Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/24E3988AC38711EC8CDED51DC4F9AE02.roa
File: 24E3988AC38711EC8CDED51DC4F9AE02.roa (raw, json)
Hash identifier: QnCr7jNE+clxzJg0fu5FBprAvS00VPP7VcM6zLw6N+I=
Subject key identifier: EE:2C:45:62:81:5A:BE:70:2A:E2:76:9E:AC:7E:06:F6:9A:DC:E5:B4
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0620
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/24E3988AC38711EC8CDED51DC4F9AE02.roa
Signing time: Wed 31 Aug 2022 03:59:14 +0000
ROA not before: Wed 31 Aug 2022 03:59:14 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.109.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.129.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Aug 31 03:59:14 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=630edc92-473e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:7a:10:70:37:cb:1b:32:be:1b:64:00:fe:
e5:8a:e8:a9:3c:49:09:07:ff:fe:07:52:cc:6e:4c:
84:d0:af:e6:1d:bd:43:7c:e4:b5:3c:59:58:82:f8:
97:0c:c3:e2:21:60:58:43:a5:f4:b6:3c:3f:01:90:
b8:45:9a:f1:df:bb:62:96:78:11:4f:ee:38:d0:13:
7b:d9:91:75:dc:23:fe:f5:dc:7f:24:c6:6a:16:e2:
4d:b3:a7:95:8d:dc:d0:d3:99:54:28:98:32:b8:cd:
f1:72:f5:00:97:41:2b:f4:e5:01:72:19:65:f4:85:
e5:c7:80:38:85:d9:db:07:3e:be:2e:2a:e1:9e:a6:
7e:1e:cb:ac:02:f3:a2:1f:2a:48:f1:e8:e9:09:cb:
76:fe:2f:52:e3:8a:6d:4f:fd:57:b1:c7:a2:0c:7a:
ff:25:a5:ab:41:f5:cc:ec:f4:98:bb:be:9f:87:b9:
2e:76:b3:82:5b:99:7f:01:d0:5e:32:fa:b1:98:2f:
e7:35:be:a5:fd:05:92:ea:a4:57:0f:0b:be:18:23:
08:c5:e5:f4:4b:6a:6a:41:ff:a9:11:be:28:32:47:
39:8d:8b:c4:dc:58:8f:8d:54:f0:dd:ac:e0:68:e7:
a1:49:b7:5d:ef:29:64:c5:72:33:df:ed:4a:4f:98:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:45:62:81:5A:BE:70:2A:E2:76:9E:AC:7E:06:F6:9A:DC:E5:B4
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/24E3988AC38711EC8CDED51DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.119.255
169.136.121.0/24
169.136.123.0-169.136.130.255
169.136.136.0/24
169.136.144.0/24
169.136.155.0-169.136.190.255
Signature Algorithm: sha256WithRSAEncryption
0e:19:88:4d:a1:6a:cd:67:5c:98:17:31:7d:0d:33:ac:5b:c5:
fe:28:58:eb:94:ac:8b:b7:7b:74:0b:0d:af:86:50:ca:7a:33:
67:af:d6:c1:fe:9d:6b:84:a0:54:1d:45:3a:8c:41:58:03:91:
dc:29:02:98:22:ea:a9:97:4b:f3:7f:ef:47:36:6f:3b:ce:0b:
d4:4a:09:99:eb:9c:7e:d6:8a:46:20:c9:83:3c:f1:b5:ee:a0:
48:c7:65:14:77:60:8b:e4:9d:11:86:c1:0d:6e:26:85:30:af:
d9:9a:11:45:ed:a0:99:b0:3a:4c:8e:e6:a5:18:5b:80:e5:2b:
1a:fb:7e:dd:5f:d2:77:17:a0:fb:db:cf:b5:06:fb:d1:8e:13:
70:63:83:29:09:4a:0b:36:62:ac:f1:90:67:5c:d0:c2:ec:cc:
4a:fb:e0:9c:6b:0d:80:5f:13:e5:54:c9:80:46:b8:18:12:b6:
79:17:ce:1e:af:13:70:6a:e7:d7:05:d4:8d:19:c2:cc:80:f4:
13:a5:0e:a6:da:51:e3:52:4a:46:ee:87:fe:12:20:e5:c8:8a:
24:34:9e:40:b2:25:24:a2:8a:04:b9:37:a6:18:4b:5e:0c:1c:
d9:4f:a6:f7:c9:4a:92:16:e3:01:98:fb:7f:26:82:bb:39:77:
18:86:8f:03
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjIwODMxMDM1OTE0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzBlZGM5Mi00NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4zl6EHA3yxsyvhtkAP7liuipPEkJB//+B1LMbkyE0K/mHb1DfOS1PFlYgviX
DMPiIWBYQ6X0tjw/AZC4RZrx37tilngRT+440BN72ZF13CP+9dx/JMZqFuJNs6eV
jdzQ05lUKJgyuM3xcvUAl0Er9OUBchll9IXlx4A4hdnbBz6+LirhnqZ+HsusAvOi
HypI8ejpCct2/i9S44ptT/1XsceiDHr/JaWrQfXM7PSYu76fh7kudrOCW5l/AdBe
MvqxmC/nNb6l/QWS6qRXDwu+GCMIxeX0S2pqQf+pEb4oMkc5jYvE3FiPjVTw3azg
aOehSbdd7ylkxXIz3+1KT5gfqQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFO4sRWKB
Wr5wKuJ2nqx+Bvaa3OW0MB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvMjRFMzk4OEFD
Mzg3MTFFQzhDREVENTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E
UjBQME4EAgABMEgDBACpiEQDBACpiEcwDAMEAKmISQMEA6mIcAMEAKmIeTAMAwQA
qYh7AwQAqYiCAwQAqYiIAwQAqYiQMAwDBACpiJsDBACpiL4wDQYJKoZIhvcNAQEL
BQADggEBAA4ZiE2has1nXJgXMX0NM6xbxf4oWOuUrIu3e3QLDa+GUMp6M2ev1sH+
nWuEoFQdRTqMQVgDkdwpApgi6qmXS/N/70c2bzvOC9RKCZnrnH7WikYgyYM88bXu
oEjHZRR3YIvknRGGwQ1uJoUwr9maEUXtoJmwOkyO5qUYW4DlKxr7ft1f0ncXoPvb
z7UG+9GOE3BjgykJSgs2YqzxkGdc0MLszEr74JxrDYBfE+VUyYBGuBgStnkXzh6v
E3Bq59cF1I0ZwsyA9BOlDqbaUeNSSkbuh/4SIOXIiiQ0nkCyJSSiigS5N6YYS14M
HNlPpvfJSpIW4wGY+38mgrs5dxiGjwM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:31 2024 by rpki-client on console-ams.rpki-client.org