Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/920BEE3AF84211ED9A637A17C4F9AE02.roa
File: 920BEE3AF84211ED9A637A17C4F9AE02.roa (raw, json)
Hash identifier: 6d6EDl/gRJTYOtPf6anPiehlPHQfTx4dh7b7xWZZyCE=
Subject key identifier: 37:ED:D4:0F:B5:8B:44:0C:5E:D0:FE:8A:13:DC:CB:F1:86:5B:73:B2
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 061D
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/920BEE3AF84211ED9A637A17C4F9AE02.roa
Signing time: Mon 22 May 2023 01:47:12 +0000
ROA not before: Mon 22 May 2023 01:47:12 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 49999
IP address blocks: 202.139.244.0/22 maxlen: 24
202.139.248.0/22 maxlen: 24
202.148.136.0/22 maxlen: 24
210.247.204.0/22 maxlen: 24
210.247.208.0/22 maxlen: 24
210.247.212.0/22 maxlen: 24
210.247.228.0/22 maxlen: 24
210.247.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: May 22 01:47:12 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=646ac9a0-0a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:3d:5f:93:6c:87:99:47:d6:09:73:2e:fc:
2c:f0:d3:5d:ad:67:59:e0:99:da:99:d5:62:dd:2f:
3f:fa:65:c5:af:12:bf:0e:d5:f2:9f:1d:33:e2:c2:
4c:fc:fb:8c:d3:72:6d:ea:9c:4f:40:72:4b:bd:ca:
f4:a0:4d:3d:71:9f:0d:f6:75:01:a2:38:c9:3d:6f:
4c:84:5a:c7:02:10:b9:01:37:98:8a:58:83:b0:69:
19:89:46:3d:c5:ec:f5:80:a9:5d:16:35:3e:15:56:
d9:4e:aa:75:01:18:3d:a7:05:ba:1c:8b:f8:88:76:
7b:d0:38:3b:dc:e3:e5:3a:ee:a6:78:ab:13:1a:81:
b0:0d:9d:32:cb:0b:11:fd:e8:e1:65:7b:bf:9c:5d:
5a:d8:a6:53:ff:08:75:c5:a2:d0:0c:ff:73:18:12:
32:0c:4f:ba:af:d9:22:f4:9e:59:79:df:9c:c2:46:
ef:e5:08:25:30:f7:3e:5d:72:06:ac:38:73:2b:56:
e2:fa:c9:0c:36:e2:bc:dc:a3:bd:26:2c:54:91:e5:
cb:af:46:98:44:7b:b4:72:31:19:b1:2b:a3:ca:e1:
05:3f:be:4f:1c:a5:f1:a8:99:6e:60:6c:d9:16:79:
83:e8:ba:2c:bb:89:14:59:48:ba:26:15:b1:db:5e:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:D4:0F:B5:8B:44:0C:5E:D0:FE:8A:13:DC:CB:F1:86:5B:73:B2
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/920BEE3AF84211ED9A637A17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.244.0-202.139.251.255
202.148.136.0/22
210.247.204.0-210.247.215.255
210.247.228.0/22
210.247.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:2e:74:46:71:62:18:61:6f:c6:ac:c9:d5:20:a4:b9:3e:88:
13:e5:04:62:4e:5e:33:16:b0:10:43:3b:05:7f:df:e7:13:0d:
88:ec:1f:4a:c6:3f:13:20:26:73:86:af:23:fe:ad:69:08:91:
29:c9:33:e6:cc:03:f9:2c:02:d8:38:cc:94:2e:a4:b4:4c:4b:
36:e8:b1:0b:bf:86:44:79:ba:68:8a:89:b1:23:6c:5a:50:57:
c7:2c:fd:f8:f6:f5:8a:78:f8:31:f0:83:d6:ce:1f:6b:b2:e2:
af:dd:f2:1d:93:f8:87:13:04:51:70:af:5e:7c:c8:f8:c1:26:
2d:6b:6b:6b:4c:7e:74:22:74:c7:8c:d1:68:ec:75:58:65:45:
90:84:de:2a:c6:d9:00:08:5f:c1:1c:21:63:f1:d3:c7:d3:a1:
2e:3e:88:46:74:32:a3:5b:1f:95:8f:5a:c1:1f:de:5a:8b:c7:
05:24:5d:ab:02:b8:d3:c6:2d:3a:36:f1:4e:fc:8a:c1:d7:75:
4e:0d:df:7e:f0:1f:fd:c6:62:fc:15:3c:be:9b:ed:bf:b8:4f:
db:68:70:cd:6e:48:86:cf:49:72:4a:95:7a:e1:06:bf:7e:49:
be:06:4a:e8:25:d8:53:eb:d8:31:47:f4:ff:cb:b4:7a:73:e1:
56:98:98:c3
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0
NTZGM0Q5QkMwHhcNMjMwNTIyMDE0NzEyWhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDZhYzlhMC0wYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowc9X5Nsh5lH1glzLvws8NNdrWdZ4JnamdVi3S8/+mXFrxK/DtXynx0z4sJM
/PuM03Jt6pxPQHJLvcr0oE09cZ8N9nUBojjJPW9MhFrHAhC5ATeYiliDsGkZiUY9
xez1gKldFjU+FVbZTqp1ARg9pwW6HIv4iHZ70Dg73OPlOu6meKsTGoGwDZ0yywsR
/ejhZXu/nF1a2KZT/wh1xaLQDP9zGBIyDE+6r9ki9J5Zed+cwkbv5QglMPc+XXIG
rDhzK1bi+skMNuK83KO9JixUkeXLr0aYRHu0cjEZsSujyuEFP75PHKXxqJluYGzZ
FnmD6Losu4kUWUi6JhWx216/gQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFDft1A+1
i0QMXtD+ihPcy/GGW3OyMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw
MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I3QUIvNTY3ODY1Njg0MDA5MTFFQkEzNzQyMjVCQzRGOUFFMDIvOTIwQkVFM0FG
ODQyMTFFRDlBNjM3QTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MDQEAgABMC4wDAMEAsqL9AMEAsqL+AMEAsqUiDAMAwQC0vfMAwQD0vfQAwQC
0vfkAwQC0vfsMA0GCSqGSIb3DQEBCwUAA4IBAQA9LnRGcWIYYW/GrMnVIKS5PogT
5QRiTl4zFrAQQzsFf9/nEw2I7B9Kxj8TICZzhq8j/q1pCJEpyTPmzAP5LALYOMyU
LqS0TEs26LELv4ZEebpoiomxI2xaUFfHLP349vWKePgx8IPWzh9rsuKv3fIdk/iH
EwRRcK9efMj4wSYta2trTH50InTHjNFo7HVYZUWQhN4qxtkACF/BHCFj8dPH06Eu
PohGdDKjWx+Vj1rBH95ai8cFJF2rArjTxi06NvFO/IrB13VODd9+8B/9xmL8FTy+
m+2/uE/baHDNbkiGz0lySpV64Qa/fkm+BkroJdhT69gxR/T/y7R6c+FWmJjD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org