Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/5629D5DC3CDF11EC9273393BC4F9AE02.roa
File: 5629D5DC3CDF11EC9273393BC4F9AE02.roa (raw, json)
Hash identifier: H8JfEyxjDVsGbQJkhV3VPv7L+LxmQvrIDkQJvoY30/s=
Subject key identifier: E3:E2:C9:75:E7:50:11:41:4A:67:9D:3E:08:13:85:41:EA:60:3A:AC
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 0132
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/5629D5DC3CDF11EC9273393BC4F9AE02.roa
Signing time: Mon 07 Feb 2022 03:32:23 +0000
ROA not before: Mon 07 Feb 2022 03:32:23 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 22822
IP address blocks: 111.119.0.0/22 maxlen: 24
111.119.4.0/22 maxlen: 22
111.119.11.0/24 maxlen: 24
111.119.16.0/23 maxlen: 23
111.119.20.0/23 maxlen: 23
111.119.22.0/23 maxlen: 23
111.119.24.0/21 maxlen: 24
117.121.248.0/21 maxlen: 24
203.9.176.0/21 maxlen: 24
203.77.184.0/22 maxlen: 22
203.77.188.0/22 maxlen: 22
203.77.188.0/23 maxlen: 24
203.77.190.0/24 maxlen: 24
203.77.191.0/24 maxlen: 24
2402:6800::/32 maxlen: 32
2402:6800:730::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 7 03:32:23 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=620092c7-23cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:8e:82:04:c6:45:2a:c8:f7:70:af:4d:47:
be:ba:02:72:64:60:10:76:03:6f:4c:cd:bc:e6:d4:
1f:0d:85:4c:d3:72:93:f1:e4:2e:ec:2f:d9:71:3c:
26:04:55:db:f0:36:8b:78:77:46:08:be:45:84:fd:
aa:41:05:2d:90:38:eb:f6:a9:0c:65:88:c1:7e:5b:
f5:bb:f8:dc:1e:8f:57:86:b3:e4:cc:bb:02:36:95:
04:40:2f:0a:d2:12:ba:f0:5b:ff:20:a5:24:10:84:
d1:b4:59:21:8e:e3:4f:62:8f:bd:9d:c8:63:46:68:
c3:45:91:e7:2b:8b:cd:9f:59:2d:e5:75:e5:37:8d:
b5:00:85:01:ad:63:50:a2:af:11:da:f4:7f:61:99:
de:ef:63:5e:03:9a:99:2c:85:02:65:3c:54:fb:32:
5f:47:bc:41:e4:bf:94:31:ae:3a:47:8e:4d:7e:89:
fe:e4:af:10:96:e9:7e:99:be:0e:e5:a0:85:51:01:
36:2c:9b:5d:1d:b7:b6:35:e9:87:38:f7:bf:e0:b7:
4a:c3:d8:f5:b4:5a:ed:ba:cb:f8:fc:34:64:30:c0:
d0:35:f7:36:85:fe:4f:c0:6c:7a:8c:58:d2:a0:e5:
02:e0:83:20:88:b6:e1:70:64:03:4d:46:0f:f8:5e:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:C9:75:E7:50:11:41:4A:67:9D:3E:08:13:85:41:EA:60:3A:AC
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/5629D5DC3CDF11EC9273393BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.0.0/21
111.119.11.0/24
111.119.16.0/23
111.119.20.0-111.119.31.255
117.121.248.0/21
203.9.176.0/21
203.77.184.0/21
IPv6:
2402:6800::/32
Signature Algorithm: sha256WithRSAEncryption
86:4c:07:7b:05:5a:eb:38:c7:fa:d6:ef:52:f9:fc:67:28:5d:
e2:02:1b:05:1d:f9:bf:dd:28:6c:3f:9b:57:55:72:8c:85:2e:
d9:8e:f3:13:ef:ca:22:fa:52:cf:05:77:03:df:00:bf:25:8f:
04:a4:b7:3b:41:74:b3:87:84:c9:f4:74:8a:e6:f3:84:76:ad:
76:3e:70:04:4a:af:a0:3e:3d:91:b2:5d:2c:ee:f5:7c:5b:9b:
e1:7a:7f:ae:a8:cc:54:e0:5a:69:52:8c:10:02:4a:af:58:12:
3b:fb:9f:d6:20:08:18:8b:2b:0d:ff:63:fb:3b:e3:9f:23:b3:
d5:b7:09:52:c9:2c:55:8f:4e:09:fd:83:32:70:33:4a:37:28:
b7:1f:18:80:66:dc:c5:46:02:ba:e9:6c:2c:9b:a1:a9:06:d7:
db:f3:3b:41:11:df:e3:06:73:0c:b3:6f:d4:e6:ed:02:e7:54:
3d:01:61:b3:73:cf:0a:50:f1:03:f6:4d:8f:77:d8:e0:78:4a:
0e:25:08:a0:0f:69:60:18:e2:0c:0f:f5:6c:2c:0d:de:29:66:
be:8e:a2:44:32:0c:8c:f0:84:c8:61:b4:3a:20:74:cb:e8:bf:
1c:ba:05:8b:86:56:8d:44:66:7b:6e:8c:8b:f7:98:e2:82:5e:
7d:62:77:03
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjIwMjA3MDMzMjIzWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjAwOTJjNy0yM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvl+OggTGRSrI93CvTUe+ugJyZGAQdgNvTM285tQfDYVM03KT8eQu7C/ZcTwm
BFXb8DaLeHdGCL5FhP2qQQUtkDjr9qkMZYjBflv1u/jcHo9XhrPkzLsCNpUEQC8K
0hK68Fv/IKUkEITRtFkhjuNPYo+9nchjRmjDRZHnK4vNn1kt5XXlN421AIUBrWNQ
oq8R2vR/YZne72NeA5qZLIUCZTxU+zJfR7xB5L+UMa46R45Nfon+5K8Qlul+mb4O
5aCFUQE2LJtdHbe2NemHOPe/4LdKw9j1tFrtusv4/DRkMMDQNfc2hf5PwGx6jFjS
oOUC4IMgiLbhcGQDTUYP+F5rXwIDAQABo4IC0DCCAswwHQYDVR0OBBYEFOPiyXXn
UBFBSmedPggThUHqYDqsMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvNTYyOUQ1REMz
Q0RGMTFFQzkyNzMzOTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E
SzBJMDgEAgABMDIDBANvdwADBABvdwsDBAFvdxAwDAMEAm93FAMEBW93AAMEA3V5
+AMEA8sJsAMEA8tNuDANBAIAAjAHAwUAJAJoADANBgkqhkiG9w0BAQsFAAOCAQEA
hkwHewVa6zjH+tbvUvn8Zyhd4gIbBR35v90obD+bV1VyjIUu2Y7zE+/KIvpSzwV3
A98AvyWPBKS3O0F0s4eEyfR0iubzhHatdj5wBEqvoD49kbJdLO71fFub4Xp/rqjM
VOBaaVKMEAJKr1gSO/uf1iAIGIsrDf9j+zvjnyOz1bcJUsksVY9OCf2DMnAzSjco
tx8YgGbcxUYCuulsLJuhqQbX2/M7QRHf4wZzDLNv1ObtAudUPQFhs3PPClDxA/ZN
j3fY4HhKDiUIoA9pYBjiDA/1bCwN3ilmvo6iRDIMjPCEyGG0OiB0y+i/HLoFi4ZW
jURme26Mi/eY4oJefWJ3Aw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org