Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
File: F7438F72F6D311EC8A6F0E26C4F9AE02.roa (raw, json)
Hash identifier: aRZCW/WIbgTcG+I/OJRIZuRKvIS1LW0i8RLeiH+0Fcc=
Subject key identifier: C2:CC:26:BA:54:50:4B:3A:33:C8:12:29:35:EF:85:9E:E5:95:6D:0E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 07F6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
Signing time: Tue 28 Jun 2022 11:17:59 +0000
ROA not before: Tue 28 Jun 2022 11:17:59 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 28 11:17:59 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62bae367-71b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:1e:85:e6:fd:49:07:e5:f5:11:92:67:25:
f9:ec:2e:a4:7c:24:97:45:29:f8:70:00:0a:c7:d8:
bc:ea:91:f8:0a:1a:10:5d:37:21:0c:36:18:dd:57:
78:8c:ab:19:40:63:2e:3e:a8:95:65:62:bc:b6:7e:
94:1f:6b:56:31:93:92:9d:a4:b4:83:d7:e8:27:17:
dd:19:92:1d:23:68:6c:7c:90:1b:78:4c:59:7c:46:
aa:0c:79:49:22:8b:53:7a:a7:44:46:6f:29:2c:42:
c5:24:69:fd:b0:73:9b:dd:c2:38:02:69:49:fa:fc:
5c:3f:b4:12:46:90:0c:6a:e2:4f:17:2e:d8:41:24:
65:68:ae:b9:24:fc:d1:24:29:f4:24:a5:fe:9b:65:
a1:0e:d8:82:29:37:b1:00:18:bc:58:72:9a:48:77:
fd:49:c5:c7:c6:cc:02:43:b3:f7:32:0b:cf:66:9d:
55:68:6e:23:7a:96:0d:d8:eb:4b:f5:5b:11:d4:3f:
ae:99:3a:b6:70:c0:ef:f8:f3:76:2c:5a:34:f4:be:
88:de:e7:7f:1e:58:72:74:bd:51:fc:d5:c7:41:cd:
d0:a4:8f:3c:a8:fe:90:ca:f0:d3:5c:c4:3f:b8:69:
09:41:45:b1:25:3d:86:e4:75:f7:fe:38:0d:41:3c:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:26:BA:54:50:4B:3A:33:C8:12:29:35:EF:85:9E:E5:95:6D:0E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.96.0/22
115.167.120.0/22
175.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c2:2e:82:c0:f2:7f:11:2e:12:d0:71:31:f9:f2:48:08:c9:
d6:bb:c1:6f:61:a4:ce:3a:eb:b4:dd:f4:af:9a:07:37:63:b9:
49:55:b8:0f:e6:85:0c:b2:09:a4:54:37:c4:b6:2f:01:9c:04:
eb:66:55:e8:5b:8b:be:50:f1:45:17:6f:b4:38:f6:cf:83:34:
fe:dd:b5:da:d5:ed:60:45:1b:3c:98:f9:a3:f1:8e:26:55:36:
44:61:c2:d4:82:f2:15:83:ce:50:33:9b:ab:68:40:97:2c:1e:
f1:a5:56:a3:b3:c5:7d:0d:01:d0:31:4a:93:46:77:86:01:2a:
6b:40:68:18:78:82:f6:7f:91:2d:b9:eb:54:e7:3d:8a:6b:75:
9f:e0:95:2c:2e:af:9c:ca:b3:e5:1c:92:53:41:1e:7c:90:95:
69:b3:29:c7:52:a1:33:37:fa:72:50:93:01:f7:1d:d1:d9:c8:
cd:c9:a2:25:59:64:c7:37:d5:93:18:3e:f2:38:61:81:27:c5:
6c:4e:9b:0d:20:16:ae:45:ce:d0:56:3e:64:4c:70:45:b1:34:
a9:bf:e5:f0:6a:0f:64:5b:93:cf:0a:13:e4:2d:49:ae:5a:73:
b8:e5:6d:d6:93:4d:00:1c:a1:f7:fc:7d:70:9d:82:8b:32:2f:
85:2d:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:29 2025 by rpki-client