Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ECC5204A44F911EEA519C71DC4F9AE02.roa
File: ECC5204A44F911EEA519C71DC4F9AE02.roa (raw, json)
Hash identifier: GgavDQojCghhYpohAYCTKlFxmyjn58JbuWMPWb0IeuI=
Subject key identifier: 04:D2:EB:A1:7D:21:02:38:D7:58:E8:06:5B:55:38:25:67:B9:7A:21
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0CD1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ECC5204A44F911EEA519C71DC4F9AE02.roa
Signing time: Sun 27 Aug 2023 16:51:11 +0000
ROA not before: Sun 27 Aug 2023 16:51:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 27 16:51:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64eb7efe-d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:ba:d1:c7:87:0c:3f:48:47:68:29:6a:83:
d6:c1:46:a9:70:06:03:41:f8:96:c1:d1:3c:aa:71:
82:4d:d9:b1:6a:f2:6f:06:29:bc:8f:60:5c:da:d8:
3a:38:ba:e5:27:9d:3b:bc:3c:36:2b:6f:92:c8:2c:
26:31:87:11:67:46:4d:b0:b1:a3:b4:14:f9:d0:68:
97:fd:5f:c3:73:54:90:f7:4c:5d:7c:37:08:08:52:
8a:2c:65:78:94:0c:be:b8:32:3c:60:1c:3a:e9:8f:
32:3f:f9:7a:93:3f:c4:05:2a:91:09:dd:28:9f:9a:
01:4a:57:f2:44:d6:d1:d0:ec:fd:2a:9e:79:b8:66:
bc:2d:4a:1e:80:f0:43:fd:b1:b2:78:38:c0:67:5f:
63:19:fa:2a:14:75:5c:6c:60:cd:0e:d9:ea:11:d5:
c1:8a:2c:52:13:04:bc:b0:d0:a2:17:a8:f3:01:50:
5c:b3:7c:ae:03:aa:92:7d:67:85:b1:d2:0c:69:9d:
f5:6a:63:97:1a:d4:a7:36:78:85:21:ba:84:ed:c2:
73:bc:94:b1:b4:9d:9e:bc:fd:97:8d:67:5d:aa:c1:
30:20:69:23:cb:7b:7c:b4:8c:b1:5b:e5:fa:72:a8:
66:bd:eb:7c:33:c1:8c:16:1e:f1:d1:7e:14:6b:f4:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:EB:A1:7D:21:02:38:D7:58:E8:06:5B:55:38:25:67:B9:7A:21
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ECC5204A44F911EEA519C71DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.212.0-113.203.216.255
113.203.218.0-113.203.220.255
113.203.222.0/24
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.253.0-113.203.254.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.148.0/23
180.178.162.0/24
180.178.164.0/22
180.178.172.0-180.178.176.255
180.178.178.0/24
180.178.180.0/22
180.178.185.0/24
180.178.187.0-180.178.191.255
223.29.226.0-223.29.231.255
223.29.235.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:e9:12:db:0a:d6:92:9f:1b:37:57:0d:45:a1:34:46:46:
b0:05:23:b6:5e:c9:ca:2a:68:e3:95:30:a2:bf:52:12:77:71:
db:4b:23:46:83:72:4a:0a:e5:21:4b:27:8a:83:2e:a9:ca:ed:
98:a6:18:2b:2d:65:1b:b3:d4:7f:cb:ba:12:2b:4e:b5:b8:cf:
44:2a:c8:df:cf:ee:01:34:2d:88:90:37:1d:9b:5b:47:1f:d6:
7e:9f:fe:01:f2:57:10:a5:c3:98:c7:6b:65:ff:f9:2e:77:7c:
5c:c7:40:4e:ac:94:97:47:88:df:bd:8e:ec:e7:84:65:7a:f8:
2b:ea:83:47:ec:2f:6b:a7:00:21:39:a6:52:d2:05:d9:58:e4:
ef:db:99:0a:17:42:09:5b:c3:68:8f:74:1a:39:61:30:ba:c1:
92:94:b5:29:61:b7:fd:78:17:d8:c9:27:b0:4d:57:e9:0b:0b:
49:89:45:f7:37:2b:4e:dc:f7:55:4b:cf:67:2c:3d:57:76:23:
e9:d6:3f:0a:1e:77:6a:c0:17:cf:63:45:6d:60:b5:a9:db:2b:
a6:ca:5a:41:65:b9:fa:c2:10:ef:63:a6:eb:b1:88:dc:b6:c6:
a4:0e:ed:bc:ab:f9:17:f1:a7:20:98:b1:bf:e7:77:f9:17:d2:
4b:8a:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:41:13 2025 by rpki-client