Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
File: F773727CC4B311EAA0E09D26C4F9AE02.roa (raw, json)
Hash identifier: c87IiKGQjQurweRggM9732quOjgIEegnDL9lLp/hsOU=
Subject key identifier: F6:2F:EF:0E:34:6B:DA:71:EB:9E:07:6A:05:AF:A5:1C:7A:E8:74:80
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 107A
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
Signing time: Wed 27 Jul 2022 06:24:38 +0000
ROA not before: Wed 27 Jul 2022 06:24:38 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 1221
IP address blocks: 1.120.0.0/13 maxlen: 13
1.128.0.0/11 maxlen: 11
1.143.62.0/24 maxlen: 24
58.160.0.0/12 maxlen: 12
60.224.0.0/13 maxlen: 13
61.8.0.0/19 maxlen: 19
61.9.128.0/17 maxlen: 17
101.103.0.0/16 maxlen: 16
101.160.0.0/11 maxlen: 11
110.140.0.0/15 maxlen: 15
110.142.0.0/16 maxlen: 16
110.143.0.0/16 maxlen: 16
110.144.0.0/13 maxlen: 13
120.144.0.0/13 maxlen: 13
120.152.0.0/14 maxlen: 14
120.156.0.0/15 maxlen: 15
120.158.0.0/16 maxlen: 16
121.208.0.0/12 maxlen: 12
123.209.0.0/16 maxlen: 16
123.210.0.0/15 maxlen: 15
124.176.0.0/12 maxlen: 12
125.255.0.0/16 maxlen: 16
202.7.64.0/19 maxlen: 19
202.12.128.0/18 maxlen: 18
202.12.192.0/19 maxlen: 19
202.12.224.0/20 maxlen: 20
202.12.240.0/23 maxlen: 23
202.12.242.0/24 maxlen: 24
203.2.228.0/24 maxlen: 24
203.9.190.0/23 maxlen: 23
203.12.42.0/24 maxlen: 24
203.12.97.0/24 maxlen: 24
203.12.144.0/21 maxlen: 21
203.13.21.0/24 maxlen: 24
203.14.0.0/20 maxlen: 20
203.15.68.0/24 maxlen: 24
203.16.180.0/22 maxlen: 22
203.17.40.0/21 maxlen: 21
203.17.162.0/24 maxlen: 24
203.18.76.0/23 maxlen: 23
203.18.112.0/20 maxlen: 20
203.22.129.0/24 maxlen: 24
203.24.134.0/23 maxlen: 23
203.24.170.0/24 maxlen: 24
203.26.8.0/22 maxlen: 22
203.26.175.0/24 maxlen: 24
203.27.69.0/24 maxlen: 24
203.27.128.0/18 maxlen: 18
203.27.237.0/24 maxlen: 24
203.29.160.0/20 maxlen: 20
203.34.33.0/24 maxlen: 24
203.34.68.0/24 maxlen: 24
203.35.0.0/16 maxlen: 16
203.36.0.0/14 maxlen: 14
203.40.0.0/13 maxlen: 13
203.48.0.0/14 maxlen: 14
203.52.0.0/15 maxlen: 15
203.54.0.0/16 maxlen: 16
203.58.32.0/19 maxlen: 19
203.58.64.0/18 maxlen: 18
203.58.128.0/17 maxlen: 17
203.62.148.0/22 maxlen: 22
203.62.248.0/21 maxlen: 21
203.92.224.0/19 maxlen: 24
203.100.224.0/19 maxlen: 19
203.143.192.0/18 maxlen: 18
203.143.192.0/19 maxlen: 19
203.143.224.0/19 maxlen: 19
210.23.128.0/19 maxlen: 19
2001:8000::/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Jul 27 06:24:38 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e0da26-fe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:73:d3:6e:c9:2e:77:a8:23:c7:80:25:84:
