Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F53DEF6AAB3811ECA48BC967C4F9AE02.roa
File: F53DEF6AAB3811ECA48BC967C4F9AE02.roa (raw, json)
Hash identifier: JNtDDlkp44Oh/8+LKxJlTlRWqzE7GdJd3jomMolilnA=
Subject key identifier: C8:3F:9E:50:B8:17:E8:B3:38:6A:D2:3C:7E:E6:42:C2:E7:9D:4E:89
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 06B3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F53DEF6AAB3811ECA48BC967C4F9AE02.roa
Signing time: Thu 24 Mar 2022 06:09:26 +0000
ROA not before: Thu 24 Mar 2022 06:09:26 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.56.0/21 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.22.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 24 06:09:26 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=623c0b16-2cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:64:9e:97:9a:5f:4e:f7:d5:de:b2:9b:9a:
97:80:a7:a6:d0:86:61:96:ca:87:08:e8:1d:a2:33:
80:78:36:1e:48:46:24:74:43:01:90:cc:70:4c:61:
7a:ab:8c:b9:6c:93:ec:48:03:3f:6a:22:ab:34:fb:
b2:2e:95:67:9c:ee:c1:e7:75:48:8a:c4:19:4d:78:
76:52:0f:44:9a:ac:14:bb:48:11:e9:ec:9a:94:4c:
71:1b:86:17:35:94:37:6f:97:59:12:2d:1c:dc:98:
47:2c:cb:28:be:b5:8b:99:a5:59:10:ad:f7:78:df:
5e:ee:0c:9c:d4:7c:1c:de:c5:21:5f:9a:4b:6a:16:
30:fc:bd:02:99:34:06:fc:02:75:7d:c3:39:07:df:
14:55:19:65:ba:70:f2:ba:e7:69:0b:18:45:8e:5d:
95:c9:25:64:a1:28:3b:70:96:37:0d:8f:25:46:9d:
d9:cb:d2:87:3b:b2:48:e3:f5:80:56:b7:4d:01:ad:
00:12:5d:99:9b:cf:43:c2:54:db:61:f6:7f:8e:1a:
57:2f:72:ff:54:8c:3c:cd:ff:1a:7a:1c:34:f0:e8:
08:eb:70:fe:00:95:c7:6e:b8:48:26:30:d8:fc:96:
e2:06:d4:8e:95:46:da:c3:8e:07:e7:5e:80:06:93:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:9E:50:B8:17:E8:B3:38:6A:D2:3C:7E:E6:42:C2:E7:9D:4E:89
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F53DEF6AAB3811ECA48BC967C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.56.0/21
115.167.72.0-115.167.76.255
115.167.104.0/22
175.110.64.0-175.110.75.255
175.110.80.0-175.110.91.255
175.110.99.0/24
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
03:7b:c9:6d:61:3c:30:34:e7:cc:53:e7:92:95:68:fe:1b:2c:
f3:f8:7f:1a:ee:dc:3d:9b:a0:5f:f7:55:b0:4f:35:29:85:4b:
83:b6:25:8a:7d:22:e4:d0:91:5d:19:ee:69:b8:43:df:0f:0b:
15:19:92:32:5a:b4:80:fc:db:c8:a4:b0:13:91:70:1a:e5:d4:
f4:47:4d:99:94:5c:7a:41:8f:3c:4d:55:cd:26:86:66:66:57:
35:51:1a:cf:e5:f2:e4:09:13:fd:74:0b:f8:06:b2:7a:03:90:
b0:74:8e:df:ca:2d:97:26:7d:3d:e0:b2:ef:4a:ae:0f:46:e3:
ad:5c:4e:36:a0:1c:9b:f3:d9:60:ae:6d:02:91:51:64:d2:0e:
6f:87:8a:b6:2f:59:39:1a:33:74:04:22:1e:bf:a4:c7:37:b4:
14:6e:85:cb:19:24:93:80:71:2c:7d:43:e4:f7:02:85:d4:e9:
38:f8:aa:da:d1:5e:fd:f5:d2:d5:19:bb:7c:3d:80:48:75:2b:
76:1f:0a:17:6a:65:55:26:1d:d5:d1:0d:7f:66:26:a7:45:bf:
90:73:16:ae:d5:d2:75:19:e5:a6:bd:2f:92:e0:a6:c1:6b:c5:
f1:ed:4b:68:30:dd:92:45:a2:91:c2:68:4a:84:84:36:3c:40:
7b:c5:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:40 2025 by rpki-client