Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B384889EE1CB11EC94FA0D4FC4F9AE02.roa
File: B384889EE1CB11EC94FA0D4FC4F9AE02.roa (raw, json)
Hash identifier: xAO77Xg0ENsmMZGMNhVaqLjKnaOvrrcsllERSlcLy4I=
Subject key identifier: 9E:FD:65:67:B6:85:C4:DB:21:6D:2A:F6:02:92:62:0C:97:21:20:5D
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0568
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B384889EE1CB11EC94FA0D4FC4F9AE02.roa
Signing time: Thu 14 Jul 2022 08:51:26 +0000
ROA not before: Thu 14 Jul 2022 08:51:26 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 139341
IP address blocks: 43.132.64.0/23 maxlen: 24
43.132.69.0/24 maxlen: 24
43.132.70.0/23 maxlen: 24
43.132.72.0/23 maxlen: 23
43.132.74.0/24 maxlen: 24
43.132.75.0/24 maxlen: 24
43.132.76.0/22 maxlen: 24
43.132.80.0/23 maxlen: 24
43.132.82.0/24 maxlen: 24
43.132.85.0/24 maxlen: 24
43.132.86.0/24 maxlen: 24
43.132.87.0/24 maxlen: 24
43.132.88.0/24 maxlen: 24
43.132.89.0/24 maxlen: 24
43.132.90.0/23 maxlen: 24
43.132.92.0/24 maxlen: 24
43.132.93.0/24 maxlen: 24
43.152.0.0/24 maxlen: 24
43.152.1.0/24 maxlen: 24
43.152.2.0/24 maxlen: 24
43.152.3.0/24 maxlen: 24
43.152.4.0/24 maxlen: 24
43.152.5.0/24 maxlen: 24
43.152.6.0/24 maxlen: 24
43.152.7.0/24 maxlen: 24
43.152.8.0/24 maxlen: 24
43.152.9.0/24 maxlen: 24
43.152.10.0/24 maxlen: 24
43.152.11.0/24 maxlen: 24
43.152.12.0/24 maxlen: 24
43.152.13.0/24 maxlen: 24
43.152.14.0/23 maxlen: 24
43.152.16.0/23 maxlen: 24
43.152.18.0/24 maxlen: 24
43.152.19.0/24 maxlen: 24
43.152.20.0/24 maxlen: 24
43.152.21.0/24 maxlen: 24
43.152.22.0/24 maxlen: 24
43.152.23.0/24 maxlen: 24
43.152.24.0/23 maxlen: 24
43.152.26.0/23 maxlen: 24
43.152.28.0/23 maxlen: 24
43.152.30.0/23 maxlen: 24
43.152.32.0/22 maxlen: 24
43.152.36.0/23 maxlen: 24
43.152.38.0/23 maxlen: 24
43.152.40.0/24 maxlen: 24
43.152.41.0/24 maxlen: 24
43.152.42.0/23 maxlen: 23
43.152.44.0/23 maxlen: 24
43.152.46.0/24 maxlen: 24
43.152.47.0/24 maxlen: 24
43.152.48.0/24 maxlen: 24
43.152.49.0/24 maxlen: 24
43.152.50.0/24 maxlen: 24
43.152.51.0/24 maxlen: 24
43.152.52.0/24 maxlen: 24
43.152.53.0/24 maxlen: 24
43.152.54.0/24 maxlen: 24
43.152.55.0/24 maxlen: 24
43.152.56.0/24 maxlen: 24
43.152.57.0/24 maxlen: 24
43.152.58.0/23 maxlen: 23
43.152.60.0/24 maxlen: 24
43.152.61.0/24 maxlen: 24
43.152.62.0/24 maxlen: 24
43.152.63.0/24 maxlen: 24
43.152.128.0/18 maxlen: 18
43.152.128.0/23 maxlen: 23
