Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/814C195CBACD11EC901C390FC4F9AE02.roa
File: 814C195CBACD11EC901C390FC4F9AE02.roa (raw, json)
Hash identifier: IE1Wo2/DPOp2PXp3HhKer5juqrJyEk6A5L82AUBpimE=
Subject key identifier: A2:81:B4:1C:B3:9C:52:C6:9C:71:49:F4:D5:10:D9:FF:BB:D2:CB:F2
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 365B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/814C195CBACD11EC901C390FC4F9AE02.roa
Signing time: Wed 13 Apr 2022 02:00:35 +0000
ROA not before: Wed 13 Apr 2022 02:00:35 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 131429
IP address blocks: 42.1.64.0/18 maxlen: 24
45.121.24.0/22 maxlen: 24
59.153.220.0/22 maxlen: 24
59.153.224.0/22 maxlen: 24
59.153.228.0/22 maxlen: 24
59.153.232.0/22 maxlen: 24
59.153.236.0/22 maxlen: 24
59.153.240.0/22 maxlen: 24
59.153.244.0/22 maxlen: 24
59.153.248.0/22 maxlen: 24
59.153.252.0/22 maxlen: 24
103.7.174.0/23 maxlen: 24
103.156.0.0/23 maxlen: 23
103.156.0.0/24 maxlen: 24
103.156.1.0/24 maxlen: 24
103.156.2.0/23 maxlen: 23
103.156.2.0/24 maxlen: 24
103.156.3.0/24 maxlen: 24
103.156.4.0/23 maxlen: 23
103.156.4.0/24 maxlen: 24
103.156.5.0/24 maxlen: 24
103.156.6.0/24 maxlen: 24
103.156.7.0/24 maxlen: 24
103.156.8.0/24 maxlen: 24
103.156.9.0/24 maxlen: 24
103.156.38.0/24 maxlen: 24
103.156.39.0/24 maxlen: 24
103.156.40.0/24 maxlen: 24
103.156.41.0/24 maxlen: 24
103.156.42.0/24 maxlen: 24
103.156.43.0/24 maxlen: 24
103.156.44.0/24 maxlen: 24
103.156.45.0/24 maxlen: 24
103.156.46.0/24 maxlen: 24
103.156.47.0/24 maxlen: 24
103.156.48.0/24 maxlen: 24
103.156.49.0/24 maxlen: 24
103.156.58.0/24 maxlen: 24
103.156.59.0/24 maxlen: 24
103.156.60.0/24 maxlen: 24
103.156.61.0/24 maxlen: 24
103.199.24.0/24 maxlen: 24
103.199.28.0/22 maxlen: 24
103.199.32.0/23 maxlen: 24
103.199.36.0/22 maxlen: 24
103.199.40.0/22 maxlen: 24
103.199.44.0/22 maxlen: 24
103.199.48.0/22 maxlen: 24
103.199.52.0/22 maxlen: 24
103.199.56.0/22 maxlen: 24
103.199.60.0/22 maxlen: 24
103.199.68.0/22 maxlen: 24
103.199.72.0/22 maxlen: 24
103.199.76.0/22 maxlen: 24
137.59.26.0/24 maxlen: 24
137.59.28.0/22 maxlen: 24
137.59.32.0/23 maxlen: 24
137.59.36.0/22 maxlen: 24
137.59.40.0/22 maxlen: 24
137.59.44.0/22 maxlen: 24
2402:9d80::/40 maxlen: 48
2402:9d80:100::/40 maxlen: 48
2402:9d80:200::/40 maxlen: 48
2402:9d80:300::/40 maxlen: 48
2402:9d80:400::/40 maxlen: 48
2402:9d80:500::/40 maxlen: 48
