Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBFC93F033F711ED99403634C4F9AE02.roa
File: EBFC93F033F711ED99403634C4F9AE02.roa (raw, json)
Hash identifier: BrQHmKMKoCuoDOtLFDUQ9aaxhCbeekZkF1s0xHey4lc=
Subject key identifier: D4:E2:53:4E:DF:0C:2A:A9:F2:3A:E8:36:5B:CF:16:20:43:CA:FE:7D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0920
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBFC93F033F711ED99403634C4F9AE02.roa
Signing time: Wed 14 Sep 2022 06:39:03 +0000
ROA not before: Wed 14 Sep 2022 06:39:03 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 14 06:39:03 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63217707-3ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:3b:12:45:bd:d5:7f:47:63:e9:b9:18:9f:
e3:30:d9:52:87:12:d1:3b:6c:c4:17:39:57:5f:ba:
d4:f5:ea:60:d6:00:14:e3:1e:7f:32:d6:b2:ce:69:
e0:89:0c:42:63:84:bc:dc:e9:bb:e9:13:06:14:96:
3f:ed:f7:3b:ff:f1:0a:d8:14:f1:70:79:19:59:b1:
f9:a7:c8:7b:10:46:d8:cd:10:3a:67:8d:cf:57:53:
18:5f:01:08:b8:07:53:3a:30:66:85:c7:64:45:f7:
44:20:5e:2b:8c:e2:0a:40:2b:81:f7:bf:4e:69:11:
de:0c:9c:2f:34:9b:83:b4:a2:6b:30:48:3f:74:7f:
59:56:df:38:64:37:b6:de:d2:ee:27:1f:b8:43:11:
da:a5:e1:5a:89:a6:3a:d4:2a:db:f2:a7:72:a4:bd:
5b:f8:44:2c:b7:5f:a2:0c:a3:93:38:a9:c2:60:29:
d7:10:76:d8:9f:3b:89:26:c5:a7:27:aa:d6:51:1b:
52:ff:5d:d9:fe:84:53:b0:76:06:2f:75:88:60:98:
ae:80:36:af:0a:0d:59:18:02:79:54:66:74:e0:d6:
d8:6f:16:b2:78:f7:cb:c0:71:85:e0:b6:94:f7:97:
e7:41:f6:38:f8:6b:19:4b:ff:84:a1:f4:c7:97:1f:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:53:4E:DF:0C:2A:A9:F2:3A:E8:36:5B:CF:16:20:43:CA:FE:7D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EBFC93F033F711ED99403634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.48.0/23
115.167.104.0/22
115.167.112.0/22
175.110.96.0/23
Signature Algorithm: sha256WithRSAEncryption
57:23:da:8c:3a:90:72:8c:8a:a1:88:ee:51:21:d7:e5:61:1c:
b2:ac:b5:e7:f1:04:bb:77:dd:12:ac:ff:20:87:65:f1:f1:2c:
52:eb:32:ae:eb:5d:4f:38:4c:0b:42:1f:9b:76:85:83:85:7d:
e6:35:52:9a:0e:cf:23:2f:39:15:cc:09:6c:f9:d7:3f:93:d5:
80:7b:ec:9a:de:0f:6a:a6:46:53:ab:8a:fd:39:23:0b:67:05:
3b:46:2e:d6:24:df:d7:cf:04:8e:0f:70:99:a4:1d:2e:57:2a:
ca:c5:e1:e3:9c:1d:13:9d:93:d2:0a:f6:a5:63:82:ad:e9:23:
32:67:1d:ed:40:c7:45:77:d7:eb:ed:7b:67:98:d2:7c:a1:3b:
97:e2:f8:cb:ac:b2:7b:e3:36:8b:c9:45:91:1f:83:1b:5d:c0:
7b:7e:bd:4c:9a:7a:1d:9b:d8:ce:cc:9e:dd:24:4b:f9:ff:5f:
90:96:cb:93:30:8d:c5:4e:5e:4e:50:12:0e:69:5b:53:c2:4c:
52:19:2c:8a:1d:19:2b:d2:35:f6:8f:c3:a6:99:08:a4:2a:0e:
9c:d6:25:0a:86:c0:f2:73:43:97:38:0f:c1:c1:47:1d:22:ec:
c8:35:a2:79:35:bc:33:e5:33:f6:70:ce:87:79:35:f6:cf:15:
7f:06:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:02 2025 by rpki-client