Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1EBA09C0E6211EDB98DEA0DC4F9AE02.roa
File: D1EBA09C0E6211EDB98DEA0DC4F9AE02.roa (raw, json)
Hash identifier: szf1k07cZbRSiZKhjK5J+4yI7/QzUl+SqLR5243CvJE=
Subject key identifier: 9D:7C:9B:01:8A:7C:74:91:A8:19:A0:F1:03:67:B7:1D:6E:76:C2:62
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 086D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1EBA09C0E6211EDB98DEA0DC4F9AE02.roa
Signing time: Thu 28 Jul 2022 10:48:31 +0000
ROA not before: Thu 28 Jul 2022 10:48:31 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 175.110.64.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 28 10:48:31 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e2697f-8c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:46:40:ba:15:14:ce:4d:ab:c6:a5:06:ad:
a7:98:d0:94:1d:8f:52:c5:cb:73:cd:2d:43:eb:b7:
33:02:de:92:af:fe:06:ff:3a:81:10:49:3f:96:e5:
69:31:79:d4:14:57:9c:db:2a:02:6f:fc:01:29:e4:
a3:77:14:9f:8c:a8:93:14:34:cc:fb:2c:70:f6:d1:
cf:63:57:c6:d0:48:7f:d2:c6:9d:4c:ba:0b:80:48:
13:fa:e0:08:6f:0f:56:b1:3b:28:99:a0:1b:6f:a4:
73:1a:ca:61:76:05:eb:c4:0e:9b:63:db:1e:9a:64:
83:18:4c:2f:b6:b5:6d:53:85:e0:ba:07:0f:37:01:
04:64:57:03:26:7c:b8:37:bc:0f:dc:b7:b2:49:45:
e2:1b:58:9a:c3:e6:b5:b8:45:77:85:c4:e8:cd:0c:
3d:41:7b:46:f5:af:b1:b1:48:80:81:a4:54:e6:9b:
21:86:95:3f:95:72:19:9d:2a:c5:50:49:f0:20:29:
ba:1d:62:9e:0f:71:0a:9b:41:cc:47:79:42:2b:3e:
a7:38:f2:d8:11:ce:79:9b:d7:95:a0:3c:17:cd:12:
43:43:ec:e1:ca:e1:5d:28:cf:9a:8d:e8:ee:d6:12:
7c:d8:2b:f5:57:d4:22:2b:8d:bc:92:c4:4e:90:c5:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:9B:01:8A:7C:74:91:A8:19:A0:F1:03:67:B7:1D:6E:76:C2:62
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D1EBA09C0E6211EDB98DEA0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.110.64.0/22
175.110.80.0/21
Signature Algorithm: sha256WithRSAEncryption
14:12:05:fe:12:e8:10:0e:8c:44:21:ce:0b:4c:78:22:f8:98:
de:04:c2:fc:0e:12:d3:d6:4a:b8:5a:68:b0:98:a1:1b:b7:41:
b4:c5:a8:10:82:c9:d9:95:e3:3c:34:fe:67:8f:dd:98:32:08:
db:1b:86:b8:ab:0c:b6:c8:ef:05:f3:35:88:03:d6:06:ff:31:
b0:88:df:b2:bd:72:fe:d4:5b:b2:fd:c6:8e:f7:56:5b:f0:95:
d9:ab:bc:1c:bc:03:64:ae:23:90:14:5e:78:3c:c5:a5:26:37:
ad:c5:c6:75:b0:81:41:cd:5d:b3:3b:a9:f5:46:4d:7b:e0:ec:
c3:a5:e1:92:b4:23:2c:dd:30:a9:c9:67:77:f8:79:54:85:18:
d6:43:2e:b1:24:39:dc:1f:98:3e:53:b6:85:57:c4:ee:cb:f0:
b1:b7:b3:45:b9:e6:4b:e9:bd:7d:7f:18:28:73:8d:24:bd:8a:
33:6d:04:ea:b6:5f:d7:3d:23:da:6d:b1:aa:e7:55:db:8f:e1:
3d:04:b1:b3:c6:20:8d:9c:98:bb:c7:4e:f6:7c:e5:cf:61:5c:
f0:55:9c:58:4d:bb:f9:e1:06:a4:11:1e:7c:13:96:1a:dc:59:
94:1d:3e:fa:8b:25:bc:80:ba:9f:65:8b:06:db:d6:be:a0:24:
5b:f8:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:41:13 2025 by rpki-client