Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E7E8E8AA0B5D11EBADED9667C4F9AE02.roa
File: E7E8E8AA0B5D11EBADED9667C4F9AE02.roa (raw, json)
Hash identifier: iY6YoVcAmCUqKNY3HZXtuRoqJbgpuhqe/DTO/PPKq20=
Subject key identifier: 41:AE:9C:1F:9B:B3:14:B8:B2:7D:23:8D:0B:1D:41:9E:A3:D0:10:C6
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 032A
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E7E8E8AA0B5D11EBADED9667C4F9AE02.roa
Signing time: Tue 16 Nov 2021 12:30:15 +0000
ROA not before: Tue 16 Nov 2021 12:30:15 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.164.0/24 maxlen: 24
45.116.165.0/24 maxlen: 24
45.116.166.0/24 maxlen: 24
45.116.167.0/24 maxlen: 24
59.153.148.0/24 maxlen: 24
59.153.149.0/24 maxlen: 24
59.153.150.0/24 maxlen: 24
59.153.151.0/24 maxlen: 24
61.4.112.0/24 maxlen: 24
61.4.113.0/24 maxlen: 24
61.4.114.0/24 maxlen: 24
61.4.115.0/24 maxlen: 24
61.4.116.0/24 maxlen: 24
61.4.117.0/24 maxlen: 24
61.4.118.0/24 maxlen: 24
61.4.119.0/24 maxlen: 24
61.4.120.0/24 maxlen: 24
61.4.121.0/24 maxlen: 24
61.4.122.0/24 maxlen: 24
61.4.123.0/24 maxlen: 24
61.4.124.0/24 maxlen: 24
61.4.125.0/24 maxlen: 24
61.4.126.0/24 maxlen: 24
61.4.127.0/24 maxlen: 24
103.198.192.0/24 maxlen: 24
103.198.193.0/24 maxlen: 24
103.198.194.0/24 maxlen: 24
103.198.195.0/24 maxlen: 24
103.229.64.0/24 maxlen: 24
103.229.65.0/24 maxlen: 24
103.229.66.0/24 maxlen: 24
103.229.67.0/24 maxlen: 24
103.229.224.0/24 maxlen: 24
103.229.225.0/24 maxlen: 24
103.229.226.0/24 maxlen: 24
103.229.227.0/24 maxlen: 24
103.230.144.0/24 maxlen: 24
103.230.145.0/24 maxlen: 24
103.230.146.0/24 maxlen: 24
103.230.147.0/24 maxlen: 24
103.232.136.0/24 maxlen: 24
103.232.137.0/24 maxlen: 24
103.232.138.0/24 maxlen: 24
103.232.139.0/24 maxlen: 24
114.29.252.0/24 maxlen: 24
114.29.253.0/24 maxlen: 24
114.29.254.0/24 maxlen: 24
114.29.255.0/24 maxlen: 24
118.107.248.0/24 maxlen: 24
118.107.249.0/24 maxlen: 24
118.107.250.0/24 maxlen: 24
118.107.251.0/24 maxlen: 24
118.107.252.0/24 maxlen: 24
118.107.253.0/24 maxlen: 24
118.107.254.0/24 maxlen: 24
118.107.255.0/24 maxlen: 24
185.189.160.0/24 maxlen: 24
185.189.161.0/24 maxlen: 24
185.189.162.0/24 maxlen: 24
185.189.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Nov 16 12:30:15 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=6193a457-6585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:ed:86:b0:d3:10:a7:d2:ee:3f:2f:cc:00:
0a:2f:30:90:ea:c5:1e:27:88:ca:ea:4e:6d:f4:65:
b2:19:51:4a:d5:20:75:01:1f:57:13:50:64:b2:70:
4b:8f:86:78:9a:37:55:76:4b:ca:22:53:b1:35:3a:
22:37:57:c5:82:70:4e:2b:ec:bc:bb:30:aa:e2:f2:
be:75:00:66:0d:6f:ae:d8:26:0d:68:cb:5f:03:d1:
49:72:dc:ae:a1:4e:78:50:3c:e8:34:99:6f:8c:e4:
66:56:1e:55:f2:e0:5a:d7:ee:23:cb:de:46:0c:ad:
ea:cd:15:d7:00:b5:c8:65:a4:59:35:f4:df:43:87:
b6:a3:6a:e2:17:a0:a3:38:89:e7:9f:08:5e:d5:8b:
08:0c:60:87:1a:38:b4:ad:34:9a:50:b8:2b:13:72:
