Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49BF2AE8136C11EFBAEF9010C4F9AE02.roa
File: 49BF2AE8136C11EFBAEF9010C4F9AE02.roa (raw, json)
Hash identifier: SEKxWlTnNef6RJ7TKIuwTWNsooV5+71y/BxqL7+NPJI=
Subject key identifier: 20:0D:8D:5A:57:71:7F:19:EB:F7:CE:B8:DE:6C:8C:2E:C2:49:69:06
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1202
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49BF2AE8136C11EFBAEF9010C4F9AE02.roa
Signing time: Thu 16 May 2024 10:08:48 +0000
ROA not before: Thu 16 May 2024 10:08:48 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4610 (0x1202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 16 10:08:48 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6645db30-6929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:1d:76:21:24:54:cf:d8:43:e5:5d:03:bd:
1f:7b:68:3a:af:78:73:4d:a8:64:74:60:6d:47:a6:
c3:db:9b:3d:e9:52:54:9e:a1:75:9f:73:89:04:3c:
cf:db:3a:18:a5:9e:00:41:11:02:da:ca:7d:ff:8c:
bd:0c:0c:c4:29:61:5e:a7:91:a5:07:c1:b3:c9:b3:
42:4f:de:21:e3:12:3b:99:a2:58:71:a1:42:55:62:
88:9e:14:13:37:58:ec:34:b6:c8:71:eb:1a:94:23:
6f:9f:5b:fe:66:05:98:51:69:b9:d6:5a:c2:13:c3:
2f:c9:f2:b8:af:c1:b8:e2:1d:6c:b1:59:1d:3a:1e:
63:1d:b8:d7:35:3f:08:29:cd:91:e4:3d:59:58:57:
a2:ac:ad:72:98:e5:29:a0:4c:98:98:67:92:2e:d0:
a6:06:97:ab:aa:7b:d0:63:63:d3:3f:7d:51:83:06:
7c:d1:79:dc:48:33:d3:cd:b8:a9:2c:b9:f3:8b:ce:
14:2f:1a:36:5c:51:e3:13:da:2b:11:b0:d4:2d:ab:
74:9d:15:f1:5a:47:01:e0:a6:99:43:bb:a7:fa:11:
22:4f:56:42:3b:aa:f2:2e:58:39:2e:01:cc:bb:29:
8d:b8:17:46:88:ff:fb:66:66:88:79:8f:48:6e:86:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:8D:5A:57:71:7F:19:EB:F7:CE:B8:DE:6C:8C:2E:C2:49:69:06
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49BF2AE8136C11EFBAEF9010C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0/21
115.167.2.0/24
115.167.49.0/24
115.167.78.0/24
180.178.142.0/24
180.178.160.0/24
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
76:f7:a8:07:c5:f1:db:9d:1f:1b:39:9f:4f:81:3d:39:38:2d:
1b:fb:eb:4a:2c:cf:55:b8:0b:f2:79:63:3a:66:12:21:60:7b:
db:44:ce:5f:2d:5c:9a:e2:36:c0:16:1a:13:05:0e:63:b0:c4:
e5:14:d5:d5:94:2b:d6:41:b8:57:8a:e5:1e:13:0d:03:15:d1:
c5:f0:e4:62:8c:e2:60:3f:e8:7d:35:97:b4:d6:bf:9e:7e:c8:
8e:d4:d1:f4:a4:38:2f:e5:27:93:e5:a0:60:da:bc:00:28:c9:
0d:6d:f1:a6:af:80:51:67:7c:01:d8:dc:b1:59:53:62:9d:cb:
51:8f:58:89:05:43:e5:6c:dc:41:bf:c9:63:a5:3f:64:2a:c6:
86:b4:27:0e:3f:c4:3c:b5:47:1d:98:06:6b:95:c7:6f:bc:5d:
a0:5c:9a:7d:03:a2:e6:b5:bc:23:cb:5e:b2:0c:fa:df:6d:14:
22:45:f8:d4:79:0d:ce:c4:e3:23:4e:5e:cc:bd:48:db:90:7d:
ae:c8:b4:22:9b:95:26:71:76:c5:77:c2:40:04:1c:17:ff:66:
49:c1:28:ff:b9:24:2d:96:8b:cd:70:bc:7e:51:12:6a:c4:2b:
ae:1e:af:25:ca:f4:c2:30:67:d1:67:8a:af:c5:46:72:32:7d:
32:fb:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:13:59 2025 by rpki-client