Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFD91C58136911EF871A2D7EC4F9AE02.roa
File: DFD91C58136911EF871A2D7EC4F9AE02.roa (raw, json)
Hash identifier: LPRAS87GR6CGSECVuqMJyRccg7kxSW+bQgakaJnjthE=
Subject key identifier: DD:C4:7D:7C:9D:78:7C:A4:FB:51:39:FB:03:C8:74:0B:39:CC:C9:16
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 11F9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFD91C58136911EF871A2D7EC4F9AE02.roa
Signing time: Thu 16 May 2024 09:51:32 +0000
ROA not before: Thu 16 May 2024 09:51:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4601 (0x11f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 16 09:51:32 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6645d724-c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:0c:b7:53:e6:7b:8a:32:18:67:13:92:55:
ab:81:9b:21:9f:6e:3c:96:2e:ca:3e:05:60:2e:c3:
b5:58:11:2f:ed:16:16:53:bf:0f:73:ba:a2:48:bc:
9a:4a:16:8e:87:e7:d5:4b:6f:e4:eb:ff:a3:98:29:
c1:99:70:3e:e6:df:7a:c7:90:95:82:9f:7b:9a:8f:
6d:1b:5c:4e:34:34:b9:ab:32:72:28:3b:91:49:bc:
17:56:b5:d2:96:2e:89:7e:4f:02:b4:7b:69:eb:9a:
32:c2:6e:28:4c:fe:9d:69:84:4d:b8:74:61:ff:fb:
23:9c:04:47:e7:e3:e8:c7:3f:96:f6:c3:68:8a:6c:
5d:6a:f4:30:17:28:28:96:15:07:e1:23:f8:bb:06:
53:67:6a:72:e8:d8:d5:0a:eb:d8:c0:ef:3c:25:d9:
a4:ae:1a:ea:13:5f:ef:d6:f3:84:1e:58:ab:ec:4f:
7e:75:c9:48:d1:0f:dd:05:1c:9e:39:ae:55:0e:de:
90:5c:9d:02:e2:42:7a:b9:4a:7a:5c:45:07:49:cc:
8d:f4:a9:b7:1d:d5:86:93:07:8d:1f:88:14:1b:5c:
ac:15:6a:47:e0:b0:e8:42:5e:7b:28:5a:e6:07:c8:
e9:c6:92:d8:28:1a:b6:74:45:60:62:76:e5:8d:a0:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:7D:7C:9D:78:7C:A4:FB:51:39:FB:03:C8:74:0B:39:CC:C9:16
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFD91C58136911EF871A2D7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.234.0-113.203.240.255
113.203.245.0/24
113.203.253.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0/24
180.178.172.0/24
180.178.174.0/23
223.29.226.0/24
223.29.228.0/24
Signature Algorithm: sha256WithRSAEncryption
08:59:be:05:3c:74:a2:34:59:04:34:85:ef:88:7a:4b:61:e4:
be:c4:0f:d5:c2:e8:a6:5c:15:8c:9b:57:29:ba:6a:6e:ca:b5:
00:50:a6:cb:71:28:2d:30:37:2d:d2:90:ce:73:e4:20:8e:9c:
99:11:59:ba:ad:d6:47:52:b7:8a:0d:02:9f:9b:22:c9:16:c8:
cd:d9:af:5c:e1:b2:e3:56:59:7a:65:0a:51:75:7e:30:eb:56:
33:67:80:74:ae:b9:0c:9d:e2:6b:0b:b7:08:04:44:15:64:ac:
59:15:2b:23:fa:fb:3a:52:1a:72:35:01:96:8d:15:dd:39:8d:
95:a9:06:cb:6d:bb:63:80:11:8f:de:09:86:71:11:68:16:f4:
53:6b:ab:13:e5:1b:e3:c3:d9:51:7b:ed:28:45:cf:54:a0:0a:
44:ff:26:e9:ac:5d:ad:fc:c5:bb:c4:09:70:59:f7:3e:18:55:
4f:80:bd:25:56:ba:49:d4:eb:7d:52:4b:c4:4f:f8:12:0d:f7:
07:04:ad:d1:2d:9f:dc:b3:03:77:74:3a:36:6d:27:8f:ba:78:
17:ad:4e:9d:47:88:2c:5c:3d:b1:91:8b:62:e0:92:32:02:d9:
66:84:51:28:f6:b8:9d:9e:e6:b5:65:68:55:d2:73:17:94:d8:
a9:c2:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:28 2025 by rpki-client