F9AE02.roa
File: CD9C7AAE7D2D11EDAFFEDF7CC4F9AE02.roa (raw, json)
Hash identifier: rKeML9I/c2vHzobMeiF0kEsAm6KHSuh2pILLHn8nsJQ=
Subject key identifier: B0:65:AC:85:59:30:BC:39:07:EE:B0:28:4C:FD:80:02:63:DA:D7:65
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A21
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CD9C7AAE7D2D11EDAFFEDF7CC4F9AE02.roa
Signing time: Fri 16 Dec 2022 10:38:40 +0000
ROA not before: Fri 16 Dec 2022 10:38:40 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
2400:9560:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 16 10:38:40 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=639c4aaf-f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:39:f6:e3:fe:a6:67:82:73:b2:6a:36:ac:
4a:07:86:27:6a:21:35:47:3d:4f:bf:d8:76:b0:ca:
f6:60:33:66:e1:9e:f0:84:dc:93:da:6c:5d:09:53:
4d:19:40:c0:8f:00:51:3b:4e:41:df:6d:59:1e:8f:
26:f8:d4:73:02:ba:09:2f:f2:4d:46:d0:13:fb:3c:
6d:0a:df:9d:a4:3b:a7:38:55:c3:9b:87:57:68:a3:
3e:ae:13:19:20:f0:0c:e4:48:a4:e6:8f:3b:91:af:
04:83:54:cf:59:88:e3:f7:8a:38:82:3a:cb:c7:3f:
d7:32:83:7c:01:7c:75:3b:49:53:65:07:6f:b9:a4:
69:8c:8f:44:28:c8:00:da:c6:cc:f2:ca:92:cf:be:
4c:1d:c3:80:f1:7b:fe:13:32:2f:ed:b4:e9:f8:95:
05:40:13:9e:c1:74:ea:0c:ff:a8:ef:28:f3:7e:93:
78:29:c5:c8:5a:33:9a:5f:42:31:5f:a7:31:00:68:
1f:10:75:ba:7b:79:8d:00:e2:d0:54:ac:bf:b1:fe:
00:ef:d0:11:18:63:94:a9:09:06:4a:98:22:58:57:
68:3c:d2:db:da:5a:51:7a:9c:6c:cd:03:57:0e:19:
00:3a:68:43:24:b0:2f:d0:3c:de:39:f8:56:9c:d3:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:AC:85:59:30:BC:39:07:EE:B0:28:4C:FD:80:02:63:DA:D7:65
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CD9C7AAE7D2D11EDAFFEDF7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.2.0/24
115.167.4.0/24
115.167.72.0/22
115.167.77.0-115.167.78.255
115.167.108.0/22
115.167.116.0-115.167.123.255
115.167.126.0/23
175.110.64.0/22
175.110.80.0-175.110.91.255
175.110.96.0/24
175.110.105.0/24
175.110.107.0/24
175.110.111.0/24
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
2400:9560:9::/48
Signature Algorithm: sha256WithRSAEncryption
19:99:40:f5:63:8d:c8:60:ed:bc:9d:b0:2d:09:e3:fe:70:73:
a1:af:06:a0:32:e3:07:2c:c9:3d:d1:cd:b8:27:4c:4a:2a:db:
6c:b4:21:bf:96:62:94:29:7c:55:ce:32:18:e1:cf:13:e0:6c:
e5:19:35:69:16:4c:60:7f:16:1a:0b:fb:bb:a1:70:d2:30:38:
0b:b6:7a:85:f6:cd:c1:9a:35:bd:13:21:79:bb:71:d2:2d:88:
45:74:33:c5:a5:5a:41:59:27:23:bd:1b:f5:32:3a:44:a5:88:
81:a7:c5:08:41:f4:f8:a7:9b:4e:4b:e7:f3:b7:41:cf:9d:3a:
72:3d:bf:05:3d:7f:f7:99:f8:ca:e6:17:52:ca:18:3f:93:db:
04:95:43:68:a5:70:0a:61:63:f2:ec:68:85:0a:87:e6:f1:2d:
69:a5:1c:2a:34:ed:33:3e:27:a5:91:84:dc:7a:e5:c2:54:d6:
b7:7b:44:05:80:e5:cf:ef:7e:54:5b:ae:bf:0e:f6:e2:15:cb:
97:91:8f:e9:56:f4:c0:32:4b:ad:dc:32:cc:dc:d9:8a:62:b3:
c1:e1:ad:8e:69:e9:1a:89:16:05:8a:62:19:cf:bf:be:2d:21:
44:0b:a6:80:a7:2f:72:26:eb:b7:10:c6:8f:70:40:3e:1f:9e:
95:b3:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:31:38 2025 by rpki-client