Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/14702758FD3811EC96CAFC84C4F9AE02.roa
File: 14702758FD3811EC96CAFC84C4F9AE02.roa (raw, json)
Hash identifier: PQxxWnpt0Ek4AF7SZ2jL68lPBfXO4PryPocIyAat2s4=
Subject key identifier: F6:FF:55:26:C4:90:B2:D0:01:FA:1F:D1:2C:4F:3B:32:69:6F:2E:AA
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 055E
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/14702758FD3811EC96CAFC84C4F9AE02.roa
Signing time: Mon 11 Jul 2022 11:49:32 +0000
ROA not before: Mon 11 Jul 2022 11:49:32 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.63.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
43.174.0.0/16 maxlen: 24
43.175.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:13::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:15::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:1d::/48 maxlen: 48
240d:c010:1f::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/48 maxlen: 48
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:31::/48 maxlen: 48
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5b::/48 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6a::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1374 (0x55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 11 11:49:32 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62cc0e4c-46ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:68:70:6c:f0:04:5a:a4:e7:6c:7e:96:45:
f8:85:98:8e:e2:ed:8d:03:dc:05:38:27:8f:9c:d9:
72:e7:26:ef:c7:bf:68:e5:d8:d5:df:84:e3:8c:16:
8b:80:bd:2e:bf:da:fa:c6:28:75:1b:4b:2a:69:c9:
3c:e9:c4:9d:61:a1:82:51:13:65:e6:30:57:ec:8a:
7e:c7:26:2a:b3:c4:f7:7c:25:dc:2c:b5:10:1b:2d:
9b:54:79:6e:08:a5:04:71:2d:c1:e0:81:ec:0a:80:
c7:95:a8:e6:30:7f:91:2b:1a:19:0b:d8:3a:1d:a3:
ed:12:12:6d:79:71:05:06:a9:d6:8d:f1:ac:76:56:
fd:ba:fd:b8:45:81:74:ba:4e:6e:8b:e9:e9:ff:22:
0e:e1:d3:52:85:73:ef:bb:d8:5a:1e:eb:78:8c:3c:
51:cf:bc:ff:c6:b7:ff:a1:57:70:7d:2c:b3:70:19:
0c:72:7d:07:a7:9e:92:a7:fe:0d:c2:d0:f7:22:ae:
3f:28:7d:b4:99:09:89:81:65:f5:bd:4d:dc:44:55:
b2:4f:58:0b:b4:1b:3f:0c:5a:b3:39:7d:40:a1:f5:
c6:43:0c:54:da:54:3e:1a:df:d8:4f:47:1f:7e:9e:
f7:1f:67:b4:bf:13:ed:c9:75:31:ac:ae:1f:72:91:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:55:26:C4:90:B2:D0:01:FA:1F:D1:2C:4F:3B:32:69:6F:2E:AA
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/14702758FD3811EC96CAFC84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.63.0/24
43.135.58.0/24
43.152.96.0/19
43.152.192.0-43.175.255.255
101.32.140.0/24
101.33.114.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
6b:fe:87:03:a7:22:85:8c:36:62:44:92:e4:89:08:5a:49:90:
31:03:71:a2:23:43:db:c6:62:d6:dc:b0:c7:c8:bb:82:ee:01:
9e:32:02:17:d3:f2:05:f6:72:f1:6a:81:b3:e4:15:53:c1:81:
f3:01:30:0d:03:e5:93:c8:44:90:e5:eb:5d:07:67:9f:c1:58:
85:ba:a6:de:d5:0d:76:cf:a2:9a:55:82:ac:9d:08:45:c8:e8:
5c:b7:7f:62:ad:06:a1:73:56:34:76:6f:02:bf:dc:07:f8:bd:
ff:2a:4f:64:57:01:3b:1b:69:29:ac:44:b9:e6:8c:4b:ed:ad:
aa:5a:6e:e3:dd:a9:88:ab:d5:71:ea:70:84:f3:01:03:7c:90:
6a:64:2e:08:8e:60:52:e0:64:e7:f9:c0:a8:53:ca:67:63:79:
62:07:f5:4d:e5:74:b3:d4:c4:8c:be:69:7f:2b:0c:6e:55:e0:
fb:af:52:2a:fa:6d:d5:10:e8:bb:f3:b2:3c:67:f2:6d:91:d4:
60:20:a0:f5:3e:19:d4:73:62:00:02:7e:0e:e9:ba:80:6c:1d:
e7:ce:d6:d2:25:53:66:f6:03:8d:9b:56:ac:8b:d0:36:4d:b6:
b9:e9:f1:14:9e:b0:46:8d:3f:1b:60:15:0a:5a:9e:6b:9c:70:
de:15:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org