Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B387A2020211EB9848B460C4F9AE02.roa
File: B3B387A2020211EB9848B460C4F9AE02.roa (raw, json)
Hash identifier: lLL75AYSUVbwv4BJj0zzY4CEQvgVKFx5ZWjvIlSNQCo=
Subject key identifier: FF:8A:62:D3:02:26:BA:FC:10:50:AA:CD:78:1F:FE:4F:81:66:87:C8
Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Certificate serial: 3351
Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B387A2020211EB9848B460C4F9AE02.roa
Signing time: Tue 13 Jun 2023 13:50:25 +0000
ROA not before: Tue 13 Jun 2023 13:50:25 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 10030
IP address blocks: 103.3.20.0/22 maxlen: 22
183.171.0.0/16 maxlen: 16
183.171.16.0/24 maxlen: 24
183.171.17.0/24 maxlen: 24
183.171.18.0/24 maxlen: 24
183.171.19.0/24 maxlen: 24
183.171.20.0/24 maxlen: 24
183.171.21.0/24 maxlen: 24
183.171.22.0/24 maxlen: 24
183.171.23.0/24 maxlen: 24
183.171.24.0/24 maxlen: 24
183.171.25.0/24 maxlen: 24
183.171.26.0/24 maxlen: 24
183.171.27.0/24 maxlen: 24
183.171.28.0/24 maxlen: 24
183.171.29.0/24 maxlen: 24
183.171.30.0/24 maxlen: 24
183.171.31.0/24 maxlen: 24
183.171.40.0/24 maxlen: 24
183.171.64.0/24 maxlen: 24
183.171.65.0/24 maxlen: 24
183.171.66.0/24 maxlen: 24
183.171.67.0/24 maxlen: 24
183.171.68.0/24 maxlen: 24
183.171.69.0/24 maxlen: 24
183.171.70.0/24 maxlen: 24
183.171.71.0/24 maxlen: 24
183.171.72.0/24 maxlen: 24
183.171.73.0/24 maxlen: 24
183.171.74.0/24 maxlen: 24
183.171.75.0/24 maxlen: 24
183.171.76.0/24 maxlen: 24
183.171.77.0/24 maxlen: 24
183.171.78.0/24 maxlen: 24
183.171.79.0/24 maxlen: 24
183.171.80.0/24 maxlen: 24
183.171.81.0/24 maxlen: 24
183.171.82.0/24 maxlen: 24
183.171.83.0/24 maxlen: 24
183.171.84.0/24 maxlen: 24
183.171.85.0/24 maxlen: 24
183.171.86.0/24 maxlen: 24
183.171.87.0/24 maxlen: 24
183.171.88.0/23 maxlen: 23
183.171.88.0/24 maxlen: 24
183.171.89.0/24 maxlen: 24
183.171.90.0/23 maxlen: 23
183.171.90.0/24 maxlen: 24
183.171.91.0/24 maxlen: 24
183.171.92.0/23 maxlen: 23
183.171.92.0/24 maxlen: 24
183.171.93.0/24 maxlen: 24
183.171.94.0/23 maxlen: 23
183.171.94.0/24 maxlen: 24
183.171.95.0/24 maxlen: 24
183.171.96.0/24 maxlen: 24
183.171.97.0/24 maxlen: 24
183.171.98.0/24 maxlen: 24
183.171.99.0/24 maxlen: 24
183.171.100.0/24 maxlen: 24
183.171.101.0/24 maxlen: 24
183.171.102.0/24 maxlen: 24
183.171.103.0/24 maxlen: 24
183.171.104.0/24 maxlen: 24
183.171.105.0/24 maxlen: 24
183.171.106.0/24 maxlen: 24
183.171.107.0/24 maxlen: 24
183.171.108.0/24 maxlen: 24
183.171.109.0/24 maxlen: 24
183.171.110.0/24 maxlen: 24
