Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2713CC9EB88B11EC891BB082C4F9AE02.roa
File: 2713CC9EB88B11EC891BB082C4F9AE02.roa (raw, json)
Hash identifier: JFXTolBayuzlytp4U1LU1vvJasrvzg0Mr/v3FShJR2o=
Subject key identifier: C0:74:0F:48:FD:20:20:A5:5B:8D:14:28:78:38:C8:CF:E1:EE:72:FD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3645
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2713CC9EB88B11EC891BB082C4F9AE02.roa
Signing time: Sun 10 Apr 2022 05:00:34 +0000
ROA not before: Sun 10 Apr 2022 05:00:34 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 131429
IP address blocks: 42.1.64.0/18 maxlen: 24
45.121.24.0/22 maxlen: 24
59.153.220.0/22 maxlen: 24
59.153.224.0/22 maxlen: 24
59.153.228.0/22 maxlen: 24
59.153.232.0/22 maxlen: 24
59.153.236.0/22 maxlen: 24
59.153.240.0/22 maxlen: 24
59.153.244.0/22 maxlen: 24
59.153.248.0/22 maxlen: 24
59.153.252.0/22 maxlen: 24
103.7.174.0/23 maxlen: 24
103.156.0.0/23 maxlen: 23
103.156.0.0/24 maxlen: 24
103.156.1.0/24 maxlen: 24
103.156.2.0/23 maxlen: 23
103.156.2.0/24 maxlen: 24
103.156.3.0/24 maxlen: 24
103.156.4.0/23 maxlen: 23
103.156.4.0/24 maxlen: 24
103.156.5.0/24 maxlen: 24
103.156.6.0/24 maxlen: 24
103.156.7.0/24 maxlen: 24
103.156.8.0/24 maxlen: 24
103.156.9.0/24 maxlen: 24
103.156.38.0/24 maxlen: 24
103.156.39.0/24 maxlen: 24
103.156.40.0/24 maxlen: 24
103.156.41.0/24 maxlen: 24
103.156.42.0/24 maxlen: 24
103.156.43.0/24 maxlen: 24
103.156.44.0/24 maxlen: 24
103.156.45.0/24 maxlen: 24
103.156.46.0/24 maxlen: 24
103.156.47.0/24 maxlen: 24
103.156.48.0/24 maxlen: 24
103.156.49.0/24 maxlen: 24
103.156.58.0/24 maxlen: 24
103.156.59.0/24 maxlen: 24
103.156.60.0/24 maxlen: 24
103.156.61.0/24 maxlen: 24
103.199.24.0/24 maxlen: 24
103.199.28.0/22 maxlen: 24
103.199.32.0/23 maxlen: 24
103.199.36.0/22 maxlen: 24
103.199.40.0/22 maxlen: 24
103.199.44.0/22 maxlen: 24
103.199.48.0/22 maxlen: 24
103.199.52.0/22 maxlen: 24
103.199.56.0/22 maxlen: 24
103.199.60.0/22 maxlen: 24
103.199.68.0/22 maxlen: 24
103.199.72.0/22 maxlen: 24
103.199.76.0/22 maxlen: 24
137.59.26.0/24 maxlen: 24
137.59.28.0/22 maxlen: 24
137.59.32.0/23 maxlen: 24
137.59.36.0/22 maxlen: 24
137.59.40.0/22 maxlen: 24
137.59.44.0/22 maxlen: 24
2402:9d80::/41 maxlen: 48
2402:9d80:80::/41 maxlen: 48
2402:9d80:100::/41 maxlen: 48
2402:9d80:180::/41 maxlen: 48
2402:9d80:200::/41 maxlen: 48
2402:9d80:280::/41 maxlen: 48
2402:9d80:300::/41 maxlen: 48
2402:9d80:380::/41 maxlen: 48
2402:9d80:400::/41 maxlen: 48
2402:9d80:480::/41 maxlen: 48
2402:9d80:500::/41 maxlen: 48
2402:9d80:580::/41 maxlen: 48
