Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
File: DF428866012111EE9BBB0A1FC4F9AE02.roa (raw, json)
Hash identifier: dz7HuJJeM1AB94aMrsyUNJfAec9JXilGKj3fb27Gn5k=
Subject key identifier: 94:A0:22:DA:6E:0A:09:B6:D6:28:92:F8:33:6D:5C:13:34:E5:66:71
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1983
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
Signing time: Wed 07 Jun 2023 01:55:29 +0000
ROA not before: Wed 07 Jun 2023 01:55:29 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 9929
IP address blocks: 1.28.41.0/24 maxlen: 24
1.28.42.0/24 maxlen: 24
42.84.176.0/21 maxlen: 21
43.243.88.0/22 maxlen: 22
43.250.128.0/22 maxlen: 22
58.254.216.0/22 maxlen: 22
61.48.164.0/22 maxlen: 22
103.3.156.0/22 maxlen: 22
103.250.180.0/22 maxlen: 22
113.200.230.0/23 maxlen: 23
113.207.132.0/23 maxlen: 23
113.207.240.0/20 maxlen: 20
114.254.4.0/23 maxlen: 23
120.86.8.0/23 maxlen: 23
122.97.0.0/18 maxlen: 18
124.130.192.0/20 maxlen: 20
125.46.122.0/23 maxlen: 23
203.93.64.0/20 maxlen: 20
203.93.82.0/24 maxlen: 24
203.93.83.0/24 maxlen: 24
203.93.96.0/20 maxlen: 20
203.93.156.0/22 maxlen: 22
203.93.208.0/20 maxlen: 20
203.93.224.0/20 maxlen: 20
210.13.96.0/20 maxlen: 20
210.13.98.0/24 maxlen: 24
210.13.112.0/20 maxlen: 20
210.13.113.0/24 maxlen: 24
210.13.192.0/19 maxlen: 19
210.15.64.0/19 maxlen: 19
210.21.191.0/24 maxlen: 24
210.22.116.0/24 maxlen: 24
210.22.117.0/24 maxlen: 24
210.22.192.0/18 maxlen: 18
210.22.193.0/24 maxlen: 24
210.22.194.0/24 maxlen: 24
210.22.195.0/24 maxlen: 24
210.22.199.0/24 maxlen: 24
210.22.200.0/24 maxlen: 24
210.22.206.0/24 maxlen: 24
210.22.209.0/24 maxlen: 24
210.22.253.0/24 maxlen: 24
210.51.21.0/24 maxlen: 24
210.51.22.0/24 maxlen: 24
210.51.29.0/24 maxlen: 24
210.51.30.0/23 maxlen: 23
210.51.33.0/24 maxlen: 24
210.51.39.0/24 maxlen: 24
210.51.43.0/24 maxlen: 24
210.51.45.0/24 maxlen: 24
210.51.48.0/24 maxlen: 24
210.51.192.0/18 maxlen: 18
210.51.192.0/24 maxlen: 24
210.51.193.0/24 maxlen: 24
210.51.197.0/24 maxlen: 24
210.51.201.0/24 maxlen: 24
210.51.202.0/24 maxlen: 24
210.51.203.0/24 maxlen: 24
210.51.204.0/22 maxlen: 22
210.51.208.0/22 maxlen: 22
210.51.224.0/23 maxlen: 23
210.51.226.0/24 maxlen: 24
210.51.227.0/24 maxlen: 24
210.51.228.0/24 maxlen: 24
210.51.229.0/24 maxlen: 24
210.51.230.0/23 maxlen: 23
210.51.232.0/23 maxlen: 23
210.51.235.0/24 maxlen: 24
210.51.240.0/24 maxlen: 24
210.51.243.0/24 maxlen: 24
210.51.250.0/24 maxlen: 24
218.24.22.0/24 maxlen: 24
218.24.23.0/24 maxlen: 24
218.104.32.0/20 maxlen: 20
218.107.224.0/19 maxlen: 19
220.248.59.0/24 maxlen: 24
220.248.202.0/24 maxlen: 24
220.249.0.0/18 maxlen: 18
2408:8120:1::/48 maxlen: 48
2408:8120:2::/48 maxlen: 48
2408:8120:7000::/36 maxlen: 36