43.152.130.0/23 maxlen: 23
43.152.132.0/23 maxlen: 23
43.152.134.0/23 maxlen: 23
43.152.136.0/23 maxlen: 23
43.152.138.0/24 maxlen: 24
43.152.139.0/24 maxlen: 24
43.152.140.0/23 maxlen: 24
43.152.142.0/23 maxlen: 24
43.152.144.0/24 maxlen: 24
43.152.145.0/24 maxlen: 24
43.152.146.0/24 maxlen: 24
43.152.147.0/24 maxlen: 24
43.152.148.0/24 maxlen: 24
43.152.149.0/24 maxlen: 24
43.152.150.0/23 maxlen: 24
43.152.152.0/23 maxlen: 24
43.152.154.0/23 maxlen: 24
43.152.156.0/22 maxlen: 24
43.152.160.0/21 maxlen: 24
43.152.168.0/23 maxlen: 24
43.152.170.0/23 maxlen: 24
43.152.172.0/23 maxlen: 24
43.152.174.0/24 maxlen: 24
43.152.175.0/24 maxlen: 24
43.152.176.0/23 maxlen: 24
43.152.178.0/23 maxlen: 24
43.152.180.0/22 maxlen: 24
43.152.184.0/23 maxlen: 24
43.152.186.0/23 maxlen: 24
43.152.188.0/23 maxlen: 24
43.152.190.0/23 maxlen: 24
43.159.64.0/24 maxlen: 24
43.159.65.0/24 maxlen: 24
43.159.66.0/23 maxlen: 24
43.159.68.0/23 maxlen: 24
43.159.70.0/23 maxlen: 24
43.159.72.0/23 maxlen: 24
43.159.74.0/24 maxlen: 24
43.159.91.0/24 maxlen: 24
43.159.92.0/24 maxlen: 24
43.159.93.0/24 maxlen: 24
43.159.94.0/24 maxlen: 24
43.159.95.0/24 maxlen: 24
43.159.96.0/20 maxlen: 24
43.159.112.0/21 maxlen: 24
43.159.120.0/24 maxlen: 24
43.159.121.0/24 maxlen: 24
43.159.122.0/24 maxlen: 24
43.159.123.0/24 maxlen: 24
43.159.124.0/24 maxlen: 24
43.159.125.0/24 maxlen: 24
43.159.126.0/24 maxlen: 24
43.159.127.0/24 maxlen: 24
43.163.0.0/16 maxlen: 16
101.33.6.0/23 maxlen: 24
240d:c010:18::/48 maxlen: 48
240d:c010:19::/48 maxlen: 48
240d:c010:1a::/48 maxlen: 48
240d:c010:1c::/48 maxlen: 48
240d:c010:41::/48 maxlen: 48
240d:c010:42::/48 maxlen: 48
240d:c010:54::/47 maxlen: 48
240d:c010:56::/48 maxlen: 48
240d:c010:5a::/48 maxlen: 48
240d:c010:61::/48 maxlen: 48
240d:c010:62::/47 maxlen: 48
240d:c010:64::/47 maxlen: 48
240d:c010:69::/48 maxlen: 48
240d:c010:6b::/48 maxlen: 48
240d:c010:6f::/48 maxlen: 48
240d:c010:70::/44 maxlen: 48
240d:c010:80::/44 maxlen: 48
240d:c010:ab::/48 maxlen: 48
240d:c010:b2::/48 maxlen: 48
240d:c010:bf::/48 maxlen: 48
240d:c010:cf::/48 maxlen: 48
240d:c010:fb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 14 08:51:26 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62cfd90d-6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:b1:13:a2:25:bc:e4:6b:eb:32:72:b9:89:
66:26:10:e3:8f:3c:7c:f2:2a:c6:9c:cb:d0:4d:3b:
ec:b5:7c:0e:c6:ec:ef:d8:ce:78:59:5e:82:fa:1d:
