Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/CC7A17A41E5711EF8C85CD3AC4F9AE02.roa
File: CC7A17A41E5711EF8C85CD3AC4F9AE02.roa (raw, json)
Hash identifier: +Cj0dQb3loMNt6uhiw5SOp4ZASH1xva1HM1m4RNReL4=
Subject key identifier: 73:A4:00:8E:8C:4B:1E:E8:8C:38:2A:A8:FD:FE:C2:FE:4E:FC:3F:44
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0CCE
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/CC7A17A41E5711EF8C85CD3AC4F9AE02.roa
Signing time: Thu 30 May 2024 07:39:52 +0000
ROA not before: Thu 30 May 2024 07:39:52 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 9506
IP address blocks: 151.192.64.0/18 maxlen: 24
151.192.128.0/17 maxlen: 17
151.192.129.0/24 maxlen: 24
151.192.130.0/23 maxlen: 23
151.192.132.0/22 maxlen: 22
151.192.136.0/21 maxlen: 21
151.192.144.0/23 maxlen: 23
151.192.146.0/23 maxlen: 23
151.192.148.0/22 maxlen: 22
151.192.152.0/22 maxlen: 22
151.192.156.0/23 maxlen: 23
151.192.158.0/23 maxlen: 23
151.192.160.0/20 maxlen: 20
151.192.176.0/22 maxlen: 22
151.192.180.0/22 maxlen: 22
151.192.184.0/22 maxlen: 22
151.192.188.0/22 maxlen: 22
151.192.192.0/21 maxlen: 21
151.192.200.0/22 maxlen: 22
151.192.204.0/23 maxlen: 23
151.192.206.0/23 maxlen: 23
151.192.208.0/22 maxlen: 22
151.192.212.0/23 maxlen: 23
151.192.220.0/22 maxlen: 22
151.192.224.0/22 maxlen: 22
151.192.228.0/22 maxlen: 22
151.192.232.0/22 maxlen: 22
151.192.236.0/23 maxlen: 23
151.192.238.0/23 maxlen: 23
151.192.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: May 30 07:39:52 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66582d47-c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:5a:a9:e9:27:a8:4e:2f:0e:bc:39:2b:6e:
ae:fc:63:c3:02:4b:2d:25:ac:5e:d7:b6:0b:59:24:
05:af:4a:3f:4d:e5:ae:47:f8:4c:81:4d:56:17:d1:
00:98:c3:50:6c:42:89:5f:eb:c0:cd:48:9a:dc:dd:
0f:fe:d7:20:f9:61:12:17:3f:50:1c:86:57:38:10:
e1:bc:44:1a:4e:ad:fe:86:58:50:a2:8d:28:c1:f5:
ea:58:91:7a:c9:58:67:68:05:0b:ff:22:df:0e:e6:
5b:69:c0:e1:d2:58:a2:90:3c:e0:dc:07:fc:d4:1f:
71:12:02:29:6b:4b:ab:73:f9:19:4c:d6:b0:83:15:
46:e4:f0:79:56:62:4c:47:47:f4:fb:15:1d:ba:b0:
83:2a:2b:5e:e5:7a:8a:35:ba:bc:e9:d2:fe:ae:33:
fa:19:8f:ae:bb:82:c2:91:ed:3d:5c:2e:d1:e6:e5:
22:73:bf:3d:0a:07:2f:4a:3f:1c:c2:29:fb:ed:f6:
8a:54:33:dc:c3:c4:5b:cd:f3:4b:c4:34:6c:1b:71:
48:9d:52:aa:34:74:21:be:04:92:87:17:3d:58:4b:
00:bf:7c:8c:07:9b:2d:f3:8a:63:bc:8f:4f:b5:0a:
e8:28:c4:7c:c6:69:67:f9:cd:9a:cc:a6:30:78:4a:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:00:8E:8C:4B:1E:E8:8C:38:2A:A8:FD:FE:C2:FE:4E:FC:3F:44
