Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/09914E20725311EEBAF88277C4F9AE02.roa
File: 09914E20725311EEBAF88277C4F9AE02.roa (raw, json)
Hash identifier: wDkXy2FP8Y+8f+xgKeGHg05VziVesbKAxdWlkcZfjCM=
Subject key identifier: 4B:32:8C:DB:B6:27:32:22:77:7E:78:84:F5:C2:74:07:49:A7:39:75
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 099F
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/09914E20725311EEBAF88277C4F9AE02.roa
Signing time: Tue 24 Oct 2023 09:52:26 +0000
ROA not before: Tue 24 Oct 2023 09:52:26 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 58453
IP address blocks: 103.11.108.0/22 maxlen: 22
103.11.108.0/24 maxlen: 24
103.11.109.0/24 maxlen: 24
223.118.0.0/15 maxlen: 15
223.118.0.0/16 maxlen: 24
223.118.0.0/27 maxlen: 27
223.119.0.0/16 maxlen: 20
223.119.0.0/21 maxlen: 24
223.119.8.0/22 maxlen: 24
223.119.12.0/22 maxlen: 24
223.119.16.0/20 maxlen: 24
223.119.32.0/19 maxlen: 23
223.119.33.0/24 maxlen: 24
223.119.38.0/23 maxlen: 24
223.119.40.0/21 maxlen: 24
223.119.48.0/22 maxlen: 24
223.119.53.0/24 maxlen: 24
223.119.54.0/23 maxlen: 24
223.119.56.0/21 maxlen: 24
223.119.64.0/18 maxlen: 23
223.119.64.0/19 maxlen: 24
223.119.96.0/22 maxlen: 24
223.119.101.0/24 maxlen: 24
223.119.102.0/23 maxlen: 24
223.119.104.0/21 maxlen: 24
223.119.112.0/20 maxlen: 24
223.119.128.0/17 maxlen: 23
223.119.128.0/18 maxlen: 24
223.119.192.0/19 maxlen: 24
223.119.224.0/20 maxlen: 24
223.119.240.0/21 maxlen: 24
223.119.248.0/22 maxlen: 24
223.119.252.0/23 maxlen: 24
223.120.0.0/17 maxlen: 24
223.121.0.0/17 maxlen: 24
2402:4f00::/32 maxlen: 32
2402:4f00:1000::/36 maxlen: 36
2402:4f00:2000::/36 maxlen: 36
2402:4f00:4000:4::/64 maxlen: 64
2402:4f00:4001:100::/56 maxlen: 56
2402:4f00:4002:100::/56 maxlen: 56
2402:4f00:4003::/48 maxlen: 48
2402:4f00:8000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463 (0x99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Oct 24 09:52:26 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=653793da-5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:31:1d:e1:52:d7:56:90:a8:73:ee:99:f9:
f1:37:c8:5c:82:83:14:ee:d5:33:a7:e8:c9:a4:a0:
d3:01:91:57:44:0e:5c:a9:06:f0:73:50:41:41:b5:
8a:13:af:d3:83:a2:17:21:55:92:00:8c:1d:a3:df:
49:7e:2c:8e:3b:da:30:49:88:f1:42:94:87:77:fa:
d2:2c:4e:2a:38:f7:3b:80:8e:67:33:19:fb:34:cb:
01:a6:fc:f6:86:e5:5c:5c:54:29:85:70:62:55:f6:
bd:c6:bd:0a:c8:c2:d5:39:0c:f0:64:35:dd:44:0f:
1c:0a:d0:e4:3c:d4:6c:09:60:f7:25:d8:c7:0a:65:
4b:d4:21:ab:31:7c:86:da:f4:8b:a1:92:53:13:37:
59:40:6a:30:b9:5c:45:36:58:f0:10:eb:6d:d4:a5:
ff:5b:23:28:58:2c:2a:59:13:f3:17:64:e3:26:98:
b0:5c:95:fc:03:3e:e0:de:94:e0:b3:e6:9d:ed:fe:
6f:a2:92:92:d5:eb:70:19:ad:c7:29:26:11:fa:88:
12:6c:ca:51:36:ba:74:74:6b:54:3a:13:43:f2:6b:
14:72:d2:1c:03:4b:4e:33:5f:6c:00:15:bb:d8:e2:
a8:b9:11:de:34:82:1f:de:a9:1f:ae:90:16:fe:46:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:8C:DB:B6:27:32:22:77:7E:78:84:F5:C2:74:07:49:A7:39:75
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/09914E20725311EEBAF88277C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.108.0/22
223.118.0.0-223.120.127.255
223.121.0.0/17
IPv6:
2402:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
74:c8:86:64:72:b4:3d:18:8f:64:f0:15:4b:fe:a0:c0:e5:36:
34:fa:53:94:11:5f:cf:f1:f2:a0:b7:a3:d0:61:19:08:2b:fe:
e5:30:a6:bf:13:7c:e5:d9:bc:9f:85:95:08:88:1a:f3:ca:a3:
67:38:86:69:06:2d:01:a5:5a:77:70:af:3f:64:27:37:6a:d4:
42:dd:49:c2:20:86:f5:70:83:2d:a0:ff:4f:0c:dd:33:25:4f:
b1:67:40:8a:1b:85:f3:db:e8:e4:47:a8:33:70:4a:be:8d:9b:
d4:e2:2c:1b:ab:1f:ff:a6:ee:db:15:09:73:83:90:32:39:d7:
56:62:b1:92:3b:84:d7:41:47:24:f4:31:39:5b:24:77:ab:24:
f2:93:5a:e6:4c:f7:bb:19:3f:24:c1:31:28:d2:f7:3a:b2:e1:
92:c0:81:dc:1d:4c:3c:94:7a:56:13:13:18:b7:d3:ba:b3:cb:
c1:3a:33:12:43:38:60:64:90:96:15:cb:0f:ee:a5:2f:df:37:
06:9f:35:ab:0a:2a:92:ea:b3:92:07:3b:c7:4b:3b:2d:25:bb:
e8:29:c4:5b:1a:42:31:15:ce:5e:ae:dd:75:c8:7d:8d:b9:70:
49:d5:43:d4:f8:18:d9:b8:b4:71:6f:02:1b:8c:88:dc:94:d7:
ad:c4:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org