Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/72CC3228C7BE11EDAEFB286CC4F9AE02.roa
File: 72CC3228C7BE11EDAEFB286CC4F9AE02.roa (raw, json)
Hash identifier: MmU25rNnjhlNj9wLzuasWu7IaNYwO/oqgSciTy+yns4=
Subject key identifier: 14:7A:D9:8F:0D:5D:AD:7E:6D:C9:08:38:C4:E0:DA:B8:6E:77:3B:C6
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 33F8
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/72CC3228C7BE11EDAEFB286CC4F9AE02.roa
Signing time: Tue 21 Mar 2023 08:00:30 +0000
ROA not before: Tue 21 Mar 2023 08:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/21 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 21
115.186.64.0/21 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/20 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13304 (0x33f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 21 08:00:30 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6419641e-01fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:b9:73:39:c1:4a:7e:07:a0:16:82:34:e8:
fc:34:29:4e:3d:63:23:8d:6b:13:3b:13:6d:6d:17:
7c:9d:17:e3:63:5c:71:7b:46:74:22:15:f3:df:48:
1a:a4:e5:8b:3b:fe:42:5a:1a:8e:b2:56:3e:4e:9d:
6e:d6:54:c8:04:46:b0:61:9f:22:ba:52:f2:d2:46:
af:ef:a0:30:0d:3b:f3:c4:3e:88:4e:e9:5b:82:0b:
d8:b1:08:98:23:7b:c3:96:a2:c8:ba:ac:6b:0f:a4:
46:a7:0f:d6:ad:3e:8c:bf:3a:57:32:5a:a3:3e:43:
7b:9f:e6:d4:ca:3c:1d:1e:16:e7:0c:47:0a:4c:ee:
f5:b9:a6:fe:bd:ef:62:f7:c5:ef:2d:de:5c:40:89:
88:d4:bd:3e:46:14:f6:9e:28:91:99:3a:df:6f:a6:
9e:98:b5:22:91:c6:11:43:01:7a:98:90:b0:ff:8e:
ba:ba:9f:41:c8:c8:79:e3:61:9a:03:25:02:99:56:
f9:55:c7:c9:0d:47:00:48:8f:a6:29:1b:99:60:55:
5b:c9:9d:df:6e:a5:4d:02:6e:80:8a:60:c1:d6:28:
b6:80:ef:4b:74:e7:ff:91:59:8c:25:27:25:b5:d1:
ea:67:25:a5:3c:2e:89:f4:17:2f:da:30:bb:8f:f3:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:D9:8F:0D:5D:AD:7E:6D:C9:08:38:C4:E0:DA:B8:6E:77:3B:C6
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/72CC3228C7BE11EDAEFB286CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0/21
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.13.0/24
117.102.29.0-117.102.31.255
203.81.216.0/24
203.81.219.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4d:9f:7b:14:85:94:d5:a1:84:6b:3b:7e:3e:52:1e:f0:17:
a8:ba:51:45:83:59:4a:03:70:bd:8d:35:0b:ba:03:83:6f:02:
7e:92:8c:36:f2:4b:f5:e0:6f:b9:f1:55:d5:97:15:e4:be:dc:
c8:96:cf:be:18:e8:02:ba:33:39:b1:55:c4:a3:0c:5a:ac:52:
32:9b:2d:37:88:18:2c:46:98:00:3e:46:34:4b:a9:b6:d9:3e:
00:8f:3c:8a:3d:88:ea:17:a4:d7:91:90:8b:00:dd:bf:41:3e:
c1:52:c9:96:34:1e:d7:cf:e9:c4:c3:8b:a7:97:c0:3a:ae:bb:
7f:a2:e7:85:6b:27:b1:8e:b9:60:a2:f4:07:2c:1e:40:ee:1f:
e1:91:9a:61:13:8a:9a:d8:20:5c:bf:b9:68:0a:4c:69:53:64:
85:b1:ae:cc:ac:5d:02:05:ab:56:b9:ce:a2:86:79:c1:f3:41:
35:dc:e8:c9:f9:3a:e1:3e:63:8f:2f:70:19:f2:9a:ae:3f:05:
d2:0f:f0:7c:f1:7a:31:06:5f:51:b1:94:21:17:1e:f4:2c:1f:
38:9b:41:16:30:7e:a5:c1:6a:18:69:6f:80:77:3b:20:5a:21:
9f:e1:43:3a:e6:e9:e0:5b:c7:dc:a0:0c:9c:8b:a4:09:cc:17:
e7:97:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org