Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/42B04188AD9C11ED84E69A7DC4F9AE02.roa
File: 42B04188AD9C11ED84E69A7DC4F9AE02.roa (raw, json)
Hash identifier: F72U3Pf2B2tp2+9xm9aCgd/lqDFCdABaLAZYJ+LHYbg=
Subject key identifier: 3D:02:B1:3C:39:F7:58:36:66:20:C7:35:9E:44:B4:16:0A:31:69:4D
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 05E4
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/42B04188AD9C11ED84E69A7DC4F9AE02.roa
Signing time: Tue 11 Apr 2023 21:20:26 +0000
ROA not before: Tue 11 Apr 2023 21:20:26 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 49999
IP address blocks: 202.139.240.0/22 maxlen: 24
202.139.244.0/22 maxlen: 24
202.139.248.0/22 maxlen: 24
210.247.204.0/22 maxlen: 24
210.247.232.0/22 maxlen: 24
210.247.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Apr 11 21:20:26 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6435cf19-4ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:31:a9:00:f2:4f:fc:2d:ea:64:84:95:b0:
d9:c2:d6:b4:22:a4:75:f6:7c:a6:02:6c:2e:21:93:
d4:80:f3:78:7f:dc:c5:ec:0b:8b:a5:fd:ac:0d:0e:
f5:ac:74:8f:0f:88:ac:9b:da:a9:fc:c1:6e:1b:77:
43:8d:13:50:04:0a:43:b5:9c:ea:69:b5:8d:43:28:
e1:42:e6:cb:fd:b4:51:18:f2:72:de:10:02:b7:f3:
20:59:c7:92:18:4e:15:d9:4d:6c:d4:6e:9f:02:84:
aa:e1:5e:79:42:55:6c:77:35:3e:72:0e:70:96:a4:
94:17:5e:95:13:e3:b5:55:eb:fe:6c:d6:a1:11:ed:
60:2e:ca:c4:54:96:81:6d:f3:3d:42:db:3e:71:a9:
d7:c2:f6:b6:d7:75:a7:03:ac:0a:f2:f1:45:c7:d8:
1a:b7:e3:e9:7d:2c:29:b1:3d:cd:b5:ab:27:9a:e9:
8b:89:47:43:69:b7:39:03:45:9a:0d:be:98:a7:ce:
97:47:73:b0:a6:f4:05:f4:9b:9b:13:28:0b:19:72:
05:c5:17:26:b8:5b:1c:30:51:1a:b3:33:13:64:6a:
7c:85:30:8a:9d:f3:23:eb:78:9b:0e:5e:87:b7:1f:
8d:5f:6c:d1:d5:d8:04:ca:65:1c:f6:1a:b7:13:2a:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:B1:3C:39:F7:58:36:66:20:C7:35:9E:44:B4:16:0A:31:69:4D
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/42B04188AD9C11ED84E69A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.240.0-202.139.251.255
210.247.204.0/22
210.247.232.0/21
Signature Algorithm: sha256WithRSAEncryption
59:ca:d2:da:60:25:84:f6:e4:e7:70:04:e1:88:c8:81:d6:38:
9e:62:1c:3f:c9:b7:8e:9d:63:80:28:5b:c1:4a:e6:4d:8e:1e:
1d:5c:b2:35:82:2c:7a:cd:c6:31:29:e4:9c:d3:7b:1e:3d:6f:
6c:36:04:d4:fd:ca:6a:c6:48:36:7c:f8:06:77:b4:93:fb:70:
26:3b:67:e8:b3:57:c3:62:89:50:35:8a:18:42:4b:32:42:03:
ec:b1:73:4f:7e:1a:f2:a3:ba:09:77:c4:2e:90:24:0d:00:02:
ed:74:80:d2:19:12:7f:c6:34:57:f8:64:54:6a:70:c7:7c:4d:
f5:3c:df:23:59:e5:5c:a4:fc:ea:d2:67:0c:6e:ce:f5:e6:58:
11:f7:44:ca:b7:d6:7a:94:44:0c:2a:ca:d4:e9:6d:d9:7f:c8:
1f:6d:72:f0:af:f6:6d:f1:e3:87:85:b3:b4:ef:28:a8:73:47:
74:f2:e6:76:cd:a2:8b:98:3c:09:1c:a2:95:ff:79:1c:0a:d8:
d0:69:95:46:6e:30:bc:60:f8:dc:86:8a:21:c1:c4:36:da:60:
19:e7:d6:33:34:d3:d8:1b:45:97:f4:a4:ad:0c:20:87:8b:0f:
1c:bb:ec:63:7c:67:df:46:57:45:1b:0a:93:fc:79:19:2d:3f:
f0:5e:f4:20
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0
NTZGM0Q5QkMwHhcNMjMwNDExMjEyMDI2WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM1Y2YxOS00YWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymsxqQDyT/wt6mSElbDZwta0IqR19nymAmwuIZPUgPN4f9zF7AuLpf2sDQ71
rHSPD4ism9qp/MFuG3dDjRNQBApDtZzqabWNQyjhQubL/bRRGPJy3hACt/MgWceS
GE4V2U1s1G6fAoSq4V55QlVsdzU+cg5wlqSUF16VE+O1Vev+bNahEe1gLsrEVJaB
bfM9Qts+canXwva213WnA6wK8vFFx9gat+PpfSwpsT3NtasnmumLiUdDabc5A0Wa
Db6Yp86XR3OwpvQF9JubEygLGXIFxRcmuFscMFEaszMTZGp8hTCKnfMj63ibDl6H
tx+NX2zR1dgEymUc9hq3EyqBkQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFD0CsTw5
91g2ZiDHNZ5EtBYKMWlNMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw
MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I3QUIvNTY3ODY1Njg0MDA5MTFFQkEzNzQyMjVCQzRGOUFFMDIvNDJCMDQxODhB
RDlDMTFFRDg0RTY5QTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBowDAMEBMqL8AMEAsqL+AMEAtL3zAMEA9L36DANBgkqhkiG9w0B
AQsFAAOCAQEAWcrS2mAlhPbk53AE4YjIgdY4nmIcP8m3jp1jgChbwUrmTY4eHVyy
NYIses3GMSnknNN7Hj1vbDYE1P3KasZINnz4Bne0k/twJjtn6LNXw2KJUDWKGEJL
MkID7LFzT34a8qO6CXfELpAkDQAC7XSA0hkSf8Y0V/hkVGpwx3xN9TzfI1nlXKT8
6tJnDG7O9eZYEfdEyrfWepREDCrK1Olt2X/IH21y8K/2bfHjh4WztO8oqHNHdPLm
ds2ii5g8CRyilf95HArY0GmVRm4wvGD43IaKIcHENtpgGefWMzTT2BtFl/SkrQwg
h4sPHLvsY3xn30ZXRRsKk/x5GS0/8F70IA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org