Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6613D9FEB14211EA8F1F6C2DC4F9AE02.roa
File: 6613D9FEB14211EA8F1F6C2DC4F9AE02.roa (raw, json)
Hash identifier: D3KRAcu8IPhjKVRvlpWU1ETinjI4g+twh5KxBLAAyvg=
Subject key identifier: 5C:9C:2D:82:AA:BE:AE:90:0F:43:B3:D7:22:32:81:99:5E:74:2B:46
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1BFC
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6613D9FEB14211EA8F1F6C2DC4F9AE02.roa
Signing time: Wed 29 Mar 2023 10:23:35 +0000
ROA not before: Wed 29 Mar 2023 10:23:35 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 23764
IP address blocks: 121.59.0.0/24 maxlen: 24
121.59.2.0/24 maxlen: 24
121.59.4.0/24 maxlen: 24
121.59.8.0/24 maxlen: 24
121.59.9.0/24 maxlen: 24
121.59.29.0/24 maxlen: 24
121.59.30.0/24 maxlen: 24
121.59.31.0/24 maxlen: 24
121.59.32.0/22 maxlen: 24
121.59.37.0/24 maxlen: 24
121.59.38.0/24 maxlen: 24
121.59.100.0/24 maxlen: 24
121.59.101.0/24 maxlen: 24
121.59.102.0/24 maxlen: 24
121.59.103.0/24 maxlen: 24
121.59.104.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.107.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.110.0/24 maxlen: 24
121.59.120.0/24 maxlen: 24
121.59.121.0/24 maxlen: 24
121.59.122.0/24 maxlen: 24
121.59.123.0/24 maxlen: 24
121.59.124.0/23 maxlen: 24
121.59.128.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
121.59.141.0/24 maxlen: 24
121.59.142.0/24 maxlen: 24
121.59.143.0/24 maxlen: 24
121.59.144.0/24 maxlen: 24
121.59.146.0/24 maxlen: 24
121.59.147.0/24 maxlen: 24
121.59.151.0/24 maxlen: 24
121.59.152.0/24 maxlen: 24
121.59.153.0/24 maxlen: 24
121.59.154.0/24 maxlen: 24
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.14.184.0/22 maxlen: 22
203.14.188.0/24 maxlen: 24
203.14.189.0/24 maxlen: 24
203.14.190.0/24 maxlen: 24
203.14.191.0/24 maxlen: 24
203.19.32.0/22 maxlen: 22
203.19.32.0/24 maxlen: 24
203.19.37.0/24 maxlen: 24
203.19.38.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.22.178.0/24 maxlen: 24
203.22.179.0/24 maxlen: 24
203.22.180.0/24 maxlen: 24
203.22.181.0/24 maxlen: 24
203.22.182.0/24 maxlen: 24
203.25.50.0/24 maxlen: 24
203.25.53.0/24 maxlen: 24
203.25.54.0/24 maxlen: 24
203.33.8.0/22 maxlen: 22
203.33.8.0/24 maxlen: 24
203.33.9.0/24 maxlen: 24
203.33.10.0/24 maxlen: 24
203.34.192.0/24 maxlen: 24
203.34.193.0/24 maxlen: 24
203.34.194.0/24 maxlen: 24
203.34.195.0/24 maxlen: 24
203.34.196.0/24 maxlen: 24
203.34.197.0/24 maxlen: 24
203.34.198.0/24 maxlen: 24
203.34.199.0/24 maxlen: 24
203.56.48.0/23 maxlen: 23
203.80.136.0/23 maxlen: 24
203.80.138.0/23 maxlen: 24
203.81.6.0/24 maxlen: 24
203.86.101.0/24 maxlen: 24
203.86.109.0/24 maxlen: 24
203.86.110.0/24 maxlen: 24
203.86.111.0/24 maxlen: 24
203.86.112.0/24 maxlen: 24
203.86.118.0/24 maxlen: 24
203.86.119.0/24 maxlen: 24
203.86.120.0/24 maxlen: 24
203.86.121.0/24 maxlen: 24
203.86.122.0/24 maxlen: 24
203.86.123.0/24 maxlen: 24
203.86.124.0/24 maxlen: 24
203.86.125.0/24 maxlen: 24
203.86.126.0/24 maxlen: 24
203.86.127.0/24 maxlen: 24
203.128.224.0/24 maxlen: 24
203.128.229.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.12.0/24 maxlen: 24
203.196.13.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/24 maxlen: 24
