Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/53951C720BDE11ED83851625C4F9AE02.roa
File: 53951C720BDE11ED83851625C4F9AE02.roa (raw, json)
Hash identifier: RslCTzBL5agu4CcEA2ZVxGwi6kKACbx8gXbRCwh7Xms=
Subject key identifier: 57:AD:82:F3:0D:6D:B6:58:ED:AE:FE:6B:20:00:7C:16:04:D9:05:29
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0E
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/53951C720BDE11ED83851625C4F9AE02.roa
Signing time: Mon 25 Jul 2022 06:15:04 +0000
ROA not before: Mon 25 Jul 2022 06:15:04 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 138341
IP address blocks: 143.92.64.0/19 maxlen: 19
143.92.64.0/24 maxlen: 24
143.92.65.0/24 maxlen: 24
143.92.66.0/24 maxlen: 24
143.92.67.0/24 maxlen: 24
143.92.68.0/24 maxlen: 24
143.92.69.0/24 maxlen: 24
143.92.70.0/24 maxlen: 24
143.92.72.0/24 maxlen: 24
143.92.73.0/24 maxlen: 24
143.92.74.0/24 maxlen: 24
143.92.75.0/24 maxlen: 24
143.92.76.0/24 maxlen: 24
143.92.77.0/24 maxlen: 24
143.92.78.0/24 maxlen: 24
143.92.79.0/24 maxlen: 24
143.92.80.0/24 maxlen: 24
143.92.81.0/24 maxlen: 24
143.92.82.0/23 maxlen: 23
143.92.82.0/24 maxlen: 24
143.92.83.0/24 maxlen: 24
143.92.84.0/24 maxlen: 24
143.92.85.0/24 maxlen: 24
143.92.86.0/24 maxlen: 24
143.92.87.0/24 maxlen: 24
143.92.88.0/24 maxlen: 24
143.92.89.0/24 maxlen: 24
143.92.90.0/24 maxlen: 24
143.92.91.0/24 maxlen: 24
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.94.0/23 maxlen: 23
143.92.94.0/24 maxlen: 24
143.92.95.0/24 maxlen: 24
143.92.96.0/22 maxlen: 22
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.99.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.100.0/24 maxlen: 24
143.92.101.0/24 maxlen: 24
143.92.108.0/23 maxlen: 23
143.92.109.0/24 maxlen: 24
147.136.128.0/22 maxlen: 22
147.136.128.0/23 maxlen: 23
147.136.128.0/24 maxlen: 24
147.136.129.0/24 maxlen: 24
147.136.130.0/23 maxlen: 23
147.136.130.0/24 maxlen: 24
147.136.131.0/24 maxlen: 24
147.136.132.0/22 maxlen: 22
147.136.132.0/23 maxlen: 23
147.136.132.0/24 maxlen: 24
147.136.133.0/24 maxlen: 24
147.136.134.0/23 maxlen: 23
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.136.0/22 maxlen: 22
147.136.136.0/23 maxlen: 23
147.136.136.0/24 maxlen: 24
147.136.137.0/24 maxlen: 24
147.136.138.0/23 maxlen: 23
147.136.138.0/24 maxlen: 24
147.136.139.0/24 maxlen: 24
147.136.140.0/22 maxlen: 22
147.136.140.0/23 maxlen: 23
147.136.140.0/24 maxlen: 24
147.136.141.0/24 maxlen: 24
147.136.142.0/23 maxlen: 23
147.136.142.0/24 maxlen: 24
147.136.143.0/24 maxlen: 24
147.136.144.0/22 maxlen: 22
147.136.144.0/23 maxlen: 23
147.136.144.0/24 maxlen: 24
147.136.145.0/24 maxlen: 24
147.136.146.0/23 maxlen: 23
147.136.146.0/24 maxlen: 24
147.136.147.0/24 maxlen: 24
147.136.148.0/22 maxlen: 22
147.136.148.0/23 maxlen: 23
147.136.148.0/24 maxlen: 24
147.136.149.0/24 maxlen: 24
147.136.150.0/23 maxlen: 23
147.136.150.0/24 maxlen: 24
147.136.151.0/24 maxlen: 24
147.136.152.0/22 maxlen: 22
147.136.152.0/23 maxlen: 23
147.136.152.0/24 maxlen: 24
147.136.153.0/24 maxlen: 24
147.136.154.0/23 maxlen: 23
147.136.154.0/24 maxlen: 24
147.136.155.0/24 maxlen: 24
147.136.156.0/22 maxlen: 22
147.136.156.0/23 maxlen: 23
147.136.156.0/24 maxlen: 24
147.136.157.0/24 maxlen: 24
147.136.158.0/23 maxlen: 23
147.136.158.0/24 maxlen: 24
147.136.159.0/24 maxlen: 24
147.136.160.0/22 maxlen: 22
147.136.160.0/23 maxlen: 23
147.136.160.0/24 maxlen: 24
147.136.161.0/24 maxlen: 24
147.136.162.0/23 maxlen: 23
147.136.162.0/24 maxlen: 24
147.136.163.0/24 maxlen: 24
