Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/3C912472801D11ED8289C868C4F9AE02.roa
File: 3C912472801D11ED8289C868C4F9AE02.roa (raw, json)
Hash identifier: imvd7cbuLUUMYNgI2hs17GPC4jRa1VpmvnNj4DF33UE=
Subject key identifier: 9C:A9:00:F8:8E:EB:52:6C:A3:A6:2E:6F:63:FC:15:D3:3A:CD:FF:F4
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0948
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/3C912472801D11ED8289C868C4F9AE02.roa
Signing time: Tue 20 Dec 2022 04:17:38 +0000
ROA not before: Tue 20 Dec 2022 04:17:38 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 17819
IP address blocks: 27.111.128.0/24 maxlen: 24
36.255.39.0/24 maxlen: 24
119.27.0.0/19 maxlen: 19
119.27.0.0/24 maxlen: 24
119.27.1.0/24 maxlen: 24
119.27.32.0/20 maxlen: 20
119.27.50.0/23 maxlen: 23
119.27.52.0/22 maxlen: 22
119.27.56.0/22 maxlen: 22
119.27.60.0/23 maxlen: 23
122.50.64.0/19 maxlen: 19
122.50.104.0/21 maxlen: 21
122.50.112.0/24 maxlen: 24
122.50.113.0/24 maxlen: 24
122.50.114.0/24 maxlen: 24
122.50.115.0/24 maxlen: 24
122.50.120.0/22 maxlen: 22
122.50.124.0/22 maxlen: 22
122.50.124.0/23 maxlen: 23
122.50.126.0/24 maxlen: 24
180.189.0.0/21 maxlen: 21
180.189.8.0/21 maxlen: 21
180.189.32.0/21 maxlen: 21
180.189.40.0/21 maxlen: 21
180.189.48.0/22 maxlen: 22
180.189.56.0/21 maxlen: 21
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.226.0/24 maxlen: 24
202.167.227.0/24 maxlen: 24
202.167.230.0/23 maxlen: 23
202.167.232.0/24 maxlen: 24
202.167.234.0/23 maxlen: 23
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.243.0/24 maxlen: 24
202.167.244.0/22 maxlen: 22
202.167.248.0/23 maxlen: 23
202.167.252.0/23 maxlen: 23
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.192.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.196.0/23 maxlen: 23
202.177.198.0/24 maxlen: 24
202.177.199.0/24 maxlen: 24
202.177.200.0/23 maxlen: 23
202.177.201.0/24 maxlen: 24
202.177.202.0/23 maxlen: 23
202.177.204.0/23 maxlen: 23
202.177.207.0/24 maxlen: 24
203.190.224.0/23 maxlen: 23
203.190.224.0/24 maxlen: 24
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.232.0/22 maxlen: 22
203.190.232.0/24 maxlen: 24
203.190.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Dec 20 04:17:38 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63a13762-a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:77:c5:a1:03:53:22:d4:5d:24:9a:27:e3:
62:33:18:4c:22:71:92:ed:5d:0e:4b:0c:01:12:7d:
e9:81:70:c8:46:fd:b5:04:79:56:32:5d:00:bb:a1:
df:68:eb:45:1c:b3:45:09:76:50:39:ca:c4:59:42:
ec:b8:b7:ca:6c:c5:91:ab:bd:e5:4e:88:f0:65:aa:
2c:b7:1b:dd:66:32:d5:5f:43:97:b4:44:33:b3:03:
0b:c9:56:23:5f:b4:ef:5d:e5:3c:c4:ee:62:ee:17:
19:9e:63:17:19:82:4d:f2:6a:d6:1c:d6:b4:b5:d8:
d5:7d:3a:2e:2c:1c:fc:30:25:ab:02:d7:5f:be:ca:
6e:65:c9:f5:7a:ad:74:49:38:09:77:fc:c5:c9:f2:
58:69:3e:92:0d:24:cb:b0:16:63:0d:f0:8e:2a:1e:
3b:65:c8:c1:18:ff:86:66:2a:77:3a:78:d9:f0:8b:
9f:50:e9:3f:ac:ca:33:1a:69:2b:d8:84:5c:38:cb:
d9:3e:ab:ae:71:87:af:70:75:3c:09:12:53:55:15:
8e:c9:73:45:ab:34:a4:a8:80:31:5d:cf:1c:b3:19:
12:7d:aa:1b:19:6b:7c:d6:37:c3:db:32:68:8f:2b:
