Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/07A2FF8EDDA611EC85D98516C4F9AE02.roa
File: 07A2FF8EDDA611EC85D98516C4F9AE02.roa (raw, json)
Hash identifier: ztxuUkuYg6na5Lb+/PqFTsQL/JRk3IR9Z86oOk4AAt8=
Subject key identifier: 0F:6F:C1:3C:10:50:E4:AD:E5:5D:F4:A6:21:FC:88:BA:13:F9:5D:B6
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1256
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/07A2FF8EDDA611EC85D98516C4F9AE02.roa
Signing time: Mon 18 Jul 2022 07:26:24 +0000
ROA not before: Mon 18 Jul 2022 07:26:24 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 136907
IP address blocks: 14.137.136.0/22 maxlen: 22
14.137.143.0/24 maxlen: 24
14.137.156.0/24 maxlen: 24
14.137.157.0/24 maxlen: 24
14.137.164.0/22 maxlen: 22
14.137.165.0/24 maxlen: 24
101.44.0.0/18 maxlen: 18
101.44.64.0/18 maxlen: 18
103.239.72.0/24 maxlen: 24
103.239.73.0/24 maxlen: 24
103.240.156.0/22 maxlen: 22
103.240.156.0/24 maxlen: 24
103.240.157.0/24 maxlen: 24
103.240.158.0/24 maxlen: 24
103.240.159.0/24 maxlen: 24
103.255.60.0/24 maxlen: 24
103.255.61.0/24 maxlen: 24
103.255.62.0/24 maxlen: 24
103.255.63.0/24 maxlen: 24
110.238.97.0/24 maxlen: 24
110.239.64.0/19 maxlen: 19
110.239.96.0/19 maxlen: 19
110.239.127.0/24 maxlen: 24
119.8.225.0/24 maxlen: 24
121.91.200.0/21 maxlen: 21
121.91.200.0/24 maxlen: 24
121.91.201.0/24 maxlen: 24
121.91.202.0/24 maxlen: 24
121.91.203.0/24 maxlen: 24
121.91.204.0/24 maxlen: 24
121.91.205.0/24 maxlen: 24
121.91.206.0/24 maxlen: 24
121.91.207.0/24 maxlen: 24
122.8.176.0/21 maxlen: 21
122.8.184.0/22 maxlen: 22
122.8.188.0/22 maxlen: 22
182.160.36.0/22 maxlen: 22
182.160.40.0/22 maxlen: 22
182.160.52.0/22 maxlen: 22
182.160.56.0/24 maxlen: 24
182.160.57.0/24 maxlen: 24
182.160.58.0/24 maxlen: 24
182.160.59.0/24 maxlen: 24
182.160.60.0/24 maxlen: 24
182.160.61.0/24 maxlen: 24
182.160.62.0/24 maxlen: 24
182.160.63.0/24 maxlen: 24
2405:f080:a00::/39 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jul 18 07:26:24 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62d50b20-fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:9f:e6:96:00:b8:a5:ce:97:84:58:5c:53:
25:cd:63:7a:26:59:3d:2f:66:18:b5:a1:6d:e5:7e:
83:c1:55:78:c8:8a:88:fe:7a:4f:3b:d8:7b:82:43:
73:9e:59:42:24:c3:c7:21:91:3b:0f:17:17:e1:e5:
fc:76:3a:99:5f:a1:27:1d:91:29:80:80:be:cd:62:
79:e7:26:6f:1f:24:d5:e3:0c:92:a6:0a:cf:6c:a1:
0e:ce:8f:19:05:da:f8:08:35:de:10:5d:40:b6:92:
e0:4c:62:de:e2:4d:8f:a1:72:f0:6b:2b:3b:17:c5:
5e:07:da:10:75:cf:a7:18:f6:8b:18:a6:ae:4b:15:
a8:ca:12:ba:ad:ce:74:03:58:d8:64:74:d7:27:d1:
32:2e:e3:36:e9:fa:d9:ed:f2:56:14:6d:d0:dc:87:
ca:2f:6c:a4:16:4b:8d:e4:70:d9:4a:0a:fc:d0:d7:
f4:43:fc:75:4e:3d:03:dc:2c:bc:01:05:46:d8:d5:
52:17:a2:72:30:e2:05:d3:c0:fc:a0:1f:d6:0a:5c:
92:6e:7a:a8:31:3b:8b:38:63:02:5f:94:e1:24:9f:
3d:18:de:c5:13:84:7a:a5:c4:8f:1a:e0:74:c4:0c:
55:b7:7f:92:f0:d2:5a:b9:5d:79:4b:1b:ea:a0:b0:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:C1:3C:10:50:E4:AD:E5:5D:F4:A6:21:FC:88:BA:13:F9:5D:B6
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/07A2FF8EDDA611EC85D98516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.136.0/22
14.137.143.0/24
14.137.156.0/23
14.137.164.0/22
101.44.0.0/17
103.239.72.0/23
103.240.156.0/22
103.255.60.0/22
110.238.97.0/24
110.239.64.0/18
119.8.225.0/24
121.91.200.0/21
122.8.176.0/20
182.160.36.0-182.160.43.255
182.160.52.0-182.160.63.255
IPv6:
2405:f080:a00::/39
Signature Algorithm: sha256WithRSAEncryption
b8:2a:4a:c1:d6:1c:06:f8:1f:56:5c:83:6a:00:87:9d:19:a5:
c3:77:c0:b7:85:ac:7c:33:5c:f5:d3:7e:56:c8:d8:cd:b8:e7:
4f:fe:02:90:46:28:b6:6c:ad:97:c8:4e:ab:ef:ab:8e:38:37:
8e:5b:6e:a8:2b:a4:cc:75:d5:6f:3c:0d:e3:0a:81:81:ed:11:
a4:29:3f:fc:f8:20:a2:fa:d0:05:39:e9:48:e0:93:f7:4e:66:
5f:18:6e:d2:fb:94:aa:d3:10:32:a6:3e:1c:f0:ff:40:0a:b6:
84:56:c6:86:e8:ad:da:5d:72:0b:ae:2d:87:fe:67:8d:43:73:
5f:36:26:1a:32:ed:e0:4c:af:45:db:cc:42:1c:1d:1c:26:71:
44:14:3d:a8:6d:f9:75:64:c5:77:de:58:5e:1a:25:78:82:e6:
af:c5:63:b5:49:7a:77:02:4e:1f:4f:1c:09:e7:dd:36:10:95:
fe:fd:fc:b3:5e:ef:c4:2c:93:58:04:ec:b5:21:44:03:fd:39:
12:13:a6:44:aa:60:12:2b:8e:dd:49:c9:d4:63:be:f6:62:1e:
29:d7:c5:bf:cd:f1:32:09:b0:8c:75:9d:e7:b0:b6:60:a7:41:
3d:7e:9f:4e:5a:fe:95:d6:e4:53:32:8f:40:b2:20:38:a0:27:
1c:ac:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org