Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
File: 69E940DA05F511EFB286C82CC4F9AE02.roa (raw, json)
Hash identifier: /qoHdJpJT981MVFDE1UjsrySd+TNb/yII+uH6DOec6E=
Subject key identifier: 2B:85:B6:87:E5:01:30:0C:5E:FC:19:ED:14:1A:DA:73:64:76:34:DA
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1140
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
Signing time: Mon 29 Apr 2024 16:06:39 +0000
ROA not before: Mon 29 Apr 2024 16:06:39 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4416 (0x1140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 29 16:06:39 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=662fc58e-c06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:b0:2c:4f:08:45:58:42:4d:f7:fc:05:e6:
be:ae:77:48:dd:e9:24:07:88:b6:a8:8c:88:24:18:
f2:ed:ac:e5:5a:61:40:bd:8f:64:74:4f:fe:d6:dc:
00:14:f1:33:5a:3b:7f:0e:96:64:66:03:03:79:23:
e7:12:1f:fb:24:87:22:ad:b0:56:0b:f7:3c:4d:a0:
fa:43:1a:48:e1:9e:bb:ae:a0:39:27:a2:17:3f:74:
0f:99:ba:8e:ff:d1:b0:e3:73:87:b4:45:bf:70:3b:
e0:72:27:35:d3:ca:31:24:15:c1:33:90:0b:f6:df:
54:f1:11:ba:80:c3:c6:84:55:61:19:f1:56:29:89:
bf:05:02:01:4f:2b:a5:f1:8b:31:e5:f9:32:42:c1:
62:43:bb:f3:ce:f6:21:62:e6:70:97:92:15:e1:1b:
52:48:a5:4f:26:1f:fe:a5:ae:b4:8c:39:15:c9:f5:
0c:63:1c:c2:34:f8:cb:a8:11:1c:a4:d5:0d:1c:a3:
1c:ab:d6:5c:01:6c:db:ca:95:63:7c:9c:3d:42:a4:
e0:ee:f7:d0:6f:14:ae:13:ba:89:ff:9e:ed:42:89:
6a:09:25:56:85:fd:d4:cb:57:ce:c1:fc:7e:10:aa:
45:53:24:59:3e:50:ef:42:07:58:7d:eb:58:2a:fc:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:B6:87:E5:01:30:0C:5E:FC:19:ED:14:1A:DA:73:64:76:34:DA
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69E940DA05F511EFB286C82CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.241.0/24
115.167.50.0/24
115.167.64.0/23
115.167.76.0/24
115.167.124.0/24
Signature Algorithm: sha256WithRSAEncryption
25:fd:7c:6a:56:e8:24:84:b6:e7:c1:d0:c1:e4:71:55:51:ad:
fe:3f:d8:27:09:c7:fa:89:78:ee:9a:53:51:9b:73:5e:81:d8:
d2:ed:ff:00:bd:28:6d:71:07:e0:a9:9f:80:12:41:f3:d9:f3:
fd:2a:02:97:b1:7d:d0:14:1f:66:fa:aa:d0:67:41:b9:c9:ff:
5d:75:d9:61:51:6d:01:82:28:05:68:f9:6b:82:e2:c0:eb:2a:
5a:c9:ea:37:f2:37:bd:ef:46:cb:f2:f9:b5:5f:3d:02:d9:04:
3a:33:18:16:a8:90:e4:8a:c9:1c:e8:a9:99:80:c9:13:ed:6e:
28:03:6a:4b:54:3c:79:75:b4:41:7f:a9:bb:9a:cb:ca:e2:c5:
a1:dc:ac:78:e6:5d:9c:e2:bc:84:aa:52:8d:c0:d8:90:9b:28:
75:f5:33:7a:15:ac:6e:c9:eb:ca:07:03:19:57:2d:24:c6:81:
32:0d:94:65:19:35:3d:83:96:5a:45:9e:73:72:9b:f1:3e:9d:
c6:e7:27:1a:43:42:c5:11:ab:f5:71:dc:02:1f:bb:c1:38:b6:
e8:31:0a:d4:99:d9:42:96:e2:0c:46:a6:77:9c:6f:c4:8d:56:
67:a9:39:58:6f:34:b6:87:56:4b:58:fb:8a:97:f7:1f:ba:2f:
de:34:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:11 2025 by rpki-client