Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
File: D812BC28312911EDB244411CC4F9AE02.roa (raw, json)
Hash identifier: hyThxV70WI9b0L4rKbFGjEiYCMOCpKC0qMdY2GOpstc=
Subject key identifier: 35:B4:B3:3E:FE:04:04:FE:21:6B:1E:FE:48:68:FB:BC:84:43:3B:FF
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 091F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
Signing time: Wed 14 Sep 2022 06:39:01 +0000
ROA not before: Wed 14 Sep 2022 06:39:01 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38547
IP address blocks: 115.167.2.0/24 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.72.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/21 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.107.2/32 maxlen: 32
175.110.107.14/32 maxlen: 32
175.110.107.114/32 maxlen: 32
202.92.16.0/24 maxlen: 24
202.92.17.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.21.0/24 maxlen: 24
202.92.23.0/24 maxlen: 24
202.92.24.0/24 maxlen: 24
202.92.24.32/27 maxlen: 27
202.92.25.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
202.92.27.0/24 maxlen: 24
202.92.28.0/24 maxlen: 24
202.92.29.0/24 maxlen: 24
202.92.30.0/24 maxlen: 24
202.92.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 14 06:39:01 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63217705-7cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:64:15:83:15:c1:00:f2:2b:7c:70:85:8f:
3b:ba:d4:97:90:60:d3:6e:14:e5:fa:e8:e4:99:f3:
5e:7a:4a:07:b2:0c:e1:e3:46:60:18:8d:6b:1d:d8:
d1:ac:92:71:eb:e9:a3:4a:7b:99:70:41:5d:42:b1:
a4:c6:7c:33:d8:4d:ef:37:a7:a3:5d:3d:a8:cd:d9:
51:ea:90:6c:cc:38:e1:db:f0:35:75:76:30:26:04:
86:86:42:4c:e6:1b:e3:6f:c4:d0:89:d2:6f:5d:17:
73:e1:ba:9b:9c:30:ec:b0:bb:c6:98:91:6c:9d:14:
34:50:c9:1c:cf:07:9a:af:ce:71:d1:4e:af:72:eb:
d3:78:01:5e:fb:9b:f0:f0:3a:c9:70:60:18:63:60:
45:a4:c3:b4:78:7a:2e:b7:7a:b5:4d:fc:57:56:a3:
fa:e6:48:d4:7b:81:a9:3c:67:ab:bc:17:d3:30:d5:
05:b6:b5:e0:d6:81:a6:27:c9:26:b6:98:ec:d5:0c:
3f:ca:50:09:88:f7:fd:bd:da:cb:e6:db:3d:39:80:
12:74:1c:2a:27:93:6a:56:19:34:81:f6:90:48:99:
58:e0:07:db:c6:c9:e3:38:3f:d8:ba:3a:fc:cf:9c:
60:b8:1a:cb:97:37:d2:76:2a:fd:4b:ba:c1:a2:ae:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:B3:3E:FE:04:04:FE:21:6B:1E:FE:48:68:FB:BC:84:43:3B:FF
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.2.0/24
115.167.20.0-115.167.31.255
115.167.50.0/24
115.167.72.0/22
175.110.64.0/22
175.110.80.0-175.110.91.255
175.110.104.0/24
175.110.107.2/32
175.110.107.14/32
175.110.107.114/32
202.92.16.0-202.92.21.255
202.92.23.0-202.92.31.255
Signature Algorithm: sha256WithRSAEncryption
c0:fc:05:64:88:45:66:ef:82:77:b5:cf:47:0c:2d:c6:45:0d:
2f:47:b2:01:b7:b3:bf:93:b8:c3:a3:64:a5:dd:bb:20:1d:c5:
66:45:87:ac:b2:9b:b7:64:d6:9f:8d:77:7a:ec:b3:bc:49:4f:
44:1b:e4:8b:ea:25:02:48:c1:38:03:2b:73:46:6a:e2:0b:6e:
00:06:82:02:f6:2f:1a:44:6c:5e:24:20:1b:ac:38:8e:e0:75:
4a:3a:9c:45:eb:2e:dd:9c:2a:64:9d:33:d6:c7:3f:32:24:b1:
7c:ea:a0:f2:66:79:9c:1c:fa:cc:99:73:a9:33:64:5b:04:d2:
64:36:32:22:82:0c:35:84:58:28:c8:db:a4:0b:ea:7e:15:1b:
f7:42:e4:f1:50:5a:e9:07:96:65:f4:0e:e7:78:3b:51:41:36:
13:68:b9:fa:59:95:03:c7:f6:9a:5f:6b:48:c5:7c:17:a2:7c:
96:5c:30:ab:6f:2c:fb:7e:d6:9e:68:06:35:2f:c1:5c:21:ce:
7e:1d:59:35:f5:99:5b:f6:1f:bf:61:70:6d:63:4b:e2:6e:f6:
87:60:86:46:5f:3f:0d:2d:db:77:8e:35:42:63:f1:94:bf:03:
35:ab:14:01:4b:b3:4d:4f:da:aa:28:ac:45:45:b8:de:10:ff:
6f:a4:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:46 2025 by rpki-client