Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/370D5B96302D11EDBA24227FC4F9AE02.roa
File: 370D5B96302D11EDBA24227FC4F9AE02.roa (raw, json)
Hash identifier: c7rXgEl1l5EGX85IW5575aPsivWEb4rrTxBf0ke8q9E=
Subject key identifier: 87:27:58:A6:41:42:00:DB:6A:D0:EE:37:19:05:6A:0D:20:29:C3:12
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 33EF
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/370D5B96302D11EDBA24227FC4F9AE02.roa
Signing time: Tue 10 Oct 2023 16:19:48 +0000
ROA not before: Tue 10 Oct 2023 16:19:48 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.96.0/23 maxlen: 23
116.90.98.0/24 maxlen: 24
116.90.99.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.117.0/24 maxlen: 24
116.90.119.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
121.46.67.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.155.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13295 (0x33ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Oct 10 16:19:48 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=652579a4-eb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:9e:f1:ea:3e:6b:2e:64:f3:f5:2a:8b:cc:
69:50:fe:26:99:14:c7:22:f4:54:66:9d:76:dc:a6:
16:76:6b:83:ff:c4:92:4d:d0:c5:7c:f1:12:cd:c2:
93:52:5d:5b:ad:65:39:43:a5:2d:8e:8e:70:c9:bf:
61:bb:c1:11:9c:98:63:9f:dc:21:eb:83:a0:47:cc:
7f:73:2c:fa:58:1e:d0:5f:d8:0b:47:38:90:7a:84:
9f:08:a9:7a:41:42:17:fc:61:dd:ca:40:7a:d2:86:
bd:34:a8:1b:89:84:4b:26:c5:b5:b4:ac:53:b7:45:
bc:a7:48:ca:0f:76:0a:5d:9a:78:8a:1a:8c:25:71:
9d:f9:62:48:4a:c4:6d:8f:93:22:a0:f5:67:51:ba:
cb:bf:eb:a4:7c:37:03:46:f9:01:dd:18:80:41:84:
fb:9c:83:ed:3f:57:67:97:a9:f6:8f:cc:5e:39:3d:
14:f6:6f:d1:c8:d6:85:a2:92:1c:c4:0f:89:b7:1f:
e2:0f:0d:b8:0e:a6:46:ae:7f:37:41:b0:ac:3a:07:
93:1a:46:9f:a1:ad:86:5a:67:88:c8:6a:fb:a8:6b:
35:f5:62:ab:cd:b4:e3:4d:7d:4e:c7:a7:95:db:30:
9e:d5:1b:98:5c:5c:25:d2:e4:98:09:b6:1f:1e:64:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:58:A6:41:42:00:DB:6A:D0:EE:37:19:05:6A:0D:20:29:C3:12
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/370D5B96302D11EDBA24227FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.96.0/22
116.90.106.0-116.90.111.255
116.90.117.0/24
116.90.119.0-116.90.120.255
116.90.123.0-116.90.127.255
121.46.64.0/24
121.46.66.0/23
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0/21
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
30:6f:af:18:71:4e:5a:52:11:11:1e:44:4e:85:aa:1d:b7:93:
ad:5e:42:30:33:71:a4:e5:79:2e:77:4b:a7:0f:b4:2b:4f:97:
9c:d3:f6:47:5b:28:9a:ab:3c:b6:22:5f:9e:bd:0f:c0:58:b5:
b9:cc:5b:9a:34:7a:a0:9b:7f:36:d3:4b:ee:33:31:c3:16:0b:
cd:0e:a7:b2:93:42:00:4d:54:c3:62:3d:f9:98:c2:82:77:76:
85:55:15:01:bf:b5:2f:fc:42:2d:7e:3f:ea:63:59:0e:d2:19:
55:63:7d:8b:25:8e:5c:3c:79:f0:d0:48:ae:a5:38:48:ae:00:
6d:f9:24:a8:91:5b:e3:f2:32:27:39:29:2f:c6:1c:0d:a6:a1:
82:ff:7d:a4:32:b0:53:af:8e:81:fd:27:4d:ac:29:b2:86:90:
db:aa:a0:fd:6e:23:e6:17:67:a0:a3:a8:ad:1b:54:0b:ab:88:
00:e4:df:7b:b4:b9:6a:a1:99:47:fc:1e:4e:bc:67:27:0e:ba:
12:d4:86:63:f9:f0:eb:7d:0d:13:15:2a:08:75:1d:86:aa:8b:
88:11:21:94:97:ed:73:cf:e0:df:99:4c:d0:2a:74:1a:64:5c:
fe:0a:95:d1:fa:71:b6:fa:7e:7a:bc:f4:c7:8b:14:c4:47:41:
2c:91:e1:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org