2408:8a00:c000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6531 (0x1983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Jun 7 01:55:29 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=647fe390-55b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:07:6b:c5:03:3b:69:24:70:2d:87:a2:a2:
0b:d3:02:f9:80:24:58:80:d9:70:e9:c0:e7:88:1c:
19:18:0f:90:ed:fb:98:a0:ab:6d:cd:74:3e:ea:2e:
18:62:79:f5:c7:52:96:67:b6:f6:24:fa:78:0d:4c:
31:0c:a8:bf:31:21:5a:7d:9c:a8:8c:39:ce:ea:a3:
07:d6:48:c3:86:ac:4c:56:60:a0:7e:68:d0:e5:c1:
60:ed:37:a0:36:d5:cb:dc:30:c1:a7:39:fd:eb:3a:
8d:35:b4:d4:a7:2d:fa:99:69:84:b9:6b:2f:bc:83:
3d:ad:a8:29:af:a4:07:d8:a3:f0:e5:da:aa:04:ac:
60:5c:0b:7a:f1:89:2f:40:90:46:ba:1b:3a:70:a4:
f4:a2:80:88:da:34:8c:db:1d:3f:44:2a:22:6d:9d:
62:b9:9d:4f:c0:ce:a7:40:d4:1f:48:82:d7:c2:a8:
7f:4c:0e:db:7f:fe:31:8b:0f:6d:5f:22:18:50:a5:
ae:41:2b:48:c3:34:a9:51:ed:3b:5f:39:4f:56:40:
80:c8:c9:3a:b2:9f:6b:24:dc:c5:7a:85:0b:9e:f6:
fd:68:b9:cd:c6:1c:5d:36:d6:fc:00:6e:dc:6b:12:
5f:c9:e4:f2:81:13:b7:ab:d7:c5:7a:67:0e:26:3a:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:22:DA:6E:0A:09:B6:D6:28:92:F8:33:6D:5C:13:34:E5:66:71
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.28.41.0-1.28.42.255
42.84.176.0/21
43.243.88.0/22
43.250.128.0/22
58.254.216.0/22
61.48.164.0/22
103.3.156.0/22
103.250.180.0/22
113.200.230.0/23
113.207.132.0/23
113.207.240.0/20
114.254.4.0/23
120.86.8.0/23
122.97.0.0/18
124.130.192.0/20
125.46.122.0/23
203.93.64.0/20
203.93.82.0/23
203.93.96.0/20
203.93.156.0/22
203.93.208.0-203.93.239.255
210.13.96.0/19
210.13.192.0/19
210.15.64.0/19
210.21.191.0/24
210.22.116.0/23
210.22.192.0/18
210.51.21.0-210.51.22.255
210.51.29.0-210.51.31.255
210.51.33.0/24
210.51.39.0/24
210.51.43.0/24
210.51.45.0/24
210.51.48.0/24
210.51.192.0/18
218.24.22.0/23
218.104.32.0/20
218.107.224.0/19
220.248.59.0/24
220.248.202.0/24
220.249.0.0/18
IPv6:
2408:8120:1::-2408:8120:2:ffff:ffff:ffff:ffff:ffff
2408:8120:7000::/36
2408:8a00:c000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:82:9a:8a:c7:2e:bb:a1:33:07:a6:11:c5:ae:42:1d:fe:fd:
e3:e0:6c:4c:d4:97:70:de:f1:c2:c1:a4:92:05:76:b0:e8:af:
fc:91:fa:87:b8:d8:25:1b:50:56:bb:3b:83:eb:08:da:9d:8a:
81:7b:36:a5:44:ca:67:72:e9:ff:23:b9:66:59:c5:aa:46:33:
2b:82:ed:1b:e9:c4:f8:cd:73:b2:53:62:94:41:62:b0:64:b7:
2a:82:da:8f:c7:12:36:11:8b:4e:5c:28:ed:f3:1e:93:ca:27:
04:e8:d6:9a:a6:71:c7:78:db:2f:97:e8:fe:1f:89:95:45:0e:
db:f6:8b:6d:d4:34:3d:72:88:8d:fb:b3:72:ca:1b:ec:8d:77:
c4:34:90:e5:35:4a:2b:51:d2:40:0d:31:d1:2f:45:32:0e:29:
ab:78:98:b8:95:a3:14:63:3d:98:89:8f:7f:f5:3e:e9:e8:39:
f2:db:48:25:67:ca:47:86:b8:db:a5:89:34:f7:67:0f:2a:0d:
43:e9:b0:4d:5e:54:11:b9:21:2a:50:68:88:d1:b2:59:1a:ea:
a3:d7:8c:a1:bc:6e:0e:ca:8a:57:3e:7f:24:85:8d:9b:0e:f9:
a5:e4:d8:1a:64:dd:93:a1:4a:68:05:81:23:87:3e:98:c9:79:
78:70:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org