Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBA43102721211EDB3677D2DC4F9AE02.roa
File: EBA43102721211EDB3677D2DC4F9AE02.roa (raw, json)
Hash identifier: ZqJMEG7P8a/o6xbPP8IB/s5ST52pQEtzej6pkOZzj/o=
Subject key identifier: 55:7B:2C:DF:0E:8E:9F:05:42:6F:25:E3:9E:94:2F:12:07:D7:8D:30
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 09F3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBA43102721211EDB3677D2DC4F9AE02.roa
Signing time: Fri 02 Dec 2022 07:28:31 +0000
ROA not before: Fri 02 Dec 2022 07:28:31 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 103.151.27.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2547 (0x9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 2 07:28:31 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6389a91e-bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:63:67:11:41:71:66:2d:8b:f4:8c:bc:63:
03:10:b0:13:52:3d:3b:92:0b:b2:51:e1:a2:b8:55:
99:b8:4e:2c:f2:d6:52:cd:8f:c1:05:c2:22:7a:b4:
a0:4b:43:c3:3e:52:ac:1c:f1:c7:a2:8b:2e:85:fc:
3b:84:2b:d8:f4:5c:1e:8a:ed:f9:f2:0e:3f:f1:20:
45:7c:b2:75:9e:c2:d4:55:f5:37:2d:28:be:38:35:
be:26:38:f3:f2:0a:cb:fc:2a:2d:39:57:86:61:6b:
68:47:19:e4:5d:a8:29:2e:85:8f:bc:66:32:92:30:
a7:78:62:83:e8:7c:86:92:7e:f1:16:77:19:b0:6e:
3b:39:02:8d:9a:b1:90:e3:a1:1d:a1:04:98:40:e2:
51:18:7e:73:09:45:e2:bb:d8:6a:af:89:36:9b:6c:
38:47:0d:64:c8:d5:ee:d6:e8:6d:bf:d0:5c:2f:1a:
a6:6f:ce:af:76:a4:5b:a7:60:f9:b9:e1:24:af:df:
91:93:9b:d1:82:af:c9:12:dc:94:5f:c3:05:42:52:
44:af:49:da:a2:91:ef:d3:46:40:68:b3:2d:e0:bc:
1c:77:2c:39:59:20:0d:61:e8:f8:cb:05:02:a5:29:
6c:9c:00:47:88:eb:63:05:cd:ab:cb:f7:ef:74:28:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:2C:DF:0E:8E:9F:05:42:6F:25:E3:9E:94:2F:12:07:D7:8D:30
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBA43102721211EDB3677D2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
115.167.48.0/23
115.167.104.0/22
115.167.112.0/22
115.167.120.0/22
175.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8e:ee:83:49:1b:39:bf:30:e5:aa:89:4d:79:dd:e6:ad:22:
2c:7a:a2:99:f4:51:f0:9b:9f:86:69:1c:e2:fd:c6:73:66:38:
81:8d:59:2c:96:e8:e3:92:07:bb:83:db:e1:d6:40:a3:75:0b:
46:ac:5c:95:8a:e1:8c:d5:83:84:13:07:24:30:5f:c2:fa:8e:
ad:aa:45:67:05:28:15:31:2a:bd:37:f3:50:14:cc:92:5f:ef:
05:7c:5d:53:dd:a5:bc:18:3f:0e:a1:10:61:72:69:49:85:01:
dd:d6:10:36:94:f6:f6:f0:c0:1b:36:89:42:17:41:81:66:18:
99:59:a4:22:5f:1d:4b:06:15:c5:ce:ce:d3:ad:84:cf:7a:35:
78:61:c9:c7:1e:b3:6e:fb:5e:75:46:39:35:5c:01:95:7b:77:
7d:c7:d1:94:b9:7c:b7:19:87:49:d5:d3:e3:02:fa:d8:3b:a3:
b1:5c:1b:0f:ca:3a:47:26:ba:0e:c0:66:bd:b8:3a:86:12:cf:
3d:b0:6f:65:71:1e:7d:41:67:0f:ab:8a:55:31:b9:bf:d0:e2:
b9:0d:6c:5b:f2:4f:50:1a:e2:4c:25:3b:1e:79:42:8d:bc:d7:
fa:bf:c5:19:96:4b:c6:59:7b:31:fd:7c:d1:f8:d2:02:d0:6b:
c7:d2:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:47 2025 by rpki-client