Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FB72886604F911EE80553644C4F9AE02.roa
File: FB72886604F911EE80553644C4F9AE02.roa (raw, json)
Hash identifier: z2FYtTN1g1cUl+B/IbHxOLbVMbltIPoK40qoxB4glEQ=
Subject key identifier: 41:D7:DD:3E:D3:A2:DA:FB:AE:74:59:14:70:05:3B:8D:F5:6E:54:08
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C21
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FB72886604F911EE80553644C4F9AE02.roa
Signing time: Fri 16 Jun 2023 06:14:23 +0000
ROA not before: Fri 16 Jun 2023 06:14:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 16 06:14:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=648bfdbf-4e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:e5:09:b3:87:fe:49:b3:60:6b:21:f2:40:
4d:95:f9:15:b1:09:08:4e:eb:da:e7:dd:63:af:94:
7f:bd:42:bd:6d:92:ff:3d:af:89:54:af:7e:91:bf:
6c:f2:1a:6a:9d:0c:03:c6:51:87:2c:21:16:d1:30:
ae:a0:0a:cb:41:c5:b6:70:28:56:45:f9:8e:c0:d0:
f4:25:66:29:08:28:82:bd:d6:2c:ad:2f:45:50:4f:
dd:b2:8b:9f:78:7d:03:be:cf:27:5f:70:3f:c7:51:
03:a0:a8:6d:31:38:25:ec:eb:ed:f5:5e:ec:41:69:
f1:36:13:7e:00:63:d2:cb:50:3f:e3:12:aa:27:bf:
c9:98:56:03:94:2c:85:17:75:14:e1:b0:ee:91:20:
b3:6f:49:e0:80:0f:a9:00:5c:5c:24:ce:05:7a:88:
75:47:37:a2:f4:c5:0b:73:9c:e4:dd:b5:0d:47:17:
07:8b:f8:1d:e1:11:27:79:3b:9f:0a:e2:37:99:92:
05:58:43:90:25:22:f2:07:6d:6a:34:51:e1:38:7a:
6e:88:ea:d9:11:95:8e:55:87:86:79:a1:9b:80:f8:
16:33:31:6e:ea:bb:06:c8:3a:08:78:5b:bf:24:2b:
6c:01:dc:f5:91:dd:76:9c:f7:a5:ee:5d:21:4c:12:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:DD:3E:D3:A2:DA:FB:AE:74:59:14:70:05:3B:8D:F5:6E:54:08
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FB72886604F911EE80553644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.24.0/21
115.167.48.0/24
180.178.164.0/22
202.92.18.0/24
202.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6b:8e:b7:d3:97:d4:1a:d5:ca:35:13:2b:91:e7:09:ea:74:
f5:25:6d:44:cc:86:5a:b6:52:74:c3:66:9b:c9:81:cf:3e:a2:
44:8a:c2:15:0d:af:ec:5e:46:93:9f:60:3c:38:6a:45:eb:93:
26:71:d1:72:48:82:cb:a5:9f:69:79:46:2b:62:d3:1f:55:00:
eb:4c:73:d1:41:0a:55:0f:c0:34:a1:7e:35:42:2f:1e:4b:87:
2d:ca:92:1f:47:ae:a6:1d:2a:28:2a:18:5d:48:d4:d6:28:d6:
4c:77:1f:01:93:c0:ca:c9:fd:ca:7d:9a:5d:d3:9a:4a:3b:25:
d3:e4:98:e8:b2:7f:1c:b3:ff:f7:01:dc:ee:12:af:0e:db:17:
20:5e:a6:ce:66:45:38:58:5b:66:f5:8a:9c:17:56:ea:98:e3:
53:ab:d0:07:98:48:a2:c2:c5:f9:a4:2f:51:6c:49:9f:ab:35:
3f:c5:d9:dd:52:0c:c1:56:f1:8e:fa:01:01:b4:50:6f:c2:a6:
3d:8f:30:1b:45:8c:2d:a6:a5:1c:71:89:16:33:41:d1:69:9e:
d2:53:2f:cd:37:6c:e5:0a:fa:70:b4:db:66:17:cd:97:9a:0b:
0c:6a:78:d4:fa:e1:2d:06:db:15:cb:ad:6e:7a:b2:f6:64:43:
be:e6:07:e0
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNjE2MDYxNDIzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDhiZmRiZi00ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpXlCbOH/kmzYGsh8kBNlfkVsQkITuva591jr5R/vUK9bZL/Pa+JVK9+kb9s
8hpqnQwDxlGHLCEW0TCuoArLQcW2cChWRfmOwND0JWYpCCiCvdYsrS9FUE/dsouf
eH0Dvs8nX3A/x1EDoKhtMTgl7Ovt9V7sQWnxNhN+AGPSy1A/4xKqJ7/JmFYDlCyF
F3UU4bDukSCzb0nggA+pAFxcJM4Feoh1Rzei9MULc5zk3bUNRxcHi/gd4REneTuf
CuI3mZIFWEOQJSLyB21qNFHhOHpuiOrZEZWOVYeGeaGbgPgWMzFu6rsGyDoIeFu/
JCtsAdz1kd12nPel7l0hTBKz5wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEHX3T7T
otr7rnRZFHAFO431blQIMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRkI3Mjg4NjYw
NEY5MTFFRTgwNTUzNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBAIr/gwDBANzpxgDBABzpzADBAK0sqQDBADKXBIDBADKXBUw
DQYJKoZIhvcNAQELBQADggEBAEBrjrfTl9Qa1co1EyuR5wnqdPUlbUTMhlq2UnTD
ZpvJgc8+okSKwhUNr+xeRpOfYDw4akXrkyZx0XJIgsuln2l5Riti0x9VAOtMc9FB
ClUPwDShfjVCLx5Lhy3Kkh9HrqYdKigqGF1I1NYo1kx3HwGTwMrJ/cp9ml3Tmko7
JdPkmOiyfxyz//cB3O4Srw7bFyBeps5mRThYW2b1ipwXVuqY41Or0AeYSKLCxfmk
L1FsSZ+rNT/F2d1SDMFW8Y76AQG0UG/Cpj2PMBtFjC2mpRxxiRYzQdFpntJTL803
bOUK+nC022YXzZeaCwxqeNT64S0G2xXLrW56svZkQ77mB+A=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:27 2025 by rpki-client