Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/82E103F8AD7511EE8D0BA516C4F9AE02.roa
File: 82E103F8AD7511EE8D0BA516C4F9AE02.roa (raw, json)
Hash identifier: Rog3+lg47IU0bEdjFcEnZY3TZ8XB+2rmxjxfTXro91c=
Subject key identifier: 43:EE:E3:F4:2B:37:0A:56:AA:4A:BA:78:71:2B:DB:40:D6:24:80:30
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EFF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/82E103F8AD7511EE8D0BA516C4F9AE02.roa
Signing time: Sun 07 Jan 2024 15:57:51 +0000
ROA not before: Sun 07 Jan 2024 15:57:51 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 115.167.1.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.76.0/22 maxlen: 24
175.110.104.0/22 maxlen: 23
175.110.104.0/24 maxlen: 24
175.110.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 7 15:57:51 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659ac9ff-1d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:09:fb:bd:97:27:a8:db:74:8f:16:38:0e:
3a:c3:20:24:e6:98:44:6a:ce:97:6f:fb:10:30:57:
1f:3f:05:bd:ed:ba:7a:6f:71:0e:ca:e4:7c:74:55:
9f:63:34:a7:48:c8:98:8c:34:f8:21:94:58:14:ae:
5b:9f:5b:be:20:38:e5:e0:cd:23:c3:eb:3b:bf:4a:
f4:5b:d3:b1:98:fa:6f:c2:84:c1:a8:d9:ed:d9:f8:
eb:81:c5:2e:7d:1c:b5:9d:ad:40:b4:1c:94:1e:b3:
64:01:4b:01:8a:45:b2:69:02:4d:8e:56:82:57:83:
37:3c:2e:ce:cb:5d:e7:2f:37:1c:bf:d4:e4:24:07:
c1:e1:42:38:c1:64:ba:c4:0e:57:df:ed:2e:27:19:
ac:f6:a7:2d:bf:5c:a9:62:8b:f9:9a:5e:16:17:f5:
05:18:f3:f8:64:f9:ee:52:c4:56:2c:23:db:1a:52:
c6:10:da:73:7f:11:30:c4:0d:51:97:20:36:2c:86:
74:fa:2d:6e:53:25:56:bb:21:08:d9:90:77:3b:f4:
ab:f1:01:ad:b4:a9:38:16:64:42:25:a0:24:bb:a4:
55:b0:65:b8:c2:23:2f:fc:c6:a9:7b:cf:0f:b0:31:
18:4d:0a:0e:2d:ba:09:aa:00:5d:8f:f2:70:ee:0d:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:E3:F4:2B:37:0A:56:AA:4A:BA:78:71:2B:DB:40:D6:24:80:30
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/82E103F8AD7511EE8D0BA516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.1.0/24
115.167.16.0/22
115.167.56.0/21
115.167.104.0/22
115.167.112.0/22
175.110.76.0/22
175.110.104.0/22
Signature Algorithm: sha256WithRSAEncryption
64:2e:91:22:da:f3:19:66:6e:99:59:88:36:35:2b:42:8d:a9:
10:c5:4c:4b:ab:01:85:e6:f5:34:85:ef:c0:df:8b:39:86:25:
3d:aa:33:fa:31:13:a1:18:76:47:66:c5:fa:8f:48:45:2a:16:
a7:31:2f:c8:9e:b0:e3:f7:54:21:68:52:c3:36:e4:33:b0:d1:
8a:21:46:e0:f7:81:5b:64:7a:d7:a0:da:b8:4b:cd:95:11:5a:
7c:bc:db:bc:99:27:9b:1f:44:f5:89:5b:e0:cc:71:c7:d8:1d:
08:8e:79:d4:72:51:b0:4d:16:ce:10:e8:cb:49:85:09:a4:ae:
c6:fc:53:68:9d:61:20:e2:26:ea:6a:11:b8:4f:68:b6:73:a2:
62:16:68:57:97:33:aa:ce:c8:a6:c9:8f:cd:63:f9:20:39:94:
01:19:fe:9e:d6:50:2e:a6:03:37:37:59:e8:9f:be:55:b8:2b:
c4:6c:62:d2:75:a0:48:d0:c1:df:98:86:e8:7b:b2:33:ae:ed:
ac:22:45:91:d5:53:62:c1:44:23:8e:c9:08:2d:88:14:12:9e:
f9:91:4d:b1:17:0e:20:1e:89:4f:b2:05:7f:99:4e:a7:44:79:
39:95:2b:70:34:88:d7:26:32:c3:55:d4:57:f2:5b:65:f3:12:
5d:88:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:46 2025 by rpki-client