Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E9C9D4FC3A9711ED99A1061AC4F9AE02.roa
File: E9C9D4FC3A9711ED99A1061AC4F9AE02.roa (raw, json)
Hash identifier: VhEk6U3veydgtFSpJvMO4Zfe7CY39eyS2Tql/9Ecucw=
Subject key identifier: CB:2E:D8:0A:C3:6A:4F:5F:27:08:D3:D1:F7:9C:CD:F2:33:D0:27:B1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 095C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E9C9D4FC3A9711ED99A1061AC4F9AE02.roa
Signing time: Wed 28 Sep 2022 08:40:43 +0000
ROA not before: Wed 28 Sep 2022 08:40:43 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.124.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
2400:9560:1::/48 maxlen: 48
2400:9560:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396 (0x95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 28 08:40:43 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6334088a-e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:0d:16:33:7d:cd:c3:55:f7:76:0d:49:be:
c0:91:6d:00:30:b8:bc:18:0f:53:b9:ed:de:c4:6f:
57:37:8d:57:ce:43:40:3d:66:a8:3f:ac:66:22:6e:
2a:26:9e:14:5e:41:f0:da:1d:52:92:97:7a:a3:74:
42:af:85:6a:e6:af:ce:e2:a7:a1:36:fc:73:5f:ba:
5e:91:3c:c4:c5:a7:27:25:27:9b:75:d0:9b:60:88:
c9:9f:ab:f9:d2:24:e1:e9:29:36:3d:4b:ca:92:b4:
4c:e5:05:99:c1:48:f1:b8:a3:c8:d3:08:c0:05:75:
bf:d1:2d:62:68:b9:2d:e3:4f:9c:1e:eb:cd:a3:10:
33:db:e0:8c:fd:19:1e:d0:f0:d7:64:c9:65:8e:b2:
96:a0:c8:d9:69:93:ae:23:4d:db:35:ce:02:88:ae:
b6:61:45:56:36:73:82:73:6a:fa:26:ed:26:c5:e1:
10:08:1b:9d:d2:38:c7:68:9e:1e:b4:35:2b:0a:f5:
07:25:90:df:0b:2c:c6:29:41:82:40:24:52:5a:dd:
28:78:a8:cc:f2:e4:0e:45:6f:b2:c1:cb:a0:1a:77:
0f:1f:fa:b9:55:f1:0d:95:d4:f6:b0:61:ea:fd:65:
eb:c7:2a:d5:f5:67:c2:f5:cc:81:e7:37:d5:c2:4a:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:D8:0A:C3:6A:4F:5F:27:08:D3:D1:F7:9C:CD:F2:33:D0:27:B1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E9C9D4FC3A9711ED99A1061AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.50.0/24
115.167.72.0/22
115.167.116.0/22
115.167.124.0/22
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
202.92.16.0/23
202.92.23.0-202.92.31.255
IPv6:
2400:9560:1::/48
2400:9560:5::/48
Signature Algorithm: sha256WithRSAEncryption
75:78:f4:06:40:95:ad:ee:9f:2d:78:5c:5b:6c:24:a1:56:7b:
a2:83:06:b4:58:25:e3:e4:8b:9d:33:fc:2a:3e:37:87:eb:de:
88:30:44:ab:31:d9:c5:78:ee:84:d6:75:d1:ea:98:1b:60:4b:
84:61:33:25:87:18:fc:0b:15:7f:81:97:c2:79:47:79:e8:1e:
58:cc:a7:99:92:ee:fb:2c:38:cf:c4:83:53:de:54:44:94:27:
53:e1:1e:44:6b:b2:a7:89:13:10:44:96:1f:e6:66:5b:88:89:
03:a1:65:2b:41:c4:fe:38:e0:c3:31:cf:1d:62:7a:a2:36:b9:
92:7e:7b:c7:48:40:75:af:a2:47:dc:80:aa:af:7c:92:e1:cd:
9a:3a:08:f8:20:9f:1f:69:a9:3d:a3:f4:4c:97:b3:6d:6f:0c:
3d:ef:4e:2d:f5:fe:4d:a3:fb:96:2a:f4:3a:b1:d6:51:11:56:
98:73:28:e9:33:db:81:ff:06:59:8f:c8:34:9c:95:7d:4e:99:
d2:68:b9:8f:a7:7c:9e:93:c9:8d:f0:9c:1a:27:71:2c:0f:19:
a5:e8:60:3d:1c:ed:6c:3f:be:41:99:c2:f4:27:f3:2f:a9:d3:
3f:16:5b:93:08:68:84:e9:5f:99:8a:e1:39:00:e5:27:3e:0e:
fb:99:5c:b8
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwOTI4MDg0MDQzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzM0MDg4YS1lODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT4NFjN9zcNV93YNSb7AkW0AMLi8GA9Tue3exG9XN41XzkNAPWaoP6xmIm4q
Jp4UXkHw2h1Skpd6o3RCr4Vq5q/O4qehNvxzX7pekTzExacnJSebddCbYIjJn6v5
0iTh6Sk2PUvKkrRM5QWZwUjxuKPI0wjABXW/0S1iaLkt40+cHuvNoxAz2+CM/Rke
0PDXZMlljrKWoMjZaZOuI03bNc4CiK62YUVWNnOCc2r6Ju0mxeEQCBud0jjHaJ4e
tDUrCvUHJZDfCyzGKUGCQCRSWt0oeKjM8uQORW+ywcugGncPH/q5VfENldT2sGHq
/WXrxyrV9WfC9cyB5zfVwkpxawIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFMsu2ArD
ak9fJwjT0feczfIz0CexMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTlDOUQ0RkMz
QTk3MTFFRDk5QTEwNjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYAGCCsGAQUFBwEHAQH/
BHEwbzBTBAIAATBNAwQAc6cCAwQAc6cyAwQCc6dIAwQCc6d0AwQCc6d8AwQAr25o
AwUAr25rAgMFAK9uaw4DBQCvbmtyAwQBylwQMAwDBADKXBcDBAXKXAAwGAQCAAIw
EgMHACQAlWAAAQMHACQAlWAABTANBgkqhkiG9w0BAQsFAAOCAQEAdXj0BkCVre6f
LXhcW2wkoVZ7ooMGtFgl4+SLnTP8Kj43h+veiDBEqzHZxXjuhNZ10eqYG2BLhGEz
JYcY/AsVf4GXwnlHeegeWMynmZLu+yw4z8SDU95URJQnU+EeRGuyp4kTEESWH+Zm
W4iJA6FlK0HE/jjgwzHPHWJ6oja5kn57x0hAda+iR9yAqq98kuHNmjoI+CCfH2mp
PaP0TJezbW8MPe9OLfX+TaP7lir0OrHWURFWmHMo6TPbgf8GWY/INJyVfU6Z0mi5
j6d8npPJjfCcGidxLA8ZpehgPRztbD++QZnC9CfzL6nTPxZbkwhohOlfmYrhOQDl
Jz4O+5lcuA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:30 2025 by rpki-client