Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/A369E93897C211EDAA7C8250C4F9AE02.roa
File: A369E93897C211EDAA7C8250C4F9AE02.roa (raw, json)
Hash identifier: yMlzv86vCIg/XRgiaxGbA9GvtpmUm1rhHGwx1wmE3v8=
Subject key identifier: 8F:89:95:70:DA:6D:47:F3:53:C1:9B:46:81:90:A3:B6:7F:C5:A3:42
Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial: 06C3
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/A369E93897C211EDAA7C8250C4F9AE02.roa
Signing time: Tue 06 Jun 2023 01:45:24 +0000
ROA not before: Tue 06 Jun 2023 01:45:24 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 9738
IP address blocks: 61.14.96.0/19 maxlen: 19
61.14.104.0/24 maxlen: 24
61.14.105.0/24 maxlen: 24
61.14.106.0/24 maxlen: 24
61.14.107.0/24 maxlen: 24
61.14.116.0/24 maxlen: 24
61.14.117.0/24 maxlen: 24
61.14.121.0/24 maxlen: 24
103.28.196.0/23 maxlen: 23
103.28.198.0/23 maxlen: 23
202.148.224.0/21 maxlen: 21
202.148.232.0/24 maxlen: 24
202.148.233.0/24 maxlen: 24
202.148.234.0/23 maxlen: 23
202.148.236.0/22 maxlen: 22
202.148.238.0/24 maxlen: 24
202.148.239.0/24 maxlen: 24
203.19.157.0/24 maxlen: 24
210.18.192.0/22 maxlen: 22
210.18.196.0/24 maxlen: 24
210.18.197.0/24 maxlen: 24
210.18.198.0/24 maxlen: 24
210.18.199.0/24 maxlen: 24
210.18.200.0/24 maxlen: 24
210.18.201.0/24 maxlen: 24
210.18.202.0/23 maxlen: 23
210.18.202.0/24 maxlen: 24
210.18.203.0/24 maxlen: 24
210.18.204.0/22 maxlen: 22
210.18.208.0/20 maxlen: 20
210.18.211.0/24 maxlen: 24
210.18.224.0/20 maxlen: 20
210.18.224.0/21 maxlen: 21
210.18.232.0/24 maxlen: 24
210.18.233.0/24 maxlen: 24
210.18.234.0/23 maxlen: 23
210.18.236.0/22 maxlen: 22
210.18.240.0/24 maxlen: 24
210.18.241.0/24 maxlen: 24
210.18.242.0/24 maxlen: 24
210.18.243.0/24 maxlen: 24
210.18.244.0/22 maxlen: 22
210.18.248.0/23 maxlen: 23
210.18.250.0/23 maxlen: 23
210.18.251.0/24 maxlen: 24
210.18.252.0/24 maxlen: 24
210.18.253.0/24 maxlen: 24
210.18.254.0/24 maxlen: 24
210.18.255.0/24 maxlen: 24
2403:c800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Validity
Not Before: Jun 6 01:45:24 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=647e8fb4-40e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:a1:6f:1a:19:a3:5d:c2:eb:87:96:1a:03:
8e:17:5c:99:64:82:b0:e9:ed:3c:d8:cb:54:6c:e9:
30:d5:61:44:76:54:76:de:5b:a4:b1:99:67:9c:20:
23:7c:bf:a7:58:9a:f5:13:62:f7:21:bd:a7:3a:88:
69:af:3c:6e:f3:96:90:c9:d5:51:0a:2f:e6:a5:18:
7e:e8:7c:db:39:06:81:3b:5c:cc:36:32:24:87:ae:
c5:f3:c2:4a:86:2f:a4:e1:1b:a4:4e:b6:86:2b:60:
c7:32:81:21:dd:09:41:67:28:8f:da:36:95:d2:d6:
49:5d:01:05:cd:64:48:89:bd:f3:8c:fa:72:fd:a7:
df:3a:74:af:eb:fd:13:a6:af:7d:a8:43:95:ef:6c:
24:07:1b:18:41:ca:b8:41:2e:1c:64:db:81:eb:9f:
ab:15:8d:19:e2:bf:ed:34:78:31:64:a9:9e:73:aa:
b7:f7:7e:b2:cb:3a:3b:d5:88:db:bb:22:a6:aa:f6:
