Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B6784E42A3511EC9191FF66C4F9AE02.roa
File: 9B6784E42A3511EC9191FF66C4F9AE02.roa (raw, json)
Hash identifier: 4gW6bVX1pV9GKyrXEACRWYuX8Air5i+QsFy8GU5gCto=
Subject key identifier: 47:5E:90:75:8D:E4:53:7A:22:4B:44:4B:85:DB:EC:04:6C:13:3A:5E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 39A4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B6784E42A3511EC9191FF66C4F9AE02.roa
Signing time: Fri 26 Aug 2022 14:53:39 +0000
ROA not before: Fri 26 Aug 2022 14:53:39 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 7552
IP address blocks: 27.66.12.0/22 maxlen: 24
27.66.20.0/22 maxlen: 24
27.66.48.0/21 maxlen: 24
27.66.56.0/21 maxlen: 24
27.66.128.0/20 maxlen: 24
27.66.144.0/20 maxlen: 24
27.66.160.0/21 maxlen: 24
27.66.168.0/21 maxlen: 24
27.67.16.0/20 maxlen: 24
27.67.40.0/21 maxlen: 24
27.67.72.0/22 maxlen: 24
27.67.76.0/22 maxlen: 24
27.67.84.0/23 maxlen: 24
27.67.86.0/23 maxlen: 24
27.67.88.0/22 maxlen: 24
27.67.92.0/22 maxlen: 24
27.67.96.0/21 maxlen: 24
27.67.104.0/21 maxlen: 24
27.67.112.0/21 maxlen: 24
27.67.120.0/21 maxlen: 24
27.67.128.0/20 maxlen: 24
27.67.144.0/20 maxlen: 24
27.67.160.0/20 maxlen: 24
27.67.176.0/20 maxlen: 24
27.67.192.0/21 maxlen: 24
27.67.200.0/21 maxlen: 24
27.67.208.0/21 maxlen: 24
27.67.216.0/21 maxlen: 24
27.67.224.0/20 maxlen: 24
27.67.240.0/20 maxlen: 24
27.68.84.0/23 maxlen: 24
27.68.86.0/23 maxlen: 24
27.68.136.0/22 maxlen: 24
27.68.140.0/22 maxlen: 24
27.68.144.0/21 maxlen: 24
27.68.152.0/21 maxlen: 24
27.68.212.0/23 maxlen: 24
27.68.214.0/23 maxlen: 24
27.70.240.0/20 maxlen: 24
27.78.0.0/22 maxlen: 24
27.78.4.0/22 maxlen: 24
27.78.8.0/23 maxlen: 24
27.78.10.0/23 maxlen: 24
115.72.72.0/23 maxlen: 24
115.72.74.0/23 maxlen: 24
115.73.200.0/23 maxlen: 24
115.73.202.0/23 maxlen: 24
115.76.56.0/22 maxlen: 24
115.76.60.0/22 maxlen: 24
125.234.224.0/22 maxlen: 24
125.234.228.0/22 maxlen: 24
125.235.14.0/24 maxlen: 24
125.235.15.0/24 maxlen: 24
125.235.56.0/22 maxlen: 24
125.235.60.0/22 maxlen: 24
125.235.112.0/21 maxlen: 24
125.235.120.0/21 maxlen: 24
125.235.130.0/24 maxlen: 24
125.235.131.0/24 maxlen: 24
125.235.132.0/23 maxlen: 24
125.235.134.0/23 maxlen: 24
125.235.136.0/21 maxlen: 24
125.235.176.0/21 maxlen: 24
125.235.184.0/21 maxlen: 24
125.235.208.0/21 maxlen: 24
125.235.216.0/21 maxlen: 24
171.244.208.0/20 maxlen: 24
171.246.8.0/22 maxlen: 24
171.246.12.0/22 maxlen: 24
171.252.132.0/22 maxlen: 24
171.252.136.0/21 maxlen: 24
171.252.144.0/22 maxlen: 24
171.253.0.0/20 maxlen: 24
171.253.16.0/20 maxlen: 24
171.253.32.0/21 maxlen: 24
171.253.40.0/21 maxlen: 24
171.253.128.0/20 maxlen: 24
171.253.144.0/20 maxlen: 24
171.253.160.0/20 maxlen: 24
171.253.176.0/20 maxlen: 24
171.253.192.0/21 maxlen: 24
171.253.200.0/21 maxlen: 24
171.253.208.0/21 maxlen: 24
171.253.216.0/21 maxlen: 24
171.253.224.0/22 maxlen: 24
171.254.128.0/19 maxlen: 24
171.254.160.0/19 maxlen: 24
171.255.64.0/20 maxlen: 24