183.171.111.0/24 maxlen: 24
183.171.112.0/24 maxlen: 24
183.171.113.0/24 maxlen: 24
183.171.114.0/24 maxlen: 24
183.171.115.0/24 maxlen: 24
183.171.116.0/24 maxlen: 24
183.171.117.0/24 maxlen: 24
183.171.118.0/24 maxlen: 24
183.171.119.0/24 maxlen: 24
183.171.120.0/24 maxlen: 24
183.171.121.0/24 maxlen: 24
183.171.122.0/24 maxlen: 24
183.171.123.0/24 maxlen: 24
183.171.124.0/24 maxlen: 24
183.171.125.0/24 maxlen: 24
183.171.126.0/24 maxlen: 24
183.171.127.0/24 maxlen: 24
183.171.128.0/24 maxlen: 24
183.171.129.0/24 maxlen: 24
183.171.130.0/24 maxlen: 24
183.171.131.0/24 maxlen: 24
183.171.132.0/24 maxlen: 24
183.171.133.0/24 maxlen: 24
183.171.134.0/24 maxlen: 24
183.171.135.0/24 maxlen: 24
183.171.136.0/24 maxlen: 24
183.171.137.0/24 maxlen: 24
183.171.138.0/24 maxlen: 24
183.171.139.0/24 maxlen: 24
183.171.140.0/24 maxlen: 24
183.171.141.0/24 maxlen: 24
183.171.142.0/24 maxlen: 24
183.171.143.0/24 maxlen: 24
183.171.156.0/24 maxlen: 24
183.171.158.0/24 maxlen: 24
183.171.160.0/24 maxlen: 24
183.171.161.0/24 maxlen: 24
183.171.162.0/24 maxlen: 24
183.171.163.0/24 maxlen: 24
183.171.164.0/24 maxlen: 24
183.171.165.0/24 maxlen: 24
183.171.166.0/24 maxlen: 24
183.171.167.0/24 maxlen: 24
183.171.168.0/24 maxlen: 24
183.171.169.0/24 maxlen: 24
183.171.170.0/24 maxlen: 24
183.171.171.0/24 maxlen: 24
183.171.172.0/24 maxlen: 24
183.171.173.0/24 maxlen: 24
183.171.174.0/24 maxlen: 24
183.171.175.0/24 maxlen: 24
183.171.186.0/24 maxlen: 24
183.171.190.0/24 maxlen: 24
183.171.191.0/24 maxlen: 24
183.171.192.0/24 maxlen: 24
183.171.193.0/24 maxlen: 24
183.171.194.0/24 maxlen: 24
183.171.195.0/24 maxlen: 24
183.171.196.0/24 maxlen: 24
183.171.197.0/24 maxlen: 24
183.171.198.0/24 maxlen: 24
183.171.199.0/24 maxlen: 24
183.171.200.0/24 maxlen: 24
183.171.204.0/24 maxlen: 24
183.171.205.0/24 maxlen: 24
183.171.224.0/24 maxlen: 24
183.171.225.0/24 maxlen: 24
183.171.226.0/24 maxlen: 24
183.171.227.0/24 maxlen: 24
183.171.228.0/24 maxlen: 24
183.171.229.0/24 maxlen: 24
183.171.232.0/21 maxlen: 21
183.171.240.0/20 maxlen: 20
183.171.240.0/24 maxlen: 24
183.171.241.0/24 maxlen: 24
183.171.243.0/24 maxlen: 24
183.171.244.0/23 maxlen: 23
183.171.248.0/24 maxlen: 24
183.171.255.0/24 maxlen: 24
203.82.64.0/19 maxlen: 19
203.82.67.0/24 maxlen: 24
203.82.70.0/23 maxlen: 23
203.82.70.0/24 maxlen: 24
203.82.71.0/24 maxlen: 24
203.82.75.0/24 maxlen: 24
203.82.76.0/24 maxlen: 24
203.82.77.0/24 maxlen: 24
203.82.82.0/24 maxlen: 24
203.82.93.0/24 maxlen: 24
203.82.94.0/24 maxlen: 24
203.82.95.0/24 maxlen: 24