147.136.164.0/22 maxlen: 22
147.136.164.0/23 maxlen: 23
147.136.164.0/24 maxlen: 24
147.136.165.0/24 maxlen: 24
147.136.166.0/23 maxlen: 23
147.136.166.0/24 maxlen: 24
147.136.167.0/24 maxlen: 24
147.136.168.0/22 maxlen: 22
147.136.168.0/23 maxlen: 23
147.136.168.0/24 maxlen: 24
147.136.169.0/24 maxlen: 24
147.136.170.0/23 maxlen: 23
147.136.170.0/24 maxlen: 24
147.136.171.0/24 maxlen: 24
147.136.172.0/22 maxlen: 22
147.136.172.0/23 maxlen: 23
147.136.172.0/24 maxlen: 24
147.136.173.0/24 maxlen: 24
147.136.174.0/23 maxlen: 23
147.136.174.0/24 maxlen: 24
147.136.175.0/24 maxlen: 24
147.136.176.0/22 maxlen: 22
147.136.176.0/23 maxlen: 23
147.136.176.0/24 maxlen: 24
147.136.177.0/24 maxlen: 24
147.136.178.0/23 maxlen: 23
147.136.178.0/24 maxlen: 24
147.136.179.0/24 maxlen: 24
147.136.180.0/22 maxlen: 22
147.136.180.0/23 maxlen: 23
147.136.180.0/24 maxlen: 24
147.136.181.0/24 maxlen: 24
147.136.182.0/23 maxlen: 23
147.136.182.0/24 maxlen: 24
147.136.183.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/23 maxlen: 23
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/23 maxlen: 23
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
147.136.188.0/22 maxlen: 22
147.136.188.0/23 maxlen: 23
147.136.188.0/24 maxlen: 24
147.136.189.0/24 maxlen: 24
147.136.190.0/23 maxlen: 23
147.136.190.0/24 maxlen: 24
147.136.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Jul 25 06:15:04 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62de34e8-19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:24:a4:a9:43:fa:c3:f6:bb:b8:69:b8:50:
57:55:d3:db:e5:c7:7d:1a:01:f5:d0:47:19:40:97:
71:ed:ed:c6:b1:94:56:96:1b:7d:f4:0b:5c:98:17:
9c:f6:cd:05:8c:23:52:c4:4e:d3:97:38:08:29:29:
5a:60:b1:28:35:28:2e:1f:aa:11:f7:35:cc:ce:84:
5f:72:e5:9c:ff:86:52:9b:5e:5e:b5:03:d2:bb:79:
a7:bb:4c:f9:59:00:29:76:e8:1c:93:64:a0:cd:66:
ac:71:a3:eb:c5:ec:78:a9:4b:55:64:b7:ac:8d:cc:
a9:1d:74:74:37:3d:2d:53:91:58:63:92:e0:42:ee:
1e:17:f3:3e:5b:31:f9:1a:9a:22:55:3e:a0:fc:ca:
93:99:13:90:5d:54:67:1c:de:0e:3d:5c:c9:4b:e0:
92:af:8e:5c:8d:ee:0e:4a:21:9d:52:ca:96:dc:12:
69:52:32:dd:17:15:39:30:90:1b:81:0c:eb:ee:58:
7d:ac:93:ba:0e:ee:b6:c1:1f:e2:d4:ca:a5:a8:93:
0f:3a:e3:f4:cf:14:13:78:04:da:f8:e6:26:78:95:
41:c6:c1:1f:34:25:23:ba:69:db:2d:6d:a3:30:b1:
54:c1:42:21:a2:08:da:aa:a4:97:15:2d:bd:37:78:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:82:F3:0D:6D:B6:58:ED:AE:FE:6B:20:00:7C:16:04:D9:05:29
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/53951C720BDE11ED83851625C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.64.0-143.92.101.255
143.92.108.0/23
147.136.128.0/18
Signature Algorithm: sha256WithRSAEncryption
91:7d:f4:9f:96:fb:50:f2:99:3f:39:21:92:1c:be:fa:68:02:
80:33:fe:fc:65:6b:b5:d0:f9:d5:ac:00:32:c0:1e:12:bf:86:
48:c1:c6:f7:18:2b:8f:a9:bc:e0:fc:87:3e:35:27:94:ad:1a:
ec:e4:7a:6f:33:80:69:ff:a4:ba:9f:2b:3c:a5:a4:a9:46:42:
7e:a9:b9:1b:b8:29:cb:a0:c4:47:74:51:72:54:45:4b:02:fc:
19:39:b2:a3:2d:06:80:2a:d3:af:9d:19:ef:35:cb:42:c4:69:
dc:0a:d0:a3:16:8d:d4:90:31:a1:bd:d9:a0:0c:f4:c8:58:c5:
17:61:21:b4:d3:13:38:37:ff:a2:3b:a3:50:93:b3:29:67:80:
80:b0:26:8c:9b:74:e5:73:b7:2b:0b:cc:0a:f8:b2:69:62:3c:
21:b6:6d:52:ab:50:66:32:f6:50:23:b6:41:e0:ae:02:f9:95:
6b:c4:fc:9b:22:00:10:1f:f8:64:73:46:46:10:c3:86:d8:58:
e3:32:34:e1:ef:60:f8:eb:6a:7a:93:c9:86:84:2b:d6:e2:04:
47:f2:97:89:86:e4:2a:a9:6c:38:0a:88:46:49:9d:28:b6:e2:
d3:0e:71:95:90:b1:6a:00:a0:ef:92:03:91:30:26:1e:55:4e:
c6:c6:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org