Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/E1E13E323A3411EDA5928760C4F9AE02.roa
File: E1E13E323A3411EDA5928760C4F9AE02.roa (raw, json)
Hash identifier: jho2FcdRaRABJaTOpM55zVLizJ3TNSHhLOgnM6eYEx4=
Subject key identifier: FC:03:94:B9:BE:5E:9E:B2:E7:5C:AC:CA:EE:AB:57:B4:72:3C:23:54
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 32CE
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/E1E13E323A3411EDA5928760C4F9AE02.roa
Signing time: Thu 22 Sep 2022 05:10:32 +0000
ROA not before: Thu 22 Sep 2022 05:10:32 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 17408
IP address blocks: 202.3.160.0/20 maxlen: 23
202.3.160.0/21 maxlen: 24
202.3.168.0/23 maxlen: 24
202.3.170.0/24 maxlen: 24
202.3.172.0/22 maxlen: 24
202.3.176.0/21 maxlen: 24
202.3.186.0/23 maxlen: 24
202.3.188.0/22 maxlen: 24
202.55.224.0/19 maxlen: 23
202.55.224.0/21 maxlen: 24
202.55.232.0/23 maxlen: 24
202.55.235.0/24 maxlen: 24
202.55.236.0/22 maxlen: 24
202.55.240.0/21 maxlen: 24
202.55.248.0/22 maxlen: 24
202.55.252.0/24 maxlen: 24
202.55.254.0/23 maxlen: 24
202.153.160.0/23 maxlen: 23
202.153.160.0/24 maxlen: 24
202.153.161.0/24 maxlen: 24
202.153.162.0/23 maxlen: 23
202.153.162.0/24 maxlen: 24
202.153.164.0/24 maxlen: 24
202.153.165.0/24 maxlen: 24
202.153.167.0/24 maxlen: 24
202.153.168.0/23 maxlen: 23
202.153.168.0/24 maxlen: 24
202.153.169.0/24 maxlen: 24
202.153.170.0/24 maxlen: 24
202.153.172.0/24 maxlen: 24
202.153.173.0/24 maxlen: 24
202.153.174.0/23 maxlen: 23
202.153.174.0/24 maxlen: 24
202.153.175.0/24 maxlen: 24
202.153.176.0/22 maxlen: 22
202.153.176.0/23 maxlen: 24
202.153.178.0/23 maxlen: 23
202.153.178.0/24 maxlen: 24
202.153.179.0/24 maxlen: 24
202.153.180.0/24 maxlen: 24
202.153.181.0/24 maxlen: 24
202.153.182.0/23 maxlen: 24
202.153.184.0/21 maxlen: 24
202.153.193.0/24 maxlen: 24
202.153.194.0/23 maxlen: 23
202.153.194.0/24 maxlen: 24
202.153.196.0/22 maxlen: 22
202.153.196.0/23 maxlen: 24
202.153.198.0/23 maxlen: 24
202.153.202.0/23 maxlen: 24
202.153.204.0/22 maxlen: 22
202.153.204.0/23 maxlen: 24
202.153.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13006 (0x32ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Sep 22 05:10:32 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=632bee48-23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:39:0f:4b:05:a2:2b:b1:26:4b:4d:26:d0:
5e:27:59:31:c3:f6:0c:0a:e6:05:9d:cd:c2:82:24:
a4:cd:8f:0b:d9:a5:e6:00:85:33:20:36:65:dc:dc:
c3:3c:f4:18:7a:3d:33:e7:37:db:d7:f2:e1:f7:86:
d5:54:71:b3:4d:a7:6d:e3:8d:2e:5d:b2:f2:f7:6a:
30:12:31:a0:37:0f:a1:05:67:9d:4c:30:a6:b8:33:
0b:59:ae:81:71:13:fe:77:20:30:7b:a3:8a:43:90:
dd:1c:77:26:32:b8:b7:65:5c:7b:a3:ed:53:ab:e0:
ca:34:f0:b6:1f:e1:12:0b:51:d1:48:d9:fc:11:df:
b9:e8:3f:74:4a:21:41:31:e7:b7:e5:52:ec:99:cc:
95:38:8d:59:0f:40:cf:fa:88:34:5d:66:ce:c0:4b:
a2:1b:2c:c7:16:c9:d1:53:76:d6:a5:c3:78:7b:a1:
e1:06:1d:1b:57:47:5d:7a:f2:77:6a:42:27:35:b9:
0e:7e:22:06:20:db:ce:59:5a:71:f1:cc:d3:52:37:
4c:8c:36:e0:50:c4:0c:73:08:3c:1e:26:9b:4b:fc:
58:f6:da:88:0d:9a:79:71:b5:29:c0:8e:db:24:1f:
2a:9d:52:f4:58:fc:3c:05:3d:9c:db:40:b2:25:8c:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:94:B9:BE:5E:9E:B2:E7:5C:AC:CA:EE:AB:57:B4:72:3C:23:54
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/E1E13E323A3411EDA5928760C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.3.160.0-202.3.183.255
202.3.186.0-202.3.191.255
202.55.224.0/19
202.153.160.0-202.153.165.255
202.153.167.0-202.153.170.255
202.153.172.0-202.153.191.255
202.153.193.0-202.153.199.255
202.153.202.0-202.153.207.255
Signature Algorithm: sha256WithRSAEncryption
ac:1e:5a:0c:18:19:e1:17:56:88:9e:04:72:1b:65:5a:6d:17:
2e:e3:a8:9e:83:e3:80:57:e2:f9:91:7d:55:ba:01:c3:20:49:
41:01:8d:6c:bf:6d:e3:d1:61:08:52:1b:65:b1:76:a5:09:72:
e6:99:5e:74:95:79:18:56:81:13:3a:3f:94:7b:47:82:93:d2:
1f:1a:8b:68:3e:b8:7e:f3:a5:89:52:ee:d7:1e:b1:77:97:89:
e6:5b:59:7e:37:0b:dc:0f:94:fd:61:4f:eb:78:0c:52:f1:88:
71:52:87:37:32:f7:43:00:c0:45:e9:9d:24:c9:a2:12:44:64:
18:b1:05:0a:76:d3:93:66:25:3c:ef:2d:00:9e:64:c5:f6:f0:
7f:c0:87:b3:42:80:f4:53:b6:06:24:5f:27:54:c9:ed:37:1f:
86:18:5b:19:2c:fc:9c:1c:8d:b0:38:df:22:9f:2a:23:02:e5:
6c:2f:b5:3a:c2:68:08:fb:56:6a:11:ad:3e:25:8e:19:f4:b5:
de:b0:d0:75:2a:ad:02:4c:cc:ed:8c:ea:4a:35:33:98:97:db:
ca:06:e6:7b:98:53:c4:1e:49:8b:9a:bc:a5:06:31:1a:9d:5b:
53:4e:0f:9d:1d:fc:31:8b:1a:ce:07:a9:f0:45:d0:32:61:40:
be:e0:d2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org