Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6C280C6E2911EC9C41E246C4F9AE02.roa
File: FC6C280C6E2911EC9C41E246C4F9AE02.roa (raw, json)
Hash identifier: 7Ttd3+XgTCnO1xwRFVH9Uw2oAtC+SbQFatu8VGstceY=
Subject key identifier: 46:58:61:4A:DF:3D:FD:D8:D2:2B:20:A9:B2:5D:05:7D:BA:0F:3E:FD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 05D3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6C280C6E2911EC9C41E246C4F9AE02.roa
Signing time: Wed 05 Jan 2022 13:18:35 +0000
ROA not before: Wed 05 Jan 2022 13:18:35 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 208485
IP address blocks: 115.167.76.0/24 maxlen: 24
115.167.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 5 13:18:35 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=61d59aab-28c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:bf:f2:29:1e:55:ee:f3:f9:c9:a8:ba:a0:
0c:d8:77:5c:8a:da:56:f8:38:d4:49:56:5f:a6:14:
6d:79:72:b8:56:e9:5b:43:46:18:d4:60:4d:67:d7:
e7:27:f3:3d:be:4c:73:51:ea:47:f7:5c:e3:18:1d:
ee:7f:4e:b9:5d:41:e7:9d:4b:78:36:37:4f:d7:dd:
20:a8:63:1f:b2:30:fc:55:c3:a0:e8:3a:e9:b0:9f:
58:58:da:7c:c5:1f:d6:2e:1a:99:bb:95:61:d3:2b:
58:6d:1f:72:e2:5f:83:53:d3:35:bb:bd:23:5b:c4:
12:8b:2f:63:2a:cf:d4:52:b3:bd:67:2c:c9:76:ec:
30:d6:3d:0b:73:b3:f0:49:af:0f:9d:bf:0c:06:99:
f2:4c:5e:0f:fa:2e:c6:0e:3b:8e:21:e8:34:e8:6a:
90:30:fa:20:6e:ef:b2:c8:ab:6d:fd:f3:88:0f:c6:
ee:d3:95:cf:e8:cf:b8:0d:d7:a2:8e:76:63:49:d4:
a1:68:21:c5:02:39:d8:c2:67:0d:58:fd:76:a4:52:
0d:2b:15:f6:aa:33:28:fd:f3:cf:0f:9a:c7:c6:1a:
b0:e0:8f:66:50:19:d2:fc:b8:2b:d2:a7:08:41:70:
67:94:26:67:5d:fa:76:54:a7:94:e1:33:fd:00:e0:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:61:4A:DF:3D:FD:D8:D2:2B:20:A9:B2:5D:05:7D:BA:0F:3E:FD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FC6C280C6E2911EC9C41E246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.76.0/24
115.167.79.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3b:06:8d:00:eb:0e:8d:69:ba:d7:31:ce:2c:8c:87:f8:75:
46:79:d4:8d:ab:77:9c:89:04:3f:fb:39:fd:32:b2:3b:67:94:
4c:48:0c:bc:f6:1a:14:ea:87:b7:54:f9:e6:b1:d5:4f:69:89:
bb:e6:9b:1c:10:cb:e5:fe:de:9f:12:87:f7:4f:3f:f2:b5:02:
ba:40:af:8a:65:7d:6c:50:ee:86:0a:d8:10:e7:d0:2c:50:de:
0f:59:09:fb:57:31:78:a1:46:f3:7e:71:55:c3:2b:8f:03:37:
e0:20:45:c1:0a:a9:7a:7c:65:ac:ff:20:77:74:3c:18:53:37:
5c:52:fa:05:aa:a7:83:32:a4:27:bd:71:3c:2c:27:25:c3:46:
77:d1:86:ef:e4:60:7f:4b:08:7d:e4:a5:f9:06:80:f7:fc:0b:
76:a0:aa:34:c6:10:42:25:3d:69:92:02:06:ee:70:d5:dd:4d:
69:13:8e:17:50:ce:93:da:b4:a8:39:ab:1b:16:e7:91:ea:dd:
f8:b8:59:61:66:e0:83:35:68:2d:7f:84:9f:bf:6a:51:90:14:
7a:db:f3:f6:89:0e:c3:bc:86:99:37:e4:1a:22:ca:aa:bf:df:
ff:a9:bf:6d:fd:49:92:76:93:f5:35:d9:76:e4:c3:4b:8f:4e:
12:9e:cb:d6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwMTA1MTMxODM1WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWQ1OWFhYi0yOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArz6/8ikeVe7z+cmouqAM2HdcitpW+DjUSVZfphRteXK4VulbQ0YY1GBNZ9fn
J/M9vkxzUepH91zjGB3uf065XUHnnUt4NjdP190gqGMfsjD8VcOg6DrpsJ9YWNp8
xR/WLhqZu5Vh0ytYbR9y4l+DU9M1u70jW8QSiy9jKs/UUrO9ZyzJduww1j0Lc7Pw
Sa8Pnb8MBpnyTF4P+i7GDjuOIeg06GqQMPogbu+yyKtt/fOID8bu05XP6M+4Ddei
jnZjSdShaCHFAjnYwmcNWP12pFINKxX2qjMo/fPPD5rHxhqw4I9mUBnS/Lgr0qcI
QXBnlCZnXfp2VKeU4TP9AOBv9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEZYYUrf
Pf3Y0isgqbJdBX26Dz79MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRkM2QzI4MEM2
RTI5MTFFQzlDNDFFMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzp0wDBABzp08wDQYJKoZIhvcNAQELBQADggEBAAM7Bo0A
6w6NabrXMc4sjIf4dUZ51I2rd5yJBD/7Of0ysjtnlExIDLz2GhTqh7dU+eax1U9p
ibvmmxwQy+X+3p8Sh/dPP/K1ArpAr4plfWxQ7oYK2BDn0CxQ3g9ZCftXMXihRvN+
cVXDK48DN+AgRcEKqXp8Zaz/IHd0PBhTN1xS+gWqp4MypCe9cTwsJyXDRnfRhu/k
YH9LCH3kpfkGgPf8C3agqjTGEEIlPWmSAgbucNXdTWkTjhdQzpPatKg5qxsW55Hq
3fi4WWFm4IM1aC1/hJ+/alGQFHrb8/aJDsO8hpk35Boiyqq/3/+pv239SZJ2k/U1
2Xbkw0uPThKey9Y=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:43 2025 by rpki-client