Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/55BA2EE0963911ECA9404D81C4F9AE02.roa
File: 55BA2EE0963911ECA9404D81C4F9AE02.roa (raw, json)
Hash identifier: /u+guoP6wgZ61VmmlMeCLKUU0kcHhs3iN6s5TxqEVUA=
Subject key identifier: D4:F9:91:73:D4:A1:FC:DC:AE:FD:AF:D9:51:11:01:CD:B3:9C:DD:1B
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 069F
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/55BA2EE0963911ECA9404D81C4F9AE02.roa
Signing time: Fri 25 Feb 2022 12:49:14 +0000
ROA not before: Fri 25 Feb 2022 12:49:14 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 137969
IP address blocks: 39.109.66.0/23