Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E36B911C72CA11EC8CE7244BC4F9AE02.roa
File: E36B911C72CA11EC8CE7244BC4F9AE02.roa (raw, json)
Hash identifier: r/1jdwlITKl/rsYL2hsBA8KERp+EVK86rOw7Odf2Lsg=
Subject key identifier: BB:EE:D0:6F:33:8D:A9:66:3B:04:6C:74:29:3D:F5:4F:FA:0E:C7:48
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 05E5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E36B911C72CA11EC8CE7244BC4F9AE02.roa
Signing time: Tue 11 Jan 2022 10:40:27 +0000
ROA not before: Tue 11 Jan 2022 10:40:27 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 15083
IP address blocks: 115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 11 10:40:27 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61dd5e9a-5ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:67:ef:2f:92:67:a2:2e:68:3b:d1:1b:49:
10:82:2e:13:53:2b:c9:84:bc:64:7e:ec:7d:9e:ea:
8b:c0:a1:2c:ce:5a:e7:c0:5d:cd:d2:26:ce:61:a1:
0b:c1:6f:b4:3a:50:03:39:71:43:0f:10:57:e3:f2:
29:3e:7e:1f:fa:9a:23:12:1b:9a:b0:fa:da:ea:70:
df:29:04:93:df:4f:47:63:21:be:f8:ad:7b:eb:a7:
e4:aa:34:d8:21:00:26:0d:8c:ca:89:cb:d8:30:84:
70:50:8b:aa:16:a6:16:b6:8a:ed:98:c4:d9:47:3e:
2b:cd:d6:51:33:aa:dd:7b:4e:fc:2d:d3:58:bb:80:
48:39:5e:44:01:7f:6a:b0:10:7c:fc:fc:79:78:a2:
a6:1e:ce:1b:1e:bc:b0:73:75:bb:e8:b5:6c:65:ce:
f0:7a:61:c7:c6:67:d8:5a:f7:d6:a5:27:2c:69:0c:
31:6f:18:fb:ed:cc:ae:8f:41:bf:e8:6b:59:1b:94:
80:3f:df:22:21:db:9c:1b:7f:5b:10:87:1a:be:a0:
c7:5d:94:a3:0d:1e:ce:e6:76:7b:a9:36:3a:b0:02:
f9:9c:a8:4e:d7:cc:7c:f4:54:02:17:01:3f:f7:ad:
d3:8d:13:80:f3:23:17:45:c7:2c:0c:b4:1f:cc:37:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:D0:6F:33:8D:A9:66:3B:04:6C:74:29:3D:F5:4F:FA:0E:C7:48
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E36B911C72CA11EC8CE7244BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.16.0/21
Signature Algorithm: sha256WithRSAEncryption
20:a8:fc:bb:c6:c2:7d:2a:da:0a:eb:16:84:40:fa:7f:c0:d0:
82:63:8a:05:85:52:e0:fc:eb:cf:03:10:7b:db:93:e4:58:60:
7e:3c:2e:2e:a0:16:a6:ca:f1:c4:d4:bd:5f:cc:64:4a:a9:41:
94:8a:bf:e6:d1:18:ba:41:4b:0e:f8:69:f6:a6:cf:bf:28:da:
a8:a4:d6:bd:60:e0:f3:b2:f4:72:05:f4:49:11:63:52:8b:8a:
5e:c7:cb:52:36:db:1b:4e:03:fc:0f:5a:88:32:f0:ec:1d:58:
ef:3b:76:6f:a8:59:17:a8:03:47:2e:6e:ab:44:72:77:25:7c:
c2:25:40:72:70:4b:46:1f:f0:bc:41:ec:7d:d3:c5:cb:54:86:
70:54:5b:ef:d2:90:44:b7:8a:f8:d6:73:9d:e5:11:e6:db:f0:
7b:a1:6a:0f:b3:c7:96:26:7e:e8:71:43:71:62:8d:73:7a:50:
df:34:99:da:02:6f:17:61:90:b7:d3:96:97:6a:0e:78:8e:4a:
50:23:92:99:07:4f:c7:4c:cf:15:55:fc:b3:ac:44:3c:ca:5b:
cb:d1:da:f2:fe:29:61:6c:d2:0f:b8:6e:99:bc:16:c7:8a:83:
1b:d0:9e:1d:41:1a:eb:dc:21:2b:30:c9:f4:02:f6:a1:29:22:
a9:fb:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:04 2025 by rpki-client