210.48.143.0/24 maxlen: 24
218.30.32.0/24 maxlen: 24
218.30.35.0/24 maxlen: 24
218.30.41.0/24 maxlen: 24
218.30.43.0/24 maxlen: 24
218.30.44.0/24 maxlen: 24
218.30.63.0/24 maxlen: 24
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7164 (0x1bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Mar 29 10:23:35 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=642411a7-cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:de:9b:85:fe:57:6e:26:45:62:b7:b5:c3:
6b:16:85:a6:e9:83:ae:7d:b3:da:82:71:c2:f1:9d:
dd:56:82:83:44:cb:8c:f8:40:74:cf:88:c5:91:16:
2c:8c:18:a7:dc:47:7b:b7:90:6d:1a:56:6a:e6:bf:
43:1e:1b:7b:36:8a:1a:ee:d0:3f:09:f5:dd:1a:ea:
88:d6:ab:9e:b3:f6:f6:48:8d:40:c0:54:81:63:85:
27:6f:0f:66:36:c3:66:da:4a:51:b2:f4:c7:19:c7:
fa:98:8d:87:b3:81:8f:c7:c1:dc:40:1b:5c:72:6a:
0e:e0:24:45:9a:2a:44:de:3b:f0:bd:ea:fd:be:18:
f0:bc:95:77:84:e4:0d:61:65:07:b0:4d:27:1c:e6:
ba:81:e6:ba:2b:66:da:fb:34:a4:ba:87:19:ea:68:
b0:5f:4b:9b:b9:67:66:1b:d3:3d:30:6c:fb:18:5c:
52:19:6b:6c:5f:3b:c4:d2:62:ff:6d:83:1b:52:ab:
48:6d:2e:de:21:67:ef:55:5d:43:3d:21:22:f6:d2:
19:61:45:ac:09:8b:12:71:5a:2f:2d:37:4a:bf:61:
64:d8:77:28:55:07:a4:c2:df:86:63:46:47:13:34:
d5:b0:97:e0:d1:2e:21:de:2d:80:7c:55:ab:d0:39:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9C:2D:82:AA:BE:AE:90:0F:43:B3:D7:22:32:81:99:5E:74:2B:46
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6613D9FEB14211EA8F1F6C2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.59.0.0/24
121.59.2.0/24
121.59.4.0/24
121.59.8.0/23
121.59.29.0-121.59.35.255
121.59.37.0-121.59.38.255
121.59.100.0-121.59.104.255
121.59.106.0/23
121.59.109.0-121.59.110.255
121.59.120.0-121.59.125.255
121.59.128.0/24
121.59.140.0-121.59.144.255
121.59.146.0/23
121.59.151.0-121.59.154.255
203.12.200.0/22
203.14.184.0/21
203.19.32.0/22
203.19.37.0-203.19.38.255
203.20.136.0/22
203.22.178.0-203.22.182.255
203.25.50.0/24
203.25.53.0-203.25.54.255
203.33.8.0/22
203.34.192.0/21
203.56.48.0/23
203.80.136.0/22
203.81.6.0/24
203.86.101.0/24
203.86.109.0-203.86.112.255
203.86.118.0-203.86.127.255
203.128.224.0/24
203.128.229.0/24
203.196.8.0-203.196.13.255
203.196.15.0/24
210.48.136.0/24
210.48.143.0/24
218.30.32.0/24
218.30.35.0/24
218.30.41.0/24
218.30.43.0-218.30.44.255
218.30.63.0/24
218.185.241.0/24
218.185.243.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:2d:c3:42:37:10:09:02:74:3c:a4:01:b0:b7:b0:97:0b:
bc:2c:62:70:88:95:15:de:95:47:eb:a3:24:db:ea:cb:a0:b0:
ea:7d:26:c8:e2:26:dd:d4:1f:2d:9e:ca:74:8b:06:62:13:22:
9a:3c:1c:90:b3:c1:da:56:02:7c:1f:2f:7b:7a:5f:4f:b5:11:
76:ee:7e:bd:39:2f:fa:b9:ec:31:4f:01:6b:ad:b6:80:5c:9a:
fd:f7:42:12:ed:32:bf:6b:9a:5f:af:97:28:14:2b:8f:71:5f:
06:39:48:21:5f:7b:fd:31:dc:40:06:f5:27:46:d5:54:72:d6:
92:5b:6b:06:31:e9:f9:b0:59:32:a2:bb:48:13:27:6d:e9:08:
ae:4d:09:f6:2c:dc:c5:df:8b:27:99:a6:c3:19:db:dd:e7:e6:
8a:e7:8d:1c:30:b0:99:f8:4f:f6:20:6f:56:8d:34:59:31:58:
41:51:a1:ec:4a:20:3b:93:a5:89:58:ae:e9:46:ec:00:6b:05:
c2:21:6f:d1:2a:aa:5c:f0:55:18:8b:24:80:5e:31:6e:68:4c:
86:3f:ba:9f:54:4b:8d:b3:a1:30:28:b6:51:cf:a3:53:e4:af:
9e:b3:f4:96:c2:66:38:38:fd:e1:9f:0e:0c:52:a3:67:29:2d:
d6:8a:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org