Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/14E3A9AE89F511ED98B53351C4F9AE02.roa
File: 14E3A9AE89F511ED98B53351C4F9AE02.roa (raw, json)
Hash identifier: CyoH6AkhqAySctF3//wey863JB48viQlW4jmjwYqsS4=
Subject key identifier: 06:BF:00:9A:A8:BB:CF:D6:A2:B9:1A:15:C4:B7:02:9F:E6:7C:AF:EF
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0DFC
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/14E3A9AE89F511ED98B53351C4F9AE02.roa
Signing time: Fri 11 Aug 2023 17:15:54 +0000
ROA not before: Fri 11 Aug 2023 17:15:54 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 138575
IP address blocks: 103.133.140.0/22 maxlen: 22
103.133.140.0/23 maxlen: 23
103.133.140.0/24 maxlen: 24
103.133.141.0/24 maxlen: 24
103.133.142.0/23 maxlen: 23
103.133.142.0/24 maxlen: 24
103.133.143.0/24 maxlen: 24
2404:4d40::/32 maxlen: 32
2404:4d40:1000::/36 maxlen: 36
2404:4d40:1000::/40 maxlen: 40
2404:4d40:1001::/48 maxlen: 48
2404:4d40:1002::/48 maxlen: 48
2404:4d40:1003::/48 maxlen: 48
2404:4d40:1004::/48 maxlen: 48
2404:4d40:1005::/48 maxlen: 48
2404:4d40:1006::/48 maxlen: 48
2404:4d40:1007::/48 maxlen: 48
2404:4d40:1008::/48 maxlen: 48
2404:4d40:1009::/48 maxlen: 48
2404:4d40:100a::/48 maxlen: 48
2404:4d40:100b::/48 maxlen: 48
2404:4d40:100c::/48 maxlen: 48
2404:4d40:100d::/48 maxlen: 48
2404:4d40:100e::/48 maxlen: 48
2404:4d40:100f::/48 maxlen: 48
2404:4d40:1010::/48 maxlen: 48
2404:4d40:1011::/48 maxlen: 48
2404:4d40:1012::/48 maxlen: 48
2404:4d40:1013::/48 maxlen: 48
2404:4d40:1014::/48 maxlen: 48
2404:4d40:1015::/48 maxlen: 48
2404:4d40:1016::/48 maxlen: 48
2404:4d40:1017::/48 maxlen: 48
2404:4d40:1018::/48 maxlen: 48
2404:4d40:1019::/48 maxlen: 48
2404:4d40:101a::/48 maxlen: 48
2404:4d40:101b::/48 maxlen: 48
2404:4d40:101c::/48 maxlen: 48
2404:4d40:101d::/48 maxlen: 48
2404:4d40:101e::/48 maxlen: 48
2404:4d40:101f::/48 maxlen: 48
2404:4d40:1020::/48 maxlen: 48
2404:4d40:1021::/48 maxlen: 48
2404:4d40:1022::/48 maxlen: 48
2404:4d40:1100::/40 maxlen: 40
2404:4d40:1200::/40 maxlen: 40
2404:4d40:1300::/40 maxlen: 40
2404:4d40:1400::/40 maxlen: 40
2404:4d40:1500::/40 maxlen: 40
2404:4d40:1600::/40 maxlen: 40
2404:4d40:1700::/40 maxlen: 40
2404:4d40:1800::/40 maxlen: 40
2404:4d40:1900::/40 maxlen: 40
2404:4d40:1a00::/40 maxlen: 40
2404:4d40:1b00::/40 maxlen: 40
2404:4d40:1c00::/40 maxlen: 40
2404:4d40:1d00::/40 maxlen: 40
2404:4d40:1e00::/40 maxlen: 40
2404:4d40:1f00::/40 maxlen: 40
2404:4d40:2000::/36 maxlen: 36
2404:4d40:2000::/40 maxlen: 40
2404:4d40:2100::/40 maxlen: 40
2404:4d40:2200::/40 maxlen: 40
2404:4d40:2300::/40 maxlen: 40
2404:4d40:2400::/40 maxlen: 40
2404:4d40:2500::/40 maxlen: 40
2404:4d40:2600::/40 maxlen: 40
2404:4d40:2700::/40 maxlen: 40