92:ff:3a:9f:5a:63:7a:59:74:39:49:17:af:01:56:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:00:F8:8E:EB:52:6C:A3:A6:2E:6F:63:FC:15:D3:3A:CD:FF:F4
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/3C912472801D11ED8289C868C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.128.0/24
36.255.39.0/24
119.27.0.0-119.27.47.255
119.27.50.0-119.27.61.255
122.50.64.0/19
122.50.104.0-122.50.115.255
122.50.120.0/21
180.189.0.0/20
180.189.32.0-180.189.51.255
180.189.56.0/21
183.177.0.0-183.177.47.255
202.167.224.0/22
202.167.230.0-202.167.232.255
202.167.234.0-202.167.249.255
202.167.252.0/22
202.177.192.0/23
202.177.195.0-202.177.205.255
202.177.207.0/24
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:82:2d:6b:f2:9b:07:21:1e:6e:cb:b2:d0:14:93:60:52:4f:
96:d4:ca:cc:1e:8c:8c:6a:68:b0:4b:31:9f:11:2e:ec:88:5f:
6e:09:37:74:17:57:f5:77:24:b9:98:8b:fb:8f:9c:c4:d0:64:
07:0a:42:cc:16:c3:79:ec:9b:4b:68:42:35:75:b2:0b:d6:cc:
f4:6b:28:f8:4a:0d:e0:4b:9c:03:42:28:30:1e:5a:cc:19:0e:
e1:bf:4a:42:a8:47:96:dc:64:66:82:86:24:a2:b8:8e:b4:a6:
08:0d:15:3d:41:5a:ce:da:60:a2:8a:38:f3:ac:1b:bc:37:ba:
3e:03:36:14:d1:ff:3f:18:e4:b7:08:09:3a:3e:5f:dd:03:c0:
1e:40:1e:45:03:dd:c5:04:ea:cc:07:9f:03:9b:b0:44:74:f1:
bd:ff:5b:c7:a2:f4:76:2b:9b:1b:9d:eb:27:86:93:09:5a:15:
d6:cb:43:9e:b5:b9:cb:43:fb:78:30:1d:e7:88:12:1b:4d:24:
d2:27:ff:8e:db:63:21:b7:89:b1:df:33:37:3d:e7:da:4e:b8:
ae:6d:64:aa:b9:1a:ad:21:6e:57:c9:ca:22:6e:ed:67:b4:df:
fc:d1:d4:bb:b8:78:cd:98:88:0f:9b:88:36:a6:c9:a6:5f:66:
b6:ec:6c:78
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4
ODFBRTQ5MTgwHhcNMjIxMjIwMDQxNzM4WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2ExMzc2Mi1hNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wx3xaEDUyLUXSSaJ+NiMxhMInGS7V0OSwwBEn3pgXDIRv21BHlWMl0Au6Hf
aOtFHLNFCXZQOcrEWULsuLfKbMWRq73lTojwZaostxvdZjLVX0OXtEQzswMLyVYj
X7TvXeU8xO5i7hcZnmMXGYJN8mrWHNa0tdjVfTouLBz8MCWrAtdfvspuZcn1eq10
STgJd/zFyfJYaT6SDSTLsBZjDfCOKh47ZcjBGP+GZip3OnjZ8IufUOk/rMozGmkr
2IRcOMvZPquucYevcHU8CRJTVRWOyXNFqzSkqIAxXc8csxkSfaobGWt81jfD2zJo
jyuS/zqfWmN6WXQ5SRevAVZ63QIDAQABo4IDWDCCA1QwHQYDVR0OBBYEFJypAPiO
61Jso6Yub2P8FdM6zf/0MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0
NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvM0M5MTI0NzI4
MDFEMTFFRDgyODlDODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgeEGCCsGAQUFBwEHAQH/
BIHRMIHOMIHLBAIAATCBxAMEABtvgAMEACT/JzALAwMAdxsDBAR3GyAwDAMEAXcb
MgMEAXcbPAMEBXoyQDAMAwQDejJoAwQCejJwAwQDejJ4AwQEtL0AMAwDBAW0vSAD
BAK0vTADBAO0vTgwCwMDALexAwQEt7EgAwQCyqfgMAwDBAHKp+YDBADKp+gwDAME
Acqn6gMEAcqn+AMEAsqn/AMEAcqxwDAMAwQAyrHDAwQByrHMAwQAyrHPMAwDBAXL
vuADBADLvuIDBAHLvuQDBAPLvugwDQYJKoZIhvcNAQELBQADggEBAJuCLWvymwch
Hm7LstAUk2BST5bUyswejIxqaLBLMZ8RLuyIX24JN3QXV/V3JLmYi/uPnMTQZAcK
QswWw3nsm0toQjV1sgvWzPRrKPhKDeBLnANCKDAeWswZDuG/SkKoR5bcZGaChiSi
uI60pggNFT1BWs7aYKKKOPOsG7w3uj4DNhTR/z8Y5LcICTo+X90DwB5AHkUD3cUE
6swHnwObsER08b3/W8ei9HYrmxud6yeGkwlaFdbLQ561uctD+3gwHeeIEhtNJNIn
/47bYyG3ibHfMzc959pOuK5tZKq5Gq0hblfJyiJu7We03/zR1Lu4eM2YiA+biDam
yaZfZrbsbHg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org