Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4E040B8AA2D11EEA9225120C4F9AE02.roa
File: F4E040B8AA2D11EEA9225120C4F9AE02.roa (raw, json)
Hash identifier: 8J4oL6+q39d419ZxGiQ+cPVxRs1vneddLQ5eddrUyeQ=
Subject key identifier: C9:6E:C1:FB:EF:CB:52:5C:63:51:A7:CD:AE:29:76:F4:77:74:E0:3E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EDE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4E040B8AA2D11EEA9225120C4F9AE02.roa
Signing time: Wed 03 Jan 2024 11:48:05 +0000
ROA not before: Wed 03 Jan 2024 11:48:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3806 (0xede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 3 11:48:05 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65954975-2c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:86:a3:61:5a:d7:2f:d6:f3:7c:b0:79:fe:
64:fb:71:c0:1c:89:7b:33:b2:99:f5:15:73:7a:fd:
3d:45:60:35:c4:c2:4c:eb:f5:61:58:23:4a:50:68:
f1:f8:29:05:c4:cb:a1:d9:1e:55:4c:fc:48:4b:15:
01:26:7e:8e:c3:ed:27:46:f1:1e:d1:bb:55:c9:e6:
ea:85:7f:70:6d:b1:1d:4e:aa:21:6a:11:e0:34:c7:
fa:bc:40:23:41:a6:c6:e7:b6:fa:82:4a:90:37:6d:
ae:84:6a:82:0c:cc:f6:47:7f:19:50:80:3b:3a:a2:
46:ae:17:f5:c7:22:72:b1:80:a5:67:74:ef:71:a8:
bc:45:3d:41:66:ec:d6:dd:60:19:76:a0:5c:62:72:
5f:9c:32:12:6d:33:da:7e:0a:f4:dd:c5:03:cc:d6:
c4:c0:36:3c:ed:19:df:34:62:66:58:f5:ed:4a:42:
82:ab:bb:ef:48:6d:f5:3a:2b:c4:0d:4f:45:2a:cc:
37:0c:2c:16:2f:89:59:d9:4f:c3:64:94:4c:6d:2d:
32:fd:76:9e:0e:e7:e2:da:0c:9d:a7:89:06:e6:f6:
b1:0e:ce:2e:1f:59:84:19:87:13:93:b7:16:66:18:
b4:56:1f:a3:14:90:96:c8:5b:59:f3:8c:ac:b7:72:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:C1:FB:EF:CB:52:5C:63:51:A7:CD:AE:29:76:F4:77:74:E0:3E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F4E040B8AA2D11EEA9225120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fe:98:b2:7b:fa:e4:b9:82:b0:c6:74:7c:1a:1d:9d:a2:f9:
cb:65:f7:79:ef:53:1d:41:1a:be:e7:b8:37:ea:95:86:0e:1e:
dd:95:9e:4d:f4:03:7f:f7:71:41:d3:19:57:ac:fd:fb:6b:db:
74:1e:fa:78:f5:25:61:dd:6e:4e:dd:aa:f0:ff:d2:08:5b:4d:
52:c3:ef:60:e5:16:20:24:a8:d1:91:76:65:e2:ee:52:95:03:
c0:4d:a2:bf:40:71:3a:0e:94:4c:16:74:eb:61:94:70:75:c0:
02:3e:dd:4a:62:31:23:b5:36:ce:c8:7e:63:fc:52:53:d0:8b:
cf:c8:6b:0c:f2:d6:5b:b7:a6:3e:1f:5c:c0:17:bc:98:fa:87:
ba:80:7f:3d:92:14:c0:90:0d:74:f5:cb:63:5c:ae:d8:5a:d6:
1c:1b:6a:f4:bc:8c:74:bb:ac:0a:60:e3:14:65:ce:74:81:e1:
c0:94:96:fa:ac:03:3b:0e:f3:15:16:98:31:50:da:26:db:fc:
5d:8e:cc:34:89:61:73:5b:d8:32:de:ae:ec:74:b8:c4:92:47:
e9:18:a2:a4:b3:79:77:0c:01:8b:a2:c0:58:c3:2f:9a:66:3f:
a1:1b:10:1b:73:f0:ae:4a:97:c1:84:2c:76:0f:ed:35:b5:49:
3e:e5:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:29 2025 by rpki-client