Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/7F609CC02CC511ED978B171DC4F9AE02.roa
File: 7F609CC02CC511ED978B171DC4F9AE02.roa (raw, json)
Hash identifier: xuDefuVCpTIvjpcZJF8mf8GIuhx9taE0b6oyAee68nA=
Subject key identifier: A5:D3:E4:C9:2E:F9:DB:61:DC:95:DC:24:9B:CE:CB:BC:7A:25:1F:B7
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 328F
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/7F609CC02CC511ED978B171DC4F9AE02.roa
Signing time: Mon 05 Sep 2022 02:50:28 +0000
ROA not before: Mon 05 Sep 2022 02:50:28 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 17408
IP address blocks: 202.133.224.0/19 maxlen: 22
202.133.224.0/20 maxlen: 23
202.133.224.0/24 maxlen: 24
202.133.226.0/23 maxlen: 24
202.133.228.0/22 maxlen: 24
202.133.232.0/21 maxlen: 24
202.133.240.0/21 maxlen: 24
202.133.248.0/22 maxlen: 24
202.133.252.0/23 maxlen: 24
2405:7e00:17::/48 maxlen: 48
2405:7e00:1000::/36 maxlen: 36
2405:7e00:1000::/48 maxlen: 48
2405:7e00:1002::/64 maxlen: 64
2405:7e00:1003::/48 maxlen: 48
2405:7e00:100a::/48 maxlen: 48
2405:7e00:100b::/48 maxlen: 48
2405:7e00:100c::/48 maxlen: 48
2405:7e00:100d::/48 maxlen: 48
2405:7e00:100e::/48 maxlen: 48
2405:7e00:100f::/48 maxlen: 48
2405:7e00:1011::/48 maxlen: 48
2405:7e00:1012::/48 maxlen: 48
2405:7e00:1013::/48 maxlen: 48
2405:7e00:1014::/48 maxlen: 48
2405:7e00:1015::/48 maxlen: 48
2405:7e00:1016::/48 maxlen: 48
2405:7e00:101a::/48 maxlen: 48
2405:7e00:101b::/48 maxlen: 48
2405:7e00:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12943 (0x328f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Sep 5 02:50:28 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=631563f3-3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:7b:3d:e5:fc:09:40:84:15:eb:d7:f0:6d:
69:36:55:d3:7b:ff:82:25:46:6a:bc:d5:a1:8b:83:
99:c7:f8:85:2b:0c:ca:16:74:2e:13:a4:fa:3f:57:
66:fe:2c:fa:24:64:aa:46:bf:28:84:92:f6:04:86:
a9:09:5d:94:95:c1:4d:96:c7:52:e7:5d:44:8e:06:
47:b8:86:ce:f4:b6:54:f0:41:1c:b7:c9:07:b9:78:
ac:57:2d:f1:0d:04:e6:06:9d:4b:8f:ff:4e:68:56:
52:73:21:4e:2a:96:d8:fd:84:9a:eb:47:4b:40:59:
d6:c5:1e:0e:6d:f3:62:55:86:84:37:27:80:6d:78:
47:de:d1:4e:7c:c0:e2:97:c2:69:0e:fb:a2:d4:f7:
c5:fd:b2:ea:7c:a3:e1:40:b3:4b:80:87:a1:da:80:
ed:d7:57:8e:6d:9a:7d:b1:88:ef:db:6d:4c:a8:04:
c3:5a:93:4f:4a:f5:c1:41:57:b5:3b:1c:39:b4:e4:
28:e1:98:12:0c:ea:12:18:30:ec:6f:9e:28:c1:69:
a5:02:12:45:e3:e8:fe:f3:f5:28:9a:7f:08:a5:0b:
57:1e:a0:16:86:26:c7:66:19:8b:d5:63:ea:7d:f7:
0b:b4:ca:d5:86:c0:8b:8e:66:cd:b2:cb:07:45:7e:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:E4:C9:2E:F9:DB:61:DC:95:DC:24:9B:CE:CB:BC:7A:25:1F:B7
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/7F609CC02CC511ED978B171DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.133.224.0/19
IPv6:
2405:7e00:17::/48
2405:7e00:1000::/36
2405:7e00:4000::/36
Signature Algorithm: sha256WithRSAEncryption
72:c3:55:80:32:7e:8a:5f:e1:e8:74:24:e8:db:26:c4:fa:85:
ff:63:9f:7b:fc:28:3e:43:91:63:11:ad:94:ec:8a:ee:4d:3d:
76:13:8e:76:a5:e7:8e:35:f2:55:62:47:df:f6:68:1f:8b:90:
6a:0c:32:f2:ce:6c:89:98:e2:03:77:53:65:a5:f8:47:33:22:
42:4a:fa:47:8b:83:33:21:6f:f2:ad:a4:eb:f9:a9:e5:d6:9f:
46:42:3f:d9:fd:24:37:4e:7d:e5:07:ee:2d:31:40:9a:19:af:
0f:fb:9c:b1:1d:64:90:c9:e3:d0:60:01:dd:e4:90:c9:b2:35:
eb:69:00:25:c6:5b:41:25:1e:4c:5a:54:73:32:7d:e7:db:50:
71:b8:47:cc:1e:ad:14:b8:48:8e:0d:dd:b2:9a:a6:74:10:bb:
46:a7:ea:62:e7:1c:fc:cc:a4:44:ba:f0:80:d5:c9:02:37:0f:
9f:a1:36:2c:15:83:d5:34:a3:59:fe:39:bf:c8:46:fb:f4:18:
ce:f5:b4:b2:6e:0e:ea:ee:13:be:68:61:16:d1:a1:98:c0:1c:
0e:2d:a2:db:a5:9a:ef:d9:58:a0:35:fa:36:1d:dc:6f:26:e3:
21:f7:c6:32:8b:9a:18:b4:4c:ba:7d:83:1b:f3:3b:92:f7:98:
0c:f4:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org