Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/28C9BF84892911EDB5CA2246C4F9AE02.roa
File: 28C9BF84892911EDB5CA2246C4F9AE02.roa (raw, json)
Hash identifier: 8YyT/AvBv7hQvYOuuhxx1DGOA8ul9eHzNTnhpmALofo=
Subject key identifier: DB:39:80:E9:92:27:F2:72:7C:7C:00:F1:C9:30:07:A0:E0:FA:98:09
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0D7D
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/28C9BF84892911EDB5CA2246C4F9AE02.roa
Signing time: Sat 31 Dec 2022 16:35:39 +0000
ROA not before: Sat 31 Dec 2022 16:35:39 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 138575
IP address blocks: 103.133.140.0/22 maxlen: 22
103.133.142.0/23 maxlen: 23
103.133.142.0/24 maxlen: 24
103.133.143.0/24 maxlen: 24
2404:4d40::/32 maxlen: 32
2404:4d40:1000::/36 maxlen: 36
2404:4d40:1000::/40 maxlen: 40
2404:4d40:1001::/48 maxlen: 48
2404:4d40:1002::/48 maxlen: 48
2404:4d40:1003::/48 maxlen: 48
2404:4d40:1004::/48 maxlen: 48
2404:4d40:1005::/48 maxlen: 48
2404:4d40:1006::/48 maxlen: 48
2404:4d40:1007::/48 maxlen: 48
2404:4d40:1008::/48 maxlen: 48
2404:4d40:1009::/48 maxlen: 48
2404:4d40:100a::/48 maxlen: 48
2404:4d40:100b::/48 maxlen: 48
2404:4d40:100c::/48 maxlen: 48
2404:4d40:100d::/48 maxlen: 48
2404:4d40:100e::/48 maxlen: 48
2404:4d40:100f::/48 maxlen: 48
2404:4d40:1010::/48 maxlen: 48
2404:4d40:1011::/48 maxlen: 48
2404:4d40:1012::/48 maxlen: 48
2404:4d40:1013::/48 maxlen: 48
2404:4d40:1014::/48 maxlen: 48
2404:4d40:1015::/48 maxlen: 48
2404:4d40:1016::/48 maxlen: 48
2404:4d40:1017::/48 maxlen: 48
2404:4d40:1018::/48 maxlen: 48
2404:4d40:1019::/48 maxlen: 48
2404:4d40:101a::/48 maxlen: 48
2404:4d40:101b::/48 maxlen: 48
2404:4d40:101c::/48 maxlen: 48
2404:4d40:101d::/48 maxlen: 48
2404:4d40:101e::/48 maxlen: 48
2404:4d40:101f::/48 maxlen: 48
2404:4d40:1020::/48 maxlen: 48
2404:4d40:1021::/48 maxlen: 48
2404:4d40:1022::/48 maxlen: 48
2404:4d40:1100::/40 maxlen: 40
2404:4d40:1200::/40 maxlen: 40
2404:4d40:1300::/40 maxlen: 40
2404:4d40:1400::/40 maxlen: 40
2404:4d40:1500::/40 maxlen: 40
2404:4d40:1600::/40 maxlen: 40
2404:4d40:1700::/40 maxlen: 40
2404:4d40:1800::/40 maxlen: 40
2404:4d40:1900::/40 maxlen: 40
2404:4d40:1a00::/40 maxlen: 40
2404:4d40:1b00::/40 maxlen: 40
2404:4d40:1c00::/40 maxlen: 40
2404:4d40:1d00::/40 maxlen: 40
2404:4d40:1e00::/40 maxlen: 40
2404:4d40:1f00::/40 maxlen: 40
2404:4d40:2000::/36 maxlen: 36
2404:4d40:2000::/40 maxlen: 40
2404:4d40:2100::/40 maxlen: 40
2404:4d40:2200::/40 maxlen: 40
2404:4d40:2300::/40 maxlen: 40
2404:4d40:2400::/40 maxlen: 40
2404:4d40:2500::/40 maxlen: 40
2404:4d40:2600::/40 maxlen: 40
2404:4d40:2700::/40 maxlen: 40
2404:4d40:2800::/40 maxlen: 40
2404:4d40:2900::/40 maxlen: 40
2404:4d40:2a00::/40 maxlen: 40
2404:4d40:2b00::/40 maxlen: 40
2404:4d40:2c00::/40 maxlen: 40
2404:4d40:2d00::/40 maxlen: 40
2404:4d40:2e00::/40 maxlen: 40
2404:4d40:2f00::/40 maxlen: 40
2404:4d40:3000::/36 maxlen: 36
2404:4d40:4000::/36 maxlen: 36
2404:4d40:4000::/40 maxlen: 40
2404:4d40:5000::/36 maxlen: 36
2404:4d40:6000::/36 maxlen: 36
2404:4d40:7000::/36 maxlen: 36
2404:4d40:8000::/36 maxlen: 36
2404:4d40:9000::/36 maxlen: 36
2404:4d40:a000::/36 maxlen: 36
2404:4d40:b000::/36 maxlen: 36
2404:4d40:c000::/36 maxlen: 36
2404:4d40:d000::/36 maxlen: 36
2404:4d40:e000::/36 maxlen: 36