f2:a0:fe:dc:fc:3f:9f:65:cd:ff:55:99:71:c3:bf:
22:9f:fa:2b:b5:a7:f9:63:f0:17:10:39:c4:70:1f:
0e:83:c4:ba:83:5a:a5:8f:be:f6:77:e6:74:6c:f7:
1a:91:24:d1:9c:56:4f:a9:52:6c:54:67:63:ab:18:
40:fe:e7:9b:86:ce:67:e5:e4:3e:bd:ba:26:ef:c8:
03:ce:16:aa:c4:33:d6:a8:65:8f:2d:0f:26:94:71:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:9C:1F:9B:B3:14:B8:B2:7D:23:8D:0B:1D:41:9E:A3:D0:10:C6
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E7E8E8AA0B5D11EBADED9667C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.164.0/22
59.153.148.0/22
61.4.112.0/20
103.198.192.0/22
103.229.64.0/22
103.229.224.0/22
103.230.144.0/22
103.232.136.0/22
114.29.252.0/22
118.107.248.0/21
185.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:d0:c4:a1:aa:c6:ff:b8:d9:bd:85:7b:62:57:87:f6:14:dd:
66:5f:1a:55:e6:90:ab:0e:c3:17:4e:ed:4e:02:b5:fd:e9:6b:
a8:ab:0d:8b:44:31:0f:cf:e0:a3:7d:5a:6f:e7:91:29:c0:3f:
17:4f:2d:86:53:0a:f3:0c:b2:3e:9c:08:e3:55:1c:86:1a:9c:
2f:ee:21:e6:cb:16:9e:17:f2:51:9d:0b:ad:d1:fe:b1:f1:ef:
a9:41:15:93:ad:bb:a0:db:1a:8d:6b:f1:62:de:d9:f7:6a:dc:
f7:a3:7f:bd:00:de:8d:83:c4:71:af:5d:06:6c:fe:ce:92:51:
80:95:ee:bb:b8:60:42:55:c9:f6:66:c0:75:f7:e2:a6:27:cc:
3c:fa:ba:a7:e8:d3:ed:07:04:82:34:80:82:ec:ae:fe:06:e8:
31:75:e5:8f:5e:39:29:4c:94:70:cc:ef:16:3e:75:14:06:ef:
13:c5:80:41:2b:63:23:de:e7:a4:c3:17:27:25:4d:00:f7:33:
cc:63:17:92:17:c9:29:f4:9e:10:cc:d4:7f:f2:e2:c2:b9:50:
55:a1:5b:d4:53:55:f8:5b:9a:19:90:c7:04:3c:28:20:70:5e:
bc:05:fd:88:83:f0:8a:5b:84:d1:67:37:0a:d1:18:4e:97:bc:
db:a0:d7:a1
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjExMTE2MTIzMDE1WhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTkzYTQ1Ny02NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYTthrDTEKfS7j8vzAAKLzCQ6sUeJ4jK6k5t9GWyGVFK1SB1AR9XE1BksnBL
j4Z4mjdVdkvKIlOxNToiN1fFgnBOK+y8uzCq4vK+dQBmDW+u2CYNaMtfA9FJctyu
oU54UDzoNJlvjORmVh5V8uBa1+4jy95GDK3qzRXXALXIZaRZNfTfQ4e2o2riF6Cj
OInnnwhe1YsIDGCHGji0rTSaULgrE3LyoP7c/D+fZc3/VZlxw78in/ortaf5Y/AX
EDnEcB8Og8S6g1qlj772d+Z0bPcakSTRnFZPqVJsVGdjqxhA/uebhs5n5eQ+vbom
78gDzhaqxDPWqGWPLQ8mlHGFeQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFEGunB+b
sxS4sn0jjQsdQZ6j0BDGMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjMwNzIvMENFQTQ5NUMwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvRTdFOEU4QUEw
QjVEMTFFQkFERUQ5NjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E
TDBKMEgEAgABMEIDBAItdKQDBAI7mZQDBAQ9BHADBAJnxsADBAJn5UADBAJn5eAD
BAJn5pADBAJn6IgDBAJyHfwDBAN2a/gDBAK5vaAwDQYJKoZIhvcNAQELBQADggEB
AIrQxKGqxv+42b2Fe2JXh/YU3WZfGlXmkKsOwxdO7U4Ctf3pa6irDYtEMQ/P4KN9
Wm/nkSnAPxdPLYZTCvMMsj6cCONVHIYanC/uIebLFp4X8lGdC63R/rHx76lBFZOt
u6DbGo1r8WLe2fdq3Pejf70A3o2DxHGvXQZs/s6SUYCV7ru4YEJVyfZmwHX34qYn
zDz6uqfo0+0HBII0gILsrv4G6DF15Y9eOSlMlHDM7xY+dRQG7xPFgEErYyPe56TD
FyclTQD3M8xjF5IXySn0nhDM1H/y4sK5UFWhW9RTVfhbmhmQxwQ8KCBwXrwF/YiD
8IpbhNFnNwrRGE6XvNug16E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org