2404:160::/32 maxlen: 32
2404:160:8000::/44 maxlen: 44
2404:160:8010::/44 maxlen: 44
2404:160:8020::/44 maxlen: 44
2404:160:8030::/44 maxlen: 44
2404:160:8040::/42 maxlen: 42
2404:160:8100::/42 maxlen: 42
2404:160:8140::/42 maxlen: 42
2404:160:a000::/42 maxlen: 42
2404:160:a400::/42 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13137 (0x3351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Validity
Not Before: Jun 13 13:50:25 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64887420-b6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:3a:d7:1e:2e:c8:6f:42:02:8c:74:0f:50:
59:e3:de:86:60:28:32:dd:51:4e:2d:11:65:27:20:
24:d9:ac:8b:d9:a5:79:22:a0:08:2b:82:0d:f0:a5:
df:1e:e4:ff:25:7e:6d:92:ad:b5:a8:61:1f:63:55:
1b:6f:45:67:55:ad:9f:08:c9:e7:24:ac:05:81:cb:
b7:25:3e:43:24:ba:cb:14:78:f1:a4:9d:f3:2e:0c:
72:cf:44:7c:80:90:87:2f:64:bb:ef:48:46:8d:35:
03:b6:2f:f7:ea:4e:7c:b6:f2:44:6d:02:2f:c9:71:
b3:7e:ce:c6:60:15:6c:7d:87:b5:c2:ba:b7:13:8b:
ba:53:98:15:14:fc:94:80:c8:f7:e5:f7:c6:d4:b9:
55:94:80:9c:97:f6:d5:28:28:24:bf:24:4b:a5:10:
db:23:f9:2e:64:77:0f:7f:bf:58:cd:0d:26:64:f9:
ae:91:36:af:89:2c:b6:c4:d3:2b:37:51:fd:be:87:
91:92:40:24:d1:27:63:16:a2:38:af:d3:42:66:e1:
f5:5d:f6:3c:b9:59:e1:bd:30:76:86:d6:c0:46:a2:
18:3a:bc:86:ad:4f:57:15:e5:9f:73:8c:e1:8c:15:
f0:64:77:1b:f1:5f:c4:b7:0f:66:db:66:a4:24:b0:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:62:D3:02:26:BA:FC:10:50:AA:CD:78:1F:FE:4F:81:66:87:C8
X509v3 Authority Key Identifier:
keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B387A2020211EB9848B460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.20.0/22
183.171.0.0/16
203.82.64.0/19
IPv6:
2404:160::/32
Signature Algorithm: sha256WithRSAEncryption
5c:a9:95:d3:c5:03:34:37:bd:cb:c9:ef:b0:13:ad:ad:54:d8:
76:da:11:04:ed:38:57:40:00:66:c8:a8:7a:80:bb:96:57:ed:
23:39:45:1c:b7:bd:df:8b:27:93:18:03:12:3e:c0:eb:e0:58:
82:f5:05:b6:4c:e8:52:0e:7b:98:0e:d6:e8:81:65:26:b6:51:
85:68:96:69:97:16:f1:4c:0e:25:cd:e4:c8:1b:ca:88:e6:53:
1f:c1:6d:e1:09:bf:cd:be:c6:1e:ba:85:ab:c5:74:5a:d7:c1:
ed:31:f8:7e:22:9d:c6:e7:d4:cb:17:de:bf:d0:55:f2:64:ed:
f8:a4:cc:45:71:90:06:06:61:67:24:6c:1b:34:0a:30:7a:9f:
74:d6:74:38:ae:88:28:e3:2d:a2:d6:e9:cb:78:68:ba:7d:aa:
0e:44:fc:e4:29:ee:64:34:53:bc:60:01:bd:de:c9:cf:85:3b:
c3:be:e5:be:3c:1b:be:fc:1c:b5:65:eb:ea:eb:04:0b:a2:3e:
6c:2b:02:2a:e7:9c:1f:46:3c:a7:80:32:5d:6d:da:45:6d:fc:
5a:2a:29:85:7b:24:4d:46:91:8a:8e:ba:22:02:6e:6c:ba:3b:
86:6e:40:d1:a9:77:6d:97:b7:1e:50:37:86:a9:b8:e1:2e:43:
98:db:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org