Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/199BE73AD4B711EB9E81DE2BC4F9AE02.roa
File: 199BE73AD4B711EB9E81DE2BC4F9AE02.roa (raw, json)
Hash identifier: FJfwLKh2BI6F7ANUnMRo5IJGTnTt0jFEQxJBFs4B0ts=
Subject key identifier: 41:79:25:AD:EB:0D:E9:25:59:CD:97:3B:3D:E3:21:79:B2:2B:B1:1B
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3189
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/199BE73AD4B711EB9E81DE2BC4F9AE02.roa
Signing time: Tue 03 May 2022 03:00:35 +0000
ROA not before: Tue 03 May 2022 03:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7604
IP address blocks: 103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 22
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 23
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.164.0/24 maxlen: 24
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12681 (0x3189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: May 3 03:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62709ad2-5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:7c:04:ea:51:a2:97:e6:9f:43:fc:0a:80:
87:ff:35:19:60:60:f5:c7:d8:ef:96:4a:9b:f7:fd:
8d:d0:64:db:18:02:c9:88:77:77:41:17:38:8f:38:
fa:0e:87:a9:2d:76:0e:75:97:2a:9d:ab:13:2b:7b:
e2:d3:98:f1:12:48:66:5e:4e:c4:c3:88:4b:ef:c2:
34:ca:49:bd:1c:89:71:0d:c6:e1:20:35:b8:c3:80:
67:29:df:7d:fe:da:33:0c:ef:37:e1:85:05:fb:20:
3f:a9:4f:e9:37:9c:33:f6:17:e7:93:9e:00:44:5e:
be:d1:55:bc:2a:33:96:d2:f1:1c:ea:af:f4:b5:18:
db:b8:8c:7c:50:e1:a7:73:21:e3:10:56:43:87:79:
31:33:f5:e8:9a:14:72:30:a1:5c:3b:eb:98:9e:43:
3e:58:cb:b4:69:33:f6:bc:a0:d0:ac:43:6f:13:be:
c5:6a:7a:03:90:ad:ea:86:c2:3b:aa:fd:87:78:36:
dd:ca:63:e9:fa:ff:3b:12:59:14:65:4c:8a:56:7b:
20:d4:3f:0c:b1:7e:1d:24:88:bc:1c:3d:25:1b:f9:
59:f7:64:0c:e2:85:8c:03:c4:74:e8:6f:8e:7b:73:
31:d9:d5:2d:44:92:92:55:79:31:eb:bd:11:5a:d6:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:25:AD:EB:0D:E9:25:59:CD:97:3B:3D:E3:21:79:B2:2B:B1:1B
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/199BE73AD4B711EB9E81DE2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
75:12:1b:7e:4f:8c:b6:24:a0:e7:82:e8:dd:34:e1:05:e3:a1:
8b:38:37:b2:d5:01:43:d7:91:80:90:8f:f2:b1:4f:03:2a:b1:
0f:3d:27:30:48:3f:b7:7c:e3:77:38:1a:08:e9:f0:91:1f:d1:
e3:26:58:05:5f:71:b8:18:17:ce:b9:29:c9:02:42:5f:55:6c:
6f:28:64:70:4a:eb:79:1b:33:f1:5a:aa:ba:8d:b3:7f:e1:a1:
1b:0b:4b:08:94:81:3b:c7:9e:d7:d4:c1:cb:f3:0f:69:fc:1f:
01:f4:77:84:39:71:5b:6a:37:e8:76:2f:02:09:f0:65:f8:76:
4a:a4:5d:b0:98:e3:78:c4:79:0e:f1:c2:22:39:0a:e8:a1:c2:
d3:9b:b3:10:e2:ba:18:91:ff:38:6e:57:f0:6c:ab:3b:d8:d4:
09:b0:c1:ce:17:98:d3:1b:24:28:f1:37:5e:af:7e:9a:3f:f3:
40:35:6a:53:f6:1d:f1:82:f3:35:8c:c1:e7:af:ee:18:e8:10:
f7:7c:6f:65:4a:93:3d:34:2f:dc:ea:d8:5b:76:ef:5c:73:95:
25:3f:d0:5c:5e:5c:e3:90:a4:71:bf:86:3b:0d:e1:32:66:ee:
73:a3:3a:2a:3f:a6:0a:f1:b3:0a:00:c3:8e:a4:8c:c8:a9:0d:
d8:4d:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org