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/CC7A17A41E5711EF8C85CD3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.192.64.0-151.192.255.255
Signature Algorithm: sha256WithRSAEncryption
7a:26:7f:a7:42:08:bb:bc:5c:44:ed:68:7f:d9:67:3d:cb:67:
5b:94:0a:56:0b:0d:ac:2f:4c:af:05:b3:bc:dc:5f:3c:1a:43:
d5:0f:61:a0:73:7a:e6:a7:bb:7a:da:38:b9:e1:fc:7f:e1:78:
09:0d:b6:cf:95:76:d8:d3:ae:b2:6e:73:06:0a:a1:a1:7c:00:
1a:a0:8c:d4:97:df:99:b4:8b:e5:68:cd:8f:93:d2:60:c3:14:
fa:0e:f4:ce:62:df:18:a6:37:68:e2:3e:49:a9:86:ad:d8:e6:
75:80:b9:2c:bb:c2:7d:f8:5a:70:af:30:5a:57:8e:06:64:3d:
67:9e:7a:15:bf:d4:6c:2b:8e:6d:7c:43:cf:42:c0:1f:6f:89:
d8:8b:46:5c:68:95:aa:61:87:ed:3d:8f:56:d4:cc:d0:c2:5d:
63:76:57:0e:13:ab:2a:75:c6:ba:9c:50:85:f2:93:c7:d9:17:
ff:0b:fe:90:45:d7:3b:fb:c5:01:d7:d6:34:f4:52:cb:52:86:
d3:a3:7f:7d:e1:4c:e3:ee:b6:36:51:45:72:36:6d:2a:f7:d2:
e3:b8:44:4a:54:62:7d:b5:eb:00:e3:d0:49:75:de:20:c4:b3:
18:7f:47:c5:01:2e:66:bb:78:7b:8a:8c:50:6e:e0:fa:a0:16:
9c:57:ec:6a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1
MTk1QjNCQTkwHhcNMjQwNTMwMDczOTUyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4MmQ0Ny1jOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEtaqeknqE4vDrw5K26u/GPDAkstJaxe17YLWSQFr0o/TeWuR/hMgU1WF9EA
mMNQbEKJX+vAzUia3N0P/tcg+WESFz9QHIZXOBDhvEQaTq3+hlhQoo0owfXqWJF6
yVhnaAUL/yLfDuZbacDh0liikDzg3Af81B9xEgIpa0urc/kZTNawgxVG5PB5VmJM
R0f0+xUdurCDKite5XqKNbq86dL+rjP6GY+uu4LCke09XC7R5uUic789CgcvSj8c
win77faKVDPcw8RbzfNLxDRsG3FInVKqNHQhvgSShxc9WEsAv3yMB5st84pjvI9P
tQroKMR8xmln+c2azKYweEolQwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFHOkAI6M
Sx7ojDgqqP3+wv5O/D9EMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF
QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvMDFCMDY5RjZDRUJCMTFFOTlCMUY3RDNFQzRGOUFFMDIvQ0M3QTE3QTQx
RTU3MTFFRjhDODVDRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQcBAf8E
FzAVMBMEAgABMA0wCwMEBpfAQAMDAJfAMA0GCSqGSIb3DQEBCwUAA4IBAQB6Jn+n
Qgi7vFxE7Wh/2Wc9y2dblApWCw2sL0yvBbO83F88GkPVD2Ggc3rmp7t62ji54fx/
4XgJDbbPlXbY066ybnMGCqGhfAAaoIzUl9+ZtIvlaM2Pk9JgwxT6DvTOYt8Ypjdo
4j5JqYat2OZ1gLksu8J9+FpwrzBaV44GZD1nnnoVv9RsK45tfEPPQsAfb4nYi0Zc
aJWqYYftPY9W1MzQwl1jdlcOE6sqdca6nFCF8pPH2Rf/C/6QRdc7+8UB19Y09FLL
UobTo3994Uzj7rY2UUVyNm0q99LjuERKVGJ9tesA49BJdd4gxLMYf0fFAS5mu3h7
ioxQbuD6oBacV+xq
-----END CERTIFICATE-----
Generated at Sat May 10 20:32:21 2025 by rpki-client