2402:9d80:600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13915 (0x365b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Apr 13 02:00:35 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62562ec2-d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:9e:53:9f:c2:5a:d6:56:35:9f:ca:37:6a:
ce:72:8e:4c:6b:7c:ac:ff:bb:0f:fb:c0:2d:8e:c3:
27:31:9b:87:c4:85:44:74:67:80:62:66:37:52:e3:
68:56:f4:0b:7b:69:8f:94:0b:1c:e3:ec:24:f4:c7:
8a:0b:84:e8:dc:60:86:35:c2:97:82:fa:ab:32:aa:
ff:8e:b6:bd:53:d6:e6:eb:ae:64:2e:18:c4:5b:25:
e0:f3:d8:97:d6:20:54:5f:ce:9c:8b:24:bb:01:37:
f8:29:bc:9a:6b:6a:f8:e4:ea:f3:f7:27:9f:dc:44:
a8:b2:08:5a:79:f3:25:10:ed:35:65:67:13:f1:03:
bd:ed:7c:92:ce:fc:71:48:bb:21:6f:11:b9:ef:37:
96:27:00:88:62:a0:5a:d2:48:17:c7:e5:0a:c0:6b:
a2:ff:2b:52:87:b7:0c:39:c8:31:e7:43:cc:c6:57:
30:82:4d:eb:1e:8d:e9:ad:5e:3f:0a:32:c0:5e:d0:
04:c2:ae:f5:0e:94:6b:49:17:28:ea:13:2e:32:ca:
46:0f:a8:81:ea:79:ab:66:05:9f:7e:53:60:d3:52:
00:b5:95:f3:6a:47:0c:c8:aa:23:16:89:90:4b:79:
3e:bb:88:3a:33:35:ba:e0:44:46:21:8f:3f:6e:54:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:B4:1C:B3:9C:52:C6:9C:71:49:F4:D5:10:D9:FF:BB:D2:CB:F2
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/814C195CBACD11EC901C390FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.1.64.0/18
45.121.24.0/22
59.153.220.0-59.153.255.255
103.7.174.0/23
103.156.0.0-103.156.9.255
103.156.38.0-103.156.49.255
103.156.58.0-103.156.61.255
103.199.24.0/24
103.199.28.0-103.199.33.255
103.199.36.0-103.199.63.255
103.199.68.0-103.199.79.255
137.59.26.0/24
137.59.28.0-137.59.33.255
137.59.36.0-137.59.47.255
IPv6:
2402:9d80::-2402:9d80:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:e1:83:6b:f4:19:c1:b4:29:1f:47:11:9a:2d:8a:f6:33:03:
d8:99:b5:59:ee:59:26:f7:42:bb:4d:ab:b3:59:67:41:e3:e7:
43:00:52:70:16:32:7d:25:2b:7e:6d:29:8f:d4:2f:4e:95:cb:
9e:08:dc:18:8a:e5:8e:e4:e3:dd:c8:4b:bd:91:0b:35:c0:6c:
84:9c:b9:97:a6:31:26:49:41:2b:88:67:d9:8a:66:fa:9c:3f:
4b:ab:19:28:56:89:7d:57:36:89:1f:4c:93:7b:04:1a:c2:1c:
6f:c8:72:75:3d:3e:12:22:b6:d5:8d:41:b2:85:25:b3:3c:4b:
fc:63:fe:95:80:95:b2:31:f5:dd:c3:aa:a3:32:62:97:aa:ad:
d6:50:0d:b8:32:cb:14:48:8a:1c:c2:21:b9:5e:eb:63:fe:d4:
ae:74:6a:f5:57:44:db:44:38:47:7e:bd:a4:be:44:89:77:c7:
91:2e:d1:f4:ac:87:4f:3d:42:a7:30:ab:ed:14:cb:0f:66:39:
bf:de:0f:cc:98:64:48:f2:24:20:ed:a3:7f:16:00:92:90:af:
4e:25:91:ae:9d:ac:9f:94:bf:da:1a:d9:bf:f3:d2:58:dc:8e:
5a:37:2c:ad:3b:1b:17:99:d4:db:49:b7:00:f1:98:e3:a6:8f:
03:b9:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org