2404:4d40:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3453 (0xd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Dec 31 16:35:39 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=63b064db-3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:03:fe:3d:89:46:e5:08:51:71:9c:1a:b7:
2e:02:d5:bb:f0:78:bd:aa:28:0c:07:1b:26:58:57:
81:49:e7:c7:77:57:df:9a:d5:7d:9a:ac:8b:f0:a3:
e0:55:aa:08:ac:1d:90:59:c4:33:0c:bb:24:3c:ca:
b4:a5:5d:d8:50:e6:e7:d0:e0:c0:50:07:0f:8d:49:
13:f5:db:fb:44:a8:ce:95:06:59:69:27:19:0e:44:
55:05:9b:35:eb:65:2a:04:92:d1:35:b5:77:7f:01:
23:f0:ee:91:dd:35:90:a1:9d:4c:c7:71:cf:30:6e:
a1:c3:9d:a5:3a:d0:c8:74:00:6d:af:bb:6c:81:23:
26:70:0a:5c:ac:f6:e9:54:1c:62:d9:06:8a:55:08:
9f:24:f2:17:39:2c:76:93:36:92:07:7f:3f:18:93:
86:49:16:1d:10:3c:3e:95:78:f6:0b:de:a7:9a:da:
b1:3c:7b:12:cf:f9:f2:4c:ec:a4:12:04:62:a2:e3:
f0:63:d0:37:5c:a3:a8:65:ad:2f:56:5c:c6:b0:01:
03:22:41:d1:4b:25:43:d2:6e:e2:2e:44:c4:af:b5:
44:cb:ea:42:4f:d4:0e:5f:cf:4a:9e:a6:be:bf:11:
ce:26:e8:54:9c:e6:37:87:18:9f:1e:aa:79:15:74:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:80:E9:92:27:F2:72:7C:7C:00:F1:C9:30:07:A0:E0:FA:98:09
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/28C9BF84892911EDB5CA2246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:47:e5:99:95:f0:1d:93:11:aa:85:4e:4b:2d:51:68:84:f8:
af:1a:a4:7f:05:24:f4:cf:1e:f5:39:85:e3:5e:3a:3e:a3:f6:
0b:00:1c:c2:05:c6:fb:4b:dd:5c:98:42:78:1d:db:d8:80:78:
c6:e5:ef:88:7a:ba:b8:38:4b:79:21:1b:2f:d7:96:ac:40:22:
5e:ec:b2:30:3d:a4:24:cd:4a:00:f4:ba:93:9d:eb:1a:ff:32:
51:54:2a:48:99:9b:fc:f2:56:0b:ab:1b:39:17:1b:1a:56:38:
9f:9b:08:5d:33:69:73:1a:d9:27:f6:13:0c:86:d8:f0:19:9f:
e3:95:27:73:4d:94:f6:1d:87:e7:55:07:34:c9:5e:ce:2f:5c:
60:82:87:a9:ee:0e:8b:6a:9b:6c:20:d4:1b:09:bd:46:ae:dc:
1a:2c:5c:ae:de:6b:a2:83:8b:0f:25:a7:0c:71:a8:72:50:46:
7d:39:a9:75:c7:ba:b0:6b:3f:5f:e7:a6:d6:5e:2f:4a:95:4e:
7a:a5:0a:c0:8a:db:98:a0:99:e1:b1:2e:3c:d1:a3:3e:ff:32:
38:1d:f4:ac:18:e8:a2:bb:ef:48:39:32:d4:d9:57:1d:00:91:
a9:89:86:bd:e5:39:3b:ed:88:d9:7d:b1:a9:7c:1b:ce:81:b7:
0e:5b:5b:62
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND
MUNDMUY1QTIwHhcNMjIxMjMxMTYzNTM5WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2IwNjRkYi0zOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0tsD/j2JRuUIUXGcGrcuAtW78Hi9qigMBxsmWFeBSefHd1ffmtV9mqyL8KPg
VaoIrB2QWcQzDLskPMq0pV3YUObn0ODAUAcPjUkT9dv7RKjOlQZZaScZDkRVBZs1
62UqBJLRNbV3fwEj8O6R3TWQoZ1Mx3HPMG6hw52lOtDIdABtr7tsgSMmcApcrPbp
VBxi2QaKVQifJPIXOSx2kzaSB38/GJOGSRYdEDw+lXj2C96nmtqxPHsSz/nyTOyk
EgRiouPwY9A3XKOoZa0vVlzGsAEDIkHRSyVD0m7iLkTEr7VEy+pCT9QOX89Knqa+
vxHOJuhUnOY3hxifHqp5FXSInwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNs5gOmS
J/JyfHwA8ckwB6Dg+pgJMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw
Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTlEMEYvNzRCRTM4RDY4MENGMTFFOUFDRDcxQjUwQzRGOUFFMDIvMjhDOUJGODQ4
OTI5MTFFREI1Q0EyMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnhYwwDQQCAAIwBwMFACQETUAwDQYJKoZIhvcNAQELBQAD
ggEBAC5H5ZmV8B2TEaqFTkstUWiE+K8apH8FJPTPHvU5heNeOj6j9gsAHMIFxvtL
3VyYQngd29iAeMbl74h6urg4S3khGy/XlqxAIl7ssjA9pCTNSgD0upOd6xr/MlFU
KkiZm/zyVgurGzkXGxpWOJ+bCF0zaXMa2Sf2EwyG2PAZn+OVJ3NNlPYdh+dVBzTJ
Xs4vXGCCh6nuDotqm2wg1BsJvUau3BosXK7ea6KDiw8lpwxxqHJQRn05qXXHurBr
P1/nptZeL0qVTnqlCsCK25igmeGxLjzRoz7/Mjgd9KwY6KK770g5MtTZVx0AkamJ
hr3lOTvtiNl9sal8G86Btw5bW2I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org