171.255.80.0/20 maxlen: 24
171.255.96.0/20 maxlen: 24
171.255.112.0/20 maxlen: 24
171.255.128.0/20 maxlen: 24
171.255.144.0/20 maxlen: 24
171.255.160.0/22 maxlen: 24
171.255.164.0/22 maxlen: 24
171.255.168.0/22 maxlen: 24
171.255.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14756 (0x39a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 26 14:53:39 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6308de73-4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:7b:38:fb:52:03:c3:6f:71:c7:fd:87:cc:
5f:48:c3:37:97:63:49:d1:a1:5b:47:03:a6:e5:31:
20:60:eb:6b:08:d9:8e:07:19:c0:af:ec:bd:c6:f3:
7a:d9:4d:db:79:74:94:37:f9:fd:6f:ad:b0:f3:40:
1f:5f:20:40:3f:67:60:47:1b:d5:ef:ef:83:86:a6:
eb:77:3f:f4:69:04:a4:c3:bc:4b:98:23:c4:78:25:
a9:65:28:2b:29:ee:b4:ba:2d:c0:47:b1:04:b7:d4:
04:bf:6e:09:2c:4f:3e:6e:7c:22:28:ac:de:11:6f:
a9:53:b6:33:38:4c:bc:85:f3:3c:a5:df:6f:0e:c3:
bf:46:49:22:a2:2a:1a:cc:a5:49:d6:dc:f6:9f:78:
ea:ef:dc:78:72:88:03:03:d7:04:50:36:85:fe:7b:
9a:cd:b5:09:18:da:3d:02:28:d5:18:8d:19:2b:fd:
96:29:87:7d:f4:27:d2:27:5c:52:0e:6b:93:ec:45:
b5:25:48:3b:d7:ad:bc:f9:dd:94:4d:bd:5b:97:6a:
e2:c7:35:29:04:85:64:f4:ce:61:34:4f:f1:6e:11:
b2:cd:e3:ad:50:4f:02:7b:26:58:f4:33:ad:c8:2b:
ff:19:40:e6:fb:4a:f0:46:b6:d7:d8:eb:f7:5b:ee:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5E:90:75:8D:E4:53:7A:22:4B:44:4B:85:DB:EC:04:6C:13:3A:5E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B6784E42A3511EC9191FF66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.66.12.0/22
27.66.20.0/22
27.66.48.0/20
27.66.128.0-27.66.175.255
27.67.16.0/20
27.67.40.0/21
27.67.72.0/21
27.67.84.0-27.67.255.255
27.68.84.0/22
27.68.136.0-27.68.159.255
27.68.212.0/22
27.70.240.0/20
27.78.0.0-27.78.11.255
115.72.72.0/22
115.73.200.0/22
115.76.56.0/21
125.234.224.0/21
125.235.14.0/23
125.235.56.0/21
125.235.112.0/20
125.235.130.0-125.235.143.255
125.235.176.0/20
125.235.208.0/20
171.244.208.0/20
171.246.8.0/21
171.252.132.0-171.252.147.255
171.253.0.0-171.253.47.255
171.253.128.0-171.253.227.255
171.254.128.0/18
171.255.64.0-171.255.175.255
Signature Algorithm: sha256WithRSAEncryption
6f:66:f9:2f:ab:b0:a4:43:01:1e:0a:e5:4e:af:00:18:00:2d:
f8:3c:8f:dc:0d:de:20:a5:ed:13:86:b2:8e:c4:da:0b:11:40:
5d:f5:df:c1:8f:b6:a3:81:af:6b:6a:c6:31:75:3c:38:63:24:
70:cf:27:ad:0b:a7:f4:30:d6:bc:da:51:de:11:ab:f5:b2:aa:
5d:82:68:59:55:65:87:50:d2:85:f8:53:cc:2b:63:99:e8:11:
76:61:51:93:6d:77:c1:3b:e0:bc:6a:62:c1:34:af:45:a6:89:
de:99:c8:41:d4:44:5e:c9:82:f7:55:66:7a:ac:16:bf:07:25:
01:8a:10:06:19:43:ac:74:05:b2:48:e7:07:54:b4:b4:6d:34:
28:20:dd:cd:be:19:80:f1:21:f0:92:c6:ee:22:d0:12:53:1e:
4c:a4:c0:52:7d:33:6b:4f:0b:dd:23:f9:06:66:f9:af:75:0b:
08:ee:18:a9:da:ec:a0:ef:0d:1d:73:6c:88:3a:5c:e6:ae:09:
aa:d4:02:7a:9c:0d:7c:25:d4:86:01:8e:fa:06:9d:38:d9:ae:
d4:77:79:ba:47:63:ac:40:35:f7:5a:c6:62:a7:5f:f0:cf:8b:
9c:20:0b:84:7e:0a:f9:cd:38:80:9b:9c:bc:62:8b:f4:bb:81:
4b:d2:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org