Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/5F3DBC40955111EC98F81677C4F9AE02.roa
File: 5F3DBC40955111EC98F81677C4F9AE02.roa (raw, json)
Hash identifier: RA0YlAPOtMiqonSmGGh0WI1Zi7TvbAM0Yn5yjmXO5qQ=
Subject key identifier: 84:74:E3:F5:D7:AF:1F:29:E5:19:18:49:9B:21:8C:90:3B:6C:45:DA
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 069A
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/5F3DBC40955111EC98F81677C4F9AE02.roa
Signing time: Thu 24 Feb 2022 09:08:46 +0000
ROA not before: Thu 24 Feb 2022 09:08:46 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 141768
IP address blocks: 39.109.66.0/23 maxlen: 23
39.109.66.0/24 maxlen: 24
39.109.67.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/21 maxlen: 21
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.76.0/24 maxlen: 24
39.109.77.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/21 maxlen: 21
39.109.80.0/24 maxlen: 24
39.109.81.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.83.0/24 maxlen: 24
39.109.84.0/24 maxlen: 24
39.109.85.0/24 maxlen: 24
39.109.86.0/24 maxlen: 24
39.109.87.0/24 maxlen: 24
39.109.88.0/22 maxlen: 22
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
39.109.90.0/24 maxlen: 24
39.109.91.0/24 maxlen: 24
2403:e840:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Feb 24 09:08:46 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62174b1e-8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:81:c5:a7:2c:49:7f:b3:7a:6e:b7:39:67:
78:e8:7d:d4:28:c8:c6:cb:3e:6e:51:74:c4:41:f4:
c1:e8:ea:e6:2f:8d:4a:b3:ba:31:c7:ea:22:8a:45:
9c:f8:d6:1a:a0:7b:56:55:fb:64:e0:98:be:c6:59:
d2:27:5a:7b:a2:75:0b:53:aa:7c:00:15:d9:32:e3:
1f:06:b1:6a:50:68:0a:05:18:22:44:b1:31:4c:0e:
56:20:f2:3e:51:4f:56:53:1f:9e:1a:09:03:5d:84:
ae:48:43:02:53:c7:fe:a6:f8:69:c3:d5:94:7a:90:
31:73:7f:09:a4:e1:2f:59:1d:a9:29:da:86:bf:26:
e9:ac:75:d0:e7:30:f7:ac:d1:61:68:a5:bd:c7:1c:
cb:4b:9f:00:8e:1b:84:8a:c1:7c:ae:a3:ba:a7:d9:
d1:20:f2:16:b4:b1:f0:93:75:74:2c:ef:f3:da:f7:
71:c1:e4:f5:68:bb:13:e7:42:49:4e:d0:34:5d:0e:
f3:83:f2:67:f8:0e:95:a5:a2:10:d1:79:92:88:5a:
6c:c8:ba:79:df:c7:d1:4f:2d:ab:56:b5:04:34:23:
a8:81:68:09:60:fe:47:43:b3:88:bf:f4:95:c0:27:
1a:2a:29:39:b8:3e:86:aa:11:b0:8d:66:a0:1f:1d:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:E3:F5:D7:AF:1F:29:E5:19:18:49:9B:21:8C:90:3B:6C:45:DA
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/5F3DBC40955111EC98F81677C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0/23
39.109.70.0-39.109.91.255
IPv6:
2403:e840:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7f:a6:77:84:76:95:7c:9c:d9:02:3b:3f:f4:b2:1a:41:39:21:
dc:de:df:06:7c:dc:14:91:49:18:df:8f:bf:3d:ea:92:a6:57:
fd:be:d4:94:cc:4f:89:56:7b:d1:63:ff:9f:0c:d8:bc:93:91:
ba:0f:f7:ee:0e:d5:ea:03:c5:19:f3:ca:f6:dc:ad:2a:e1:94:
21:f7:ed:d6:a4:98:62:43:c4:8c:2c:46:cc:36:61:32:72:19:
ec:49:80:a2:e8:b9:6b:25:a5:4a:f9:2d:ed:71:db:70:fc:9e:
0d:9e:bc:59:e6:5c:cd:f0:35:0a:ef:44:26:96:70:cf:c8:d2:
8c:48:53:05:ad:f9:06:52:e1:ca:92:3f:c8:bc:38:eb:40:7e:
be:76:95:88:ac:ea:08:03:61:5f:5a:d2:14:61:94:91:7d:f0:
a4:3c:c9:29:48:a0:d1:98:79:f3:9d:19:b8:c2:d7:b3:29:d3:
b6:18:55:23:4a:3b:d4:09:a2:a7:f3:da:dc:4a:71:68:52:e7:
a5:29:74:97:25:b0:1b:70:a6:3f:c9:70:a8:6e:56:39:ad:2e:
9e:d5:63:5e:c5:02:10:5e:fc:ed:1f:66:1a:38:3a:d0:61:77:
98:61:1b:80:42:a5:35:72:6e:73:3b:62:8e:9a:cd:0d:10:c8:
27:fb:6f:4c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjIwMjI0MDkwODQ2WhcNMjIxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjE3NGIxZS04Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvImBxacsSX+zem63OWd46H3UKMjGyz5uUXTEQfTB6OrmL41Ks7oxx+oiikWc
+NYaoHtWVftk4Ji+xlnSJ1p7onULU6p8ABXZMuMfBrFqUGgKBRgiRLExTA5WIPI+
UU9WUx+eGgkDXYSuSEMCU8f+pvhpw9WUepAxc38JpOEvWR2pKdqGvybprHXQ5zD3
rNFhaKW9xxzLS58AjhuEisF8rqO6p9nRIPIWtLHwk3V0LO/z2vdxweT1aLsT50JJ
TtA0XQ7zg/Jn+A6VpaIQ0XmSiFpsyLp538fRTy2rVrUENCOogWgJYP5HQ7OIv/SV
wCcaKik5uD6GqhGwjWagHx1ULwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIR04/XX
rx8p5RkYSZshjJA7bEXaMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvNUYzREJDNDA5
NTUxMTFFQzk4RjgxNjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMBoEAgABMBQDBAEnbUIwDAMEASdtRgMEAidtWDAOBAIAAjAIAwYHJAPoQIAw
DQYJKoZIhvcNAQELBQADggEBAH+md4R2lXyc2QI7P/SyGkE5Idze3wZ83BSRSRjf
j7896pKmV/2+1JTMT4lWe9Fj/58M2LyTkboP9+4O1eoDxRnzyvbcrSrhlCH37dak
mGJDxIwsRsw2YTJyGexJgKLouWslpUr5Le1x23D8ng2evFnmXM3wNQrvRCaWcM/I
0oxIUwWt+QZS4cqSP8i8OOtAfr52lYis6ggDYV9a0hRhlJF98KQ8ySlIoNGYefOd
GbjC17Mp07YYVSNKO9QJoqfz2txKcWhS56UpdJclsBtwpj/JcKhuVjmtLp7VY17F
AhBe/O0fZho4OtBhd5hhG4BCpTVybnM7Yo6azQ0QyCf7b0w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org