4d:1e:bc:42:46:16:9e:70:9b:ac:d2:fa:b8:15:bd:
35:49:20:f3:10:34:42:af:c4:93:65:ec:93:43:a7:
98:20:25:2a:05:2c:6e:4f:b1:d0:0a:07:b3:d4:6b:
f6:5e:b6:e3:53:20:1d:71:c5:bb:9e:99:ce:14:a5:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:95:70:DA:6D:47:F3:53:C1:9B:46:81:90:A3:B6:7F:C5:A3:42
X509v3 Authority Key Identifier:
keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/A369E93897C211EDAA7C8250C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.14.96.0/19
103.28.196.0/22
202.148.224.0/20
203.19.157.0/24
210.18.192.0/18
IPv6:
2403:c800::/32
Signature Algorithm: sha256WithRSAEncryption
60:58:07:9e:64:d4:62:aa:e8:2d:95:ea:62:c8:a4:1f:64:ca:
da:ee:47:8c:1c:39:53:67:85:f6:32:0e:1c:5c:61:cf:74:84:
11:29:b6:b3:75:2e:b7:75:95:4f:42:00:af:9d:b1:e9:62:48:
0d:22:d8:0c:24:c4:1e:46:4e:fd:9d:e0:40:1b:e4:15:e6:56:
f3:57:3b:ea:32:a2:0c:64:2a:04:24:7f:4c:58:d7:fb:e8:e5:
f4:a4:3e:03:d0:9b:2d:f1:43:a8:81:cd:3c:8f:50:0a:f7:28:
e8:3e:56:aa:5d:23:2a:8e:11:5b:1c:33:8e:d9:91:fb:dc:a8:
b2:bf:bb:28:ae:c2:c8:e0:fd:37:22:41:5c:1f:36:b7:13:ec:
10:ef:1b:45:8c:56:d9:96:76:e2:14:1c:37:f3:3c:20:4a:cc:
ae:09:55:69:6c:4e:bf:1e:15:c1:d3:d3:89:f0:bc:85:a2:87:
c0:3f:60:b5:ef:13:43:96:5d:95:68:8a:45:51:b0:1b:a4:eb:
f0:10:8e:73:c1:b5:6b:59:05:53:77:db:3c:c9:d3:61:ee:60:
f4:3f:09:d0:4f:87:30:ae:3c:3c:2e:ed:7d:9d:35:0f:a9:ab:
98:0c:ba:4c:62:5f:0b:8e:d0:96:96:1e:f4:03:68:d5:5c:fa:
4f:dd:99:16
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1
NTE3OTc5QUYwHhcNMjMwNjA2MDE0NTI0WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdlOGZiNC00MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7wmhbxoZo13C64eWGgOOF1yZZIKw6e082MtUbOkw1WFEdlR23luksZlnnCAj
fL+nWJr1E2L3Ib2nOohprzxu85aQydVRCi/mpRh+6HzbOQaBO1zMNjIkh67F88JK
hi+k4RukTraGK2DHMoEh3QlBZyiP2jaV0tZJXQEFzWRIib3zjPpy/affOnSv6/0T
pq99qEOV72wkBxsYQcq4QS4cZNuB65+rFY0Z4r/tNHgxZKmec6q3936yyzo71Yjb
uyKmqvZNHrxCRhaecJus0vq4Fb01SSDzEDRCr8STZeyTQ6eYICUqBSxuT7HQCgez
1Gv2XrbjUyAdccW7npnOFKX4EwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFI+JlXDa
bUfzU8GbRoGQo7Z/xaNCMB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw
N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M2MjcvQzI2NUMxQTREMDdEMTFFQTg2MDA5ODZEQzRGOUFFMDIvQTM2OUU5Mzg5
N0MyMTFFREFBN0M4MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAU9DmADBAJnHMQDBATKlOADBADLE50DBAbSEsAwDQQCAAIw
BwMFACQDyAAwDQYJKoZIhvcNAQELBQADggEBAGBYB55k1GKq6C2V6mLIpB9kytru
R4wcOVNnhfYyDhxcYc90hBEptrN1Lrd1lU9CAK+dseliSA0i2AwkxB5GTv2d4EAb
5BXmVvNXO+oyogxkKgQkf0xY1/vo5fSkPgPQmy3xQ6iBzTyPUAr3KOg+VqpdIyqO
EVscM47ZkfvcqLK/uyiuwsjg/TciQVwfNrcT7BDvG0WMVtmWduIUHDfzPCBKzK4J
VWlsTr8eFcHT04nwvIWih8A/YLXvE0OWXZVoikVRsBuk6/AQjnPBtWtZBVN32zzJ
02HuYPQ/CdBPhzCuPDwu7X2dNQ+pq5gMukxiXwuO0JaWHvQDaNVc+k/dmRY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org