Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa
File: 69F00404BCFE11EFBD130355C4F9AE02.roa (raw, json)
Hash identifier: GgGRIfA7XyTmEbViBvo5nOdcaajMMpk+ZEkEUht8hY8=
Subject key identifier: D0:65:E5:46:20:B7:83:84:3E:C5:86:7F:E7:4E:B5:0E:06:F4:17:98
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2007
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa
Signing time: Wed 18 Dec 2024 05:10:36 +0000
ROA not before: Wed 18 Dec 2024 05:10:36 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.68.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.92.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8199 (0x2007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Dec 18 05:10:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6762594b-29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:c1:38:47:6d:c6:85:bd:c7:fe:cd:bc:ec:
57:67:ea:2e:39:93:cd:c0:97:3a:0d:ba:da:03:97:
9b:15:3c:44:75:ee:5f:be:05:86:01:29:88:f7:06:
1f:8c:be:2e:a6:c8:1f:e2:fc:3d:1a:cb:35:93:68:
28:e9:f7:a3:3d:e2:1e:cd:7e:3e:06:48:54:2b:f0:
ff:3c:a6:f9:c3:a0:f3:fe:76:5c:ad:f9:87:a3:d4:
fe:1d:9d:5d:61:9a:ee:9a:0d:99:11:93:87:3b:d0:
59:fd:88:cb:f3:86:2d:10:cc:f2:7f:c6:76:0a:1b:
71:9a:65:0c:04:a3:dc:b7:31:3f:c0:d8:46:2f:4a:
82:2b:0b:64:79:b6:b3:55:42:74:98:95:73:51:02:
90:22:c4:74:9f:f5:ec:f1:00:4e:6f:a7:40:bd:4e:
1c:3a:ed:c1:97:73:2c:d8:67:3e:39:df:cd:d1:5f:
c4:3a:62:b5:e7:8f:1e:ac:db:cc:92:50:e5:86:56:
19:18:99:39:c3:3c:6d:7d:2c:91:28:a4:fa:00:d3:
8a:16:b7:78:e7:49:1b:91:08:c0:5f:f9:54:37:40:
4c:e4:28:22:bf:2f:d9:ac:35:48:04:1f:cc:29:18:
1f:5d:18:38:4b:5a:56:a6:1e:d1:66:3c:52:ba:26:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:E5:46:20:B7:83:84:3E:C5:86:7F:E7:4E:B5:0E:06:F4:17:98
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.68.0/22
115.167.108.0/22
175.110.76.0/22
175.110.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:8e:3b:d6:d9:dc:83:fb:b7:7e:ee:58:cc:68:27:a2:05:c8:
27:1c:a6:dd:da:9c:e4:c3:b0:57:66:38:33:fb:84:d7:f3:84:
c1:1e:1c:c7:0b:4e:77:82:f6:d2:9a:4c:82:a6:75:2c:29:31:
e2:26:0c:dc:62:bf:82:1b:61:82:7a:9b:2b:d2:8d:2d:af:f0:
36:ed:e3:1e:da:30:ea:08:1a:fd:5f:15:ac:4e:36:79:68:31:
21:6a:4d:b5:71:25:d1:37:cc:9e:53:fb:df:cc:5b:d8:cf:8a:
06:07:47:75:11:51:5c:51:f3:89:e1:66:19:1f:9f:eb:ce:17:
b1:5a:62:a4:29:79:fe:56:73:3c:90:b1:86:7f:41:db:96:05:
a8:79:07:99:8d:ad:5d:c7:01:5d:4b:f3:aa:a4:15:04:3c:3c:
dd:75:9d:85:65:75:af:e0:7a:b3:95:b6:ed:e4:b2:4c:a3:42:
53:ff:80:60:cd:17:63:72:c8:91:38:f5:6b:e7:84:c0:00:8f:
6c:be:e7:9b:91:5d:b2:bc:83:33:b5:b5:a3:2a:36:cf:4b:11:
28:8d:2b:32:fe:b8:0a:35:46:e4:1e:56:db:c0:27:7a:8c:d4:
15:31:8d:db:a8:56:9f:63:ea:fc:46:b4:e4:4f:e1:10:dd:1f:
45:b0:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:13 2025 by rpki-client