2404:4d40:2800::/40 maxlen: 40
2404:4d40:2900::/40 maxlen: 40
2404:4d40:2a00::/40 maxlen: 40
2404:4d40:2b00::/40 maxlen: 40
2404:4d40:2c00::/40 maxlen: 40
2404:4d40:2d00::/40 maxlen: 40
2404:4d40:2e00::/40 maxlen: 40
2404:4d40:2f00::/40 maxlen: 40
2404:4d40:3000::/36 maxlen: 36
2404:4d40:4000::/36 maxlen: 36
2404:4d40:4000::/40 maxlen: 40
2404:4d40:5000::/36 maxlen: 36
2404:4d40:6000::/36 maxlen: 36
2404:4d40:7000::/36 maxlen: 36
2404:4d40:8000::/36 maxlen: 36
2404:4d40:9000::/36 maxlen: 36
2404:4d40:a000::/36 maxlen: 36
2404:4d40:b000::/36 maxlen: 36
2404:4d40:c000::/36 maxlen: 36
2404:4d40:d000::/36 maxlen: 36
2404:4d40:e000::/36 maxlen: 36
2404:4d40:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Aug 11 17:15:54 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64d66cc9-d370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:7d:00:e9:0b:9a:a9:40:16:fb:63:1c:6a:
ae:e5:13:c0:33:33:72:2c:f7:be:10:19:43:50:36:
c5:fc:82:7f:f3:39:c4:6b:39:e0:31:11:42:7d:9d:
9a:6a:2a:25:fc:a8:ea:a4:40:87:1c:2b:a9:cb:76:
8e:ad:cd:b8:a4:e1:da:13:0b:73:32:e2:14:4c:3e:
0a:5c:fd:84:63:0a:81:43:8d:c5:17:e6:2b:25:3b:
24:1e:5c:28:6b:01:ef:93:de:75:5b:ec:00:b8:e7:
37:5a:1d:b3:b1:15:04:05:b0:cf:03:bc:56:88:14:
8e:e6:62:a0:b6:16:d3:f4:72:40:af:6b:4b:7b:57:
a8:b4:82:71:6a:94:82:49:ad:ce:23:a4:f3:d7:ad:
81:88:25:2b:42:99:82:42:8b:19:23:b4:cd:44:a6:
17:66:1c:5b:ad:78:31:bc:7a:62:bf:59:74:24:70:
c4:23:96:16:8f:49:4b:ba:f4:72:d7:62:89:e3:f0:
9d:0a:f8:08:6a:f7:4e:28:7d:12:f2:77:31:ba:fa:
ab:ba:82:d0:f9:e8:27:f4:6c:43:04:3b:56:51:cd:
14:c1:26:79:79:b5:d6:a2:4f:2a:39:db:26:20:4c:
71:f6:22:88:9f:0c:be:0b:4f:49:5a:9d:39:f4:66:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:00:9A:A8:BB:CF:D6:A2:B9:1A:15:C4:B7:02:9F:E6:7C:AF:EF
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/14E3A9AE89F511ED98B53351C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:5c:31:e9:e9:7d:87:1d:90:93:6b:9c:d7:66:23:d9:97:76:
95:de:9d:9f:9f:e2:f4:b0:69:12:26:55:14:27:e0:41:4e:dd:
a7:8c:28:b1:2e:44:9d:c2:18:10:27:ce:11:5a:65:f6:ab:f9:
b0:f7:22:1f:29:d2:7c:8f:ee:e6:38:24:d4:b2:e5:06:94:8f:
47:db:47:8a:ed:65:41:1f:68:19:45:e3:09:c3:b2:e5:14:59:
6d:f3:c8:30:2e:fa:c2:33:dd:50:a4:40:00:4e:07:da:29:a4:
88:01:ea:ee:18:3d:de:d5:8b:73:6d:bf:49:0e:bb:e9:dd:07:
90:e7:19:05:7e:40:76:2b:7f:05:7f:12:1a:8f:f1:30:c5:e9:
75:bf:55:24:df:5b:dc:81:0f:a0:01:88:1d:f7:e8:00:5d:60:
b6:a4:04:4e:0a:c5:b4:b9:d2:5b:57:e2:a6:91:dc:f7:13:d8:
04:19:0c:be:b1:71:06:f0:e8:09:a3:c4:a1:23:4e:1b:6a:dc:
ba:18:f2:d9:53:02:f2:a7:ba:d7:a1:ad:eb:68:bb:1d:7d:11:
41:db:56:6c:42:3f:93:c1:09:2e:58:b4:93:e0:42:45:f5:79:
cd:1b:08:cf:a5:9f:64:39:22:95:ea:aa:8a:cd:61:b3:d8:4b:
c0:09:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org