Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3231550C6C7211EC851BC278C4F9AE02.roa
File: 3231550C6C7211EC851BC278C4F9AE02.roa (raw, json)
Hash identifier: 1ZIgWKQdrvvzn5NiLSlPVbeFH8iXO13Sqw7ZbAx64YA=
Subject key identifier: D1:4B:74:B7:71:A9:71:01:B9:66:CD:9E:31:CD:3B:97:09:66:C0:0F
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 313D
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3231550C6C7211EC851BC278C4F9AE02.roa
Signing time: Mon 03 Jan 2022 08:50:27 +0000
ROA not before: Mon 03 Jan 2022 08:50:27 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.144.0/20 maxlen: 24
111.88.184.0/21 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.200.0/21 maxlen: 21
203.81.200.0/24 maxlen: 24
203.81.201.0/24 maxlen: 24
203.81.202.0/24 maxlen: 24
203.81.203.0/24 maxlen: 24
203.81.204.0/22 maxlen: 22
203.81.204.0/24 maxlen: 24
203.81.205.0/24 maxlen: 24
203.81.206.0/24 maxlen: 24
203.81.207.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12605 (0x313d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jan 3 08:50:27 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61d2b8d2-a86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:00:e8:d0:7a:38:74:e2:e1:d0:fa:e6:7e:
47:b6:f3:98:71:81:21:fc:8e:f0:cc:7e:ca:f7:dc:
40:03:90:5f:b3:49:8f:66:d3:38:65:f8:d7:5b:86:
4d:8b:45:a2:49:7b:a6:5b:02:36:f5:09:6d:0c:ff:
1f:e0:f6:19:91:3d:c6:b7:26:bf:0a:86:9b:f9:d6:
bb:05:03:fe:73:2c:c1:24:c5:58:9a:9f:83:24:62:
eb:f1:59:b1:a0:68:c4:42:ca:66:90:38:1a:73:10:
fd:d6:5b:c0:6e:b8:54:12:ab:7e:4d:40:e2:fc:c3:
39:94:7d:e9:b3:ca:a2:18:29:9a:0a:62:14:45:62:
87:5a:33:61:b4:fc:8b:22:30:c4:85:e5:aa:1c:ca:
a0:fe:2e:43:a2:5d:b5:b6:58:6d:63:f8:95:64:80:
23:49:c7:54:10:cc:98:9c:3b:25:63:87:72:ea:cf:
5c:a5:13:8f:f2:fe:e3:51:b0:1a:3a:ca:82:0e:98:
c9:e2:d0:9a:a8:ca:16:47:19:07:d2:8c:33:b8:b4:
b1:55:2c:bb:5c:1e:31:49:b7:98:51:22:1a:4a:34:
a6:df:6f:e8:2b:0c:c3:40:23:a5:39:fe:23:03:37:
ba:10:82:86:f4:c7:fe:4e:87:c0:ab:82:81:21:22:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:74:B7:71:A9:71:01:B9:66:CD:9E:31:CD:3B:97:09:66:C0:0F
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3231550C6C7211EC851BC278C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.144.0/20
111.88.184.0/21
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.13.0/24
117.102.29.0-117.102.31.255
203.81.200.0/21
203.81.216.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8d:e5:e0:da:54:22:3c:39:84:b0:39:6e:43:ce:4b:0b:6b:
b3:a4:07:14:1e:42:01:60:ef:40:40:7f:f1:80:5a:a1:1e:d0:
df:64:7d:78:ac:e3:4a:b1:4f:ad:a7:da:1d:1b:fb:b3:96:2e:
14:34:82:5b:77:e6:d0:d1:77:ea:0b:ff:26:73:41:0b:fc:33:
23:66:5a:59:11:78:b4:26:ff:4a:f6:c8:0a:76:1d:d3:51:34:
4b:6e:b4:2e:90:76:5b:58:08:7e:fc:ea:47:bc:42:f5:ab:c7:
0e:46:95:40:42:31:41:8b:f9:96:8b:83:8d:65:fb:69:6e:2b:
86:06:91:9f:e8:98:ee:e0:8b:be:01:66:63:5b:7c:6b:61:43:
2c:84:06:1f:da:4d:c7:f5:14:79:79:84:b7:d2:e4:f7:8b:a5:
e3:25:43:af:0f:3c:dd:9f:26:bd:11:b6:a7:d2:6b:ad:c7:27:
ce:da:f4:85:06:93:6d:9f:24:cd:93:76:bb:2f:e3:8d:11:b8:
4c:7c:b5:ac:89:09:cd:ca:ef:05:0b:2a:43:bf:cd:34:5e:f7:
7d:3d:0d:a3:b4:7a:ef:c2:c0:c6:35:c1:7c:41:9e:b0:30:d5:
88:35:4b:20:cf:7c:1d:ec:36:db:26:61:83:ac:55:6d:6d:08:
4b:18:ab:a7
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgICMT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjIwMTAzMDg1MDI3WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWQyYjhkMi1hODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+sA6NB6OHTi4dD65n5HtvOYcYEh/I7wzH7K99xAA5Bfs0mPZtM4ZfjXW4ZN
i0WiSXumWwI29QltDP8f4PYZkT3Gtya/Coab+da7BQP+cyzBJMVYmp+DJGLr8Vmx
oGjEQspmkDgacxD91lvAbrhUEqt+TUDi/MM5lH3ps8qiGCmaCmIURWKHWjNhtPyL
IjDEheWqHMqg/i5Dol21tlhtY/iVZIAjScdUEMyYnDslY4dy6s9cpROP8v7jUbAa
OsqCDpjJ4tCaqMoWRxkH0owzuLSxVSy7XB4xSbeYUSIaSjSm32/oKwzDQCOlOf4j
Aze6EIKG9Mf+TofAq4KBISLNKQIDAQABo4IDETCCAw0wHQYDVR0OBBYEFNFLdLdx
qXEBuWbNnjHNO5cJZsAPMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMzIzMTU1MEM2
QzcyMTFFQzg1MUJDMjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZoGCCsGAQUFBwEHAQH/
BIGKMIGHMIGEBAIAATB+AwQEb1iQAwQDb1i4AwQAc7oAAwQAc7oTAwQDc7owAwQF
c7pAAwQAc7phMAwDBABzumMDBAFzumgDBABzunIDBAJzunQDBAFzunoDBAFzun4D
BAB1Zg0wDAMEAHVmHQMEBXVmAAMEA8tRyDAMAwQDy1HYAwQBy1HkAwQAy1HnMA0G
CSqGSIb3DQEBCwUAA4IBAQCnjeXg2lQiPDmEsDluQ85LC2uzpAcUHkIBYO9AQH/x
gFqhHtDfZH14rONKsU+tp9odG/uzli4UNIJbd+bQ0XfqC/8mc0EL/DMjZlpZEXi0
Jv9K9sgKdh3TUTRLbrQukHZbWAh+/OpHvEL1q8cORpVAQjFBi/mWi4ONZftpbiuG
BpGf6Jju4Iu+AWZjW3xrYUMshAYf2k3H9RR5eYS30uT3i6XjJUOvDzzdnya9Eban
0mutxyfO2vSFBpNtnyTNk3a7L+ONEbhMfLWsiQnNyu8FCypDv800Xvd9PQ2jtHrv
wsDGNcF8QZ6wMNWINUsgz3wd7DbbJmGDrFVtbQhLGKun
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org