df:dd:08:e7:8e:48:d7:f5:01:64:fd:b8:ea:02:0d:
c3:10:7f:b5:22:a2:5a:03:06:5f:00:71:7e:bb:98:
a1:2b:f7:18:87:0e:83:79:3f:2c:3b:17:f3:3d:6a:
33:56:f0:23:d4:33:62:7e:47:47:8c:4c:32:8e:93:
3f:ed:62:dc:67:86:eb:58:0b:81:7e:25:49:84:89:
63:97:af:cf:d5:d8:8a:c6:cc:30:48:36:87:32:01:
85:59:aa:02:e2:d4:93:95:b6:ea:22:eb:b8:8f:cc:
a9:90:6b:88:05:a8:bb:ee:84:78:2e:ef:01:b7:83:
28:3f:23:7b:96:33:c5:63:fd:ed:76:ae:19:8b:de:
e9:3c:59:d7:12:e6:7d:24:84:0d:04:df:40:c0:47:
6f:c1:a7:1d:46:94:ff:06:79:56:62:da:82:2b:ba:
e2:c9:64:9a:72:67:18:e3:69:cb:91:f6:60:ea:4a:
ea:c2:03:fd:02:1b:b7:a2:d0:d9:7e:35:39:58:da:
7c:85:e8:23:3e:50:03:76:c8:ad:b3:94:7f:d0:39:
5f:c6:24:e7:0c:4b:58:de:e1:2c:be:b1:2f:c1:0e:
e5:56:99:86:33:ad:3a:05:56:eb:e1:bd:34:ea:20:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:EF:0E:34:6B:DA:71:EB:9E:07:6A:05:AF:A5:1C:7A:E8:74:80
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.120.0.0-1.159.255.255
58.160.0.0/12
60.224.0.0/13
61.8.0.0/19
61.9.128.0/17
101.103.0.0/16
101.160.0.0/11
110.140.0.0-110.151.255.255
120.144.0.0-120.158.255.255
121.208.0.0/12
123.209.0.0-123.211.255.255
124.176.0.0/12
125.255.0.0/16
202.7.64.0/19
202.12.128.0-202.12.242.255
203.2.228.0/24
203.9.190.0/23
203.12.42.0/24
203.12.97.0/24
203.12.144.0/21
203.13.21.0/24
203.14.0.0/20
203.15.68.0/24
203.16.180.0/22
203.17.40.0/21
203.17.162.0/24
203.18.76.0/23
203.18.112.0/20
203.22.129.0/24
203.24.134.0/23
203.24.170.0/24
203.26.8.0/22
203.26.175.0/24
203.27.69.0/24
203.27.128.0/18
203.27.237.0/24
203.29.160.0/20
203.34.33.0/24
203.34.68.0/24
203.35.0.0-203.54.255.255
203.58.32.0-203.58.255.255
203.62.148.0/22
203.62.248.0/21
203.92.224.0/19
203.100.224.0/19
203.143.192.0/18
210.23.128.0/19
IPv6:
2001:8000::/20
Signature Algorithm: sha256WithRSAEncryption
0d:7b:cd:9d:af:27:a9:16:f5:4b:83:65:18:20:f8:a0:a2:86:
98:49:29:21:fd:ab:94:de:59:90:82:42:2f:74:35:b2:99:52:
82:f5:49:57:9e:4c:4c:47:e1:2f:56:ae:45:50:11:d9:f9:b2:
9e:7b:87:64:68:0f:df:9b:44:d8:0b:3d:a3:ef:37:80:a0:eb:
66:7f:a7:fa:0a:ba:43:26:ba:e1:0e:fe:c1:20:46:20:24:96:
a3:87:a8:99:9a:cf:3f:93:c6:69:98:11:3e:9d:11:83:69:22:
90:5d:f7:54:2b:aa:37:7e:3a:a7:90:86:79:98:e5:34:2c:c4:
44:25:e3:2c:b3:66:53:30:16:bc:be:a2:d5:1e:80:bf:72:65:
b0:22:cd:18:a7:bf:da:d6:7b:1f:a1:ca:20:ae:cb:01:c7:67:
fc:e7:82:2f:65:a4:77:de:0b:91:40:76:78:f6:be:12:33:1e:
06:8e:ca:4d:fd:9a:4d:a4:ba:58:17:d5:19:07:b4:fb:58:9d:
7a:70:4d:6c:65:4a:eb:32:85:53:54:57:43:4a:e2:07:05:28:
c2:b2:38:09:8e:26:41:1d:c0:66:13:be:d9:54:ee:99:be:21:
1f:2a:15:67:a9:1b:3f:f5:e0:0d:84:cf:7e:c0:29:3d:ec:d1:
8f:ad:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org