2402:9d80:600::/41 maxlen: 48
2402:9d80:680::/41 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13893 (0x3645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Apr 10 05:00:34 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62526472-e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:0d:b7:10:5b:a2:34:08:13:55:c7:5a:51:
b4:db:02:44:92:9c:54:04:ad:9b:a6:a3:80:56:9a:
ac:84:f9:92:23:51:fe:33:d8:06:7a:ab:8f:ac:56:
ed:1c:8c:5f:be:59:6a:b1:15:d0:7d:3f:5c:f0:63:
d9:aa:f8:e2:60:37:a0:a0:41:ac:c4:f9:29:f2:ff:
1b:e3:1f:de:39:36:1d:c0:61:f7:c5:04:ad:80:40:
6a:ad:de:05:51:fe:95:94:12:5e:e8:7c:6c:b2:87:
c3:a8:58:ae:08:35:b9:d0:54:27:88:e8:22:09:67:
d9:21:4a:06:84:b7:53:e2:41:90:a3:84:d7:6c:2e:
46:3c:c8:54:42:c6:d2:69:91:bd:9b:66:1e:76:1d:
1c:13:97:2d:48:ca:e5:77:33:af:17:77:88:28:9d:
57:e6:97:a2:8d:a8:40:9e:2a:5a:1a:93:9b:8d:a7:
4f:17:d9:14:fa:bb:7f:39:50:ba:d7:56:c0:46:77:
30:7a:77:7c:b0:8f:f8:39:df:cd:b2:0b:d2:6c:67:
d3:8b:9d:e5:3c:59:aa:2f:e5:82:ed:81:b9:a8:31:
ab:d5:9b:11:28:6c:94:57:43:91:5f:77:60:d4:ed:
cd:94:03:2c:4d:b3:e6:f8:c7:57:47:fb:80:1f:ac:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:0F:48:FD:20:20:A5:5B:8D:14:28:78:38:C8:CF:E1:EE:72:FD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2713CC9EB88B11EC891BB082C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.1.64.0/18
45.121.24.0/22
59.153.220.0-59.153.255.255
103.7.174.0/23
103.156.0.0-103.156.9.255
103.156.38.0-103.156.49.255
103.156.58.0-103.156.61.255
103.199.24.0/24
103.199.28.0-103.199.33.255
103.199.36.0-103.199.63.255
103.199.68.0-103.199.79.255
137.59.26.0/24
137.59.28.0-137.59.33.255
137.59.36.0-137.59.47.255
IPv6:
2402:9d80::-2402:9d80:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:b8:a1:85:db:8f:97:ed:68:60:0b:dd:7e:1b:90:d0:f8:8b:
63:b6:86:c6:a7:30:4b:72:78:ed:ba:12:31:0a:c4:7a:e1:f1:
4d:a0:e3:2e:37:ef:e2:6f:b5:72:17:0f:4d:06:c8:e6:14:90:
24:70:94:a4:0e:50:85:07:18:23:92:fe:8d:3a:42:57:5d:97:
b5:01:ed:be:c3:1e:a3:ba:6f:5c:84:8d:d4:1a:4b:b0:08:0d:
50:0c:ef:9a:1e:80:5a:7e:54:f0:42:bf:e2:ee:66:0e:3f:0a:
1d:94:d2:b1:4d:f8:8e:c3:52:e3:a0:c7:27:a9:07:1a:07:2a:
0b:a9:3e:c7:52:99:4b:bd:78:4a:78:49:81:60:6b:2c:d9:54:
ed:a7:bf:d7:8d:b2:72:de:0f:d8:2c:a2:aa:75:ab:5e:8f:1f:
e7:6e:92:48:85:c8:76:95:dc:71:5d:af:5a:67:25:da:fa:f2:
15:57:d7:5e:9f:e5:ce:7b:14:01:02:7e:da:82:4f:5f:db:a6:
8b:88:4b:d6:f5:f2:92:e4:1b:a0:81:39:b6:c3:24:c4:03:8e:
cc:b9:49:9d:8d:fd:72:78:b3:70:bb:23:82:ba:ee:1f:f5:20:
c8:c3:d5:37:15:be:c3:db:53:c6:ad:8d:af:3a:eb:ac:ff:ac:
03:3c:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org