Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACEC924954E11EC9A5CEF6CC4F9AE02.roa
File: 8ACEC924954E11EC9A5CEF6CC4F9AE02.roa (raw, json)
Hash identifier: MMeQszyXfDHsGVmFHKorLQn5u7FrNG8cnksiwygMzH0=
Subject key identifier: 1A:69:7C:3A:94:F4:E2:CA:1D:D1:13:8E:27:55:A7:B9:05:B8:61:65
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0660
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACEC924954E11EC9A5CEF6CC4F9AE02.roa
Signing time: Thu 24 Feb 2022 08:48:31 +0000
ROA not before: Thu 24 Feb 2022 08:48:31 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 38547
IP address blocks: 103.151.26.0/23 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.56.0/21 maxlen: 24
115.167.72.0/22 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
175.110.108.0/22 maxlen: 23
175.110.108.0/23 maxlen: 24
175.110.110.0/24 maxlen: 24
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.22.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 24 08:48:31 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=6217465f-f1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:b7:3a:5a:a3:02:fe:dd:0f:55:0e:40:13:
31:78:ab:07:35:88:0d:f9:12:ec:bf:a5:4d:8e:5d:
9f:10:34:e8:e3:4a:45:a8:d1:2b:f3:bb:91:c3:3a:
45:cc:88:34:57:bd:0e:bb:4e:ec:ec:47:af:a7:eb:
b0:14:b3:93:fe:9e:b4:8c:7e:75:08:7f:ba:3b:2d:
c2:0b:c9:dc:d5:df:f5:34:8e:9b:cd:be:94:9f:02:
74:d1:92:94:07:cb:47:a1:4f:ba:fb:16:fe:68:5a:
4b:e4:27:69:2d:f3:36:7b:13:1d:c5:39:b3:4b:75:
1c:10:22:38:1a:af:76:36:bb:f0:2c:bd:63:83:2c:
e9:ed:7f:d8:cd:cf:8b:a4:6a:fd:8b:61:38:68:7f:
0e:6b:ee:6e:c5:d9:04:72:15:0f:5d:98:0a:3a:2d:
a0:fa:f6:5a:0f:4a:f9:70:eb:cf:30:26:02:97:66:
e0:6a:c4:12:f1:3e:f1:7e:40:02:2b:20:98:fc:9b:
73:f0:ae:b2:7b:4c:99:14:00:3b:cf:7a:be:87:e4:
1f:a1:ee:0d:7e:82:8b:1b:5c:13:04:83:b1:c3:64:
87:36:66:d3:86:2a:b3:83:bf:bb:0f:59:da:c7:f9:
3d:c5:f0:2a:2e:7a:f1:78:d8:dc:d2:9e:4a:61:6f:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:7C:3A:94:F4:E2:CA:1D:D1:13:8E:27:55:A7:B9:05:B8:61:65
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8ACEC924954E11EC9A5CEF6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/23
115.167.3.0/24
115.167.5.0/24
115.167.7.0/24
115.167.56.0/21
115.167.72.0-115.167.76.255
115.167.104.0/22
175.110.72.0/22
175.110.80.0-175.110.91.255
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
175.110.108.0/22
202.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
30:e1:23:d6:1b:9f:77:9f:3c:01:94:7a:9c:16:73:ed:6f:3b:
68:15:42:73:88:75:79:c9:d5:76:81:53:81:c4:ce:a2:9f:e0:
4a:08:42:05:ed:aa:ee:a9:15:2c:b8:ce:10:26:94:66:1b:76:
88:ae:17:55:bc:fc:3f:80:dd:6b:fc:ec:a6:4d:e0:f8:4e:ea:
05:56:f0:22:ed:85:24:c2:ad:f5:2b:2e:61:64:a6:64:c0:ad:
44:cc:68:d9:b4:77:85:5b:b2:94:98:c6:36:be:87:6a:84:28:
b2:67:1e:10:d3:76:40:b6:e0:cc:03:4f:9e:43:54:9a:0b:53:
6b:31:ab:0f:79:4c:eb:92:17:6d:09:87:63:a3:f8:4f:b3:a7:
3f:b3:ae:10:f3:3b:70:28:b2:26:e0:95:83:9d:fd:ca:37:29:
58:ee:54:89:66:35:84:6c:df:44:84:2e:c7:fe:75:d6:79:07:
e0:05:65:56:95:b7:40:78:e4:c6:0c:82:a4:46:bd:df:98:d3:
e3:88:3a:dc:31:1d:4a:df:cc:31:09:43:76:4f:e6:93:f6:d9:
9e:db:d4:50:d3:81:f9:65:8b:3c:4e:ad:11:1d:a1:16:8c:64:
93:c7:6f:67:7b:52:00:a9:08:dd:18:4c:2a:f6:d7:9b:f6:77:
7c:f3:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org