98:3d:65:82:6b:52:22:1a:df:aa:03:5f:8e:1d:71:
be:4e:a8:c6:56:e9:ad:82:2a:72:5e:6a:6f:c4:93:
73:46:19:08:c3:8a:10:46:5f:45:6c:7d:0a:3a:3d:
55:d9:33:60:28:9e:f7:c5:b2:fe:39:cc:9b:9f:1d:
e9:e4:d4:53:3c:d3:1a:3e:88:da:92:39:b9:fd:de:
1c:0c:c0:d4:e6:b7:27:a0:c4:98:64:db:52:6b:65:
4e:89:82:7d:df:77:57:71:8e:2a:3f:ce:6f:c3:1c:
b4:81:10:ab:b2:38:a8:d7:90:0c:0c:36:77:b7:da:
96:45:47:92:d5:54:ec:f9:67:67:da:f6:28:61:79:
0b:0e:26:d9:36:3c:82:c3:f5:57:5c:8b:34:a1:3f:
42:c1:63:b8:8c:f2:9b:43:05:37:35:f3:e8:08:83:
75:26:db:1d:dc:90:fb:33:dd:d7:f7:a1:94:da:a9:
ed:42:a7:5a:19:0c:84:f2:9a:46:a4:a3:ab:08:ae:
52:77:2f:dc:5b:f0:48:f2:b2:91:60:a5:e7:dd:85:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:65:67:B6:85:C4:DB:21:6D:2A:F6:02:92:62:0C:97:21:20:5D
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B384889EE1CB11EC94FA0D4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.132.64.0/23
43.132.69.0-43.132.82.255
43.132.85.0-43.132.93.255
43.152.0.0/18
43.152.128.0/18
43.159.64.0-43.159.74.255
43.159.91.0-43.159.127.255
43.163.0.0/16
101.33.6.0/23
IPv6:
240d:c010:18::-240d:c010:1a:ffff:ffff:ffff:ffff:ffff
240d:c010:1c::/48
240d:c010:41::-240d:c010:42:ffff:ffff:ffff:ffff:ffff
240d:c010:54::-240d:c010:56:ffff:ffff:ffff:ffff:ffff
240d:c010:5a::/48
240d:c010:61::-240d:c010:65:ffff:ffff:ffff:ffff:ffff
240d:c010:69::/48
240d:c010:6b::/48
240d:c010:6f::-240d:c010:8f:ffff:ffff:ffff:ffff:ffff
240d:c010:ab::/48
240d:c010:b2::/48
240d:c010:bf::/48
240d:c010:cf::/48
240d:c010:fb::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d2:86:2d:7b:34:db:fc:e8:7c:e5:98:07:b1:21:f0:20:41:
63:40:97:f7:8f:27:1c:57:af:84:57:ed:cd:8e:43:c9:50:64:
07:46:c7:6d:04:51:58:23:2c:31:53:86:ba:0a:4b:fe:b9:4a:
a5:a5:d5:36:55:73:e8:91:d4:76:c9:5c:8b:ef:3d:87:69:1e:
3b:b8:27:57:a1:ae:c0:93:eb:97:3f:57:92:22:59:db:d6:a4:
7f:b3:b0:d4:e1:b4:4d:89:84:c7:3f:51:e4:75:da:49:78:9a:
bf:a3:5d:90:6d:e2:10:21:58:85:5b:fe:97:3a:a0:7b:1c:8e:
6f:20:d4:42:ad:40:58:e3:99:2f:6e:18:66:60:ab:2b:e3:99:
d0:24:23:ff:ed:0d:da:8c:00:c5:3a:05:b1:42:2f:42:f1:8a:
e4:d3:d2:eb:0b:0d:c9:28:f1:16:2c:00:72:91:86:a9:09:36:
8e:25:1b:c4:6e:17:ff:9c:dc:47:9c:65:bb:42:00:1c:ee:15:
f7:cd:5a:e1:d4:37:e2:8b:36:a5:f4:78:63:70:44:4f:3f:a0:
17:68:83:80:68:81:4e:dc:fc:ba:d0:13:87:38:ef:19:05:ac:
49:d5:41:5a:24:f2:cd:a4:22:23:b7:25:8f:a9:c7:72:94:64:
fd:81:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org