Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/97625AD2AF7011EEA22D2E7FC4F9AE02.roa
File: 97625AD2AF7011EEA22D2E7FC4F9AE02.roa (raw, json)
Hash identifier: YHidVdV95TKshyRImsE2IyHMrb81phCKPzKrlXftybM=
Subject key identifier: 6E:3D:ED:B0:60:B2:D0:EE:92:9F:E9:1E:EC:1C:B2:92:0A:0D:79:A6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F5A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/97625AD2AF7011EEA22D2E7FC4F9AE02.roa
Signing time: Wed 10 Jan 2024 04:27:41 +0000
ROA not before: Wed 10 Jan 2024 04:27:41 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3930 (0xf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 10 04:27:41 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659e1cbc-8429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:00:cf:ed:9d:dd:0f:5b:95:dd:a6:e4:41:
fa:70:c1:71:9c:8d:06:d9:29:f4:61:4e:d7:17:78:
52:d6:61:6f:4d:20:e0:3d:f2:7b:29:c8:30:f7:04:
bf:86:e5:ca:19:f3:61:b5:0f:ef:14:c5:1b:64:ef:
2e:fd:79:8e:6d:b2:d1:0d:4b:ca:24:b8:fc:cb:e9:
30:d5:69:d5:76:e1:1d:e6:24:0e:1e:d1:54:50:ea:
f9:a4:82:32:5c:0f:ad:e2:08:95:40:75:9b:19:cf:
73:9a:fc:10:54:7f:a0:c9:60:05:cf:92:e9:07:58:
fb:c1:29:87:3a:ca:18:36:7b:bc:e0:01:69:9e:7d:
a4:0c:c3:6a:7a:f6:99:52:3e:4e:36:d4:4c:db:28:
68:85:90:10:0b:09:0c:ca:1a:f4:c6:02:37:93:7f:
75:48:fa:16:a9:69:e7:1d:0d:87:de:39:70:a8:c8:
86:f2:05:64:74:87:bc:96:2f:ab:49:ca:a3:97:10:
f4:f2:49:aa:a7:20:6f:0c:e4:32:f2:f1:44:8c:86:
df:a0:1a:2f:ac:e7:83:b3:f7:7f:3a:57:45:1c:cc:
e7:42:3b:1d:d3:46:fb:55:34:e7:2a:27:24:10:f8:
6a:05:61:ef:9c:83:bc:e8:28:68:4c:a4:df:3c:cf:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:ED:B0:60:B2:D0:EE:92:9F:E9:1E:EC:1C:B2:92:0A:0D:79:A6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/97625AD2AF7011EEA22D2E7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.216.0/24
113.203.231.0/24
113.203.248.0/24
113.203.250.0/24
115.167.49.0/24
115.167.60.0/22
115.167.78.0/24
115.167.104.0/22
115.167.112.0-115.167.123.255
175.110.80.0/22
175.110.88.0/22
175.110.105.0-175.110.106.255
175.110.111.0/24
180.178.152.0/21
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.229.0-223.29.230.255
223.29.235.0-223.29.236.255
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1b:e0:a0:94:8e:12:87:68:9d:b7:ae:56:88:a3:03:ba:ce:
40:cd:28:3b:8b:86:47:f5:e3:05:51:cb:ba:7f:26:b4:29:7c:
a5:31:51:10:e8:06:0e:19:d7:f0:7c:c4:8a:61:bf:a7:07:6e:
25:33:c7:78:82:b7:ea:36:36:12:cd:35:83:96:b3:f9:31:cf:
72:d5:9b:49:ce:ca:70:32:ab:61:38:c8:67:bb:9a:3d:ad:2f:
52:3a:a4:69:ca:63:1d:c1:84:02:1d:c5:37:d0:16:1d:23:58:
3b:94:f6:ef:e6:a0:da:50:59:97:d6:75:82:ca:70:98:44:14:
05:6e:de:d2:a8:e2:ed:be:59:2b:6b:c7:55:a6:9b:5d:b9:60:
6e:02:a5:34:dc:30:ae:53:4e:90:b1:dc:38:da:04:8a:1d:09:
f1:00:bb:4c:22:f5:83:3b:fe:7a:47:fd:a9:de:db:33:03:05:
e7:73:43:90:d9:8d:9b:65:bb:d5:01:a2:ad:c0:bd:7f:68:86:
51:61:e0:45:0c:6e:63:99:5b:c3:8a:1e:43:9b:dc:97:7b:24:
fd:55:5e:e2:03:4e:ac:94:ad:15:0a:e3:cf:9b:58:40:39:5e:
4c:5f:29:45:9f:6d:67:98:74:38:3b:2b:88:f0:49:d7:33:d8:
3b:0c:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:55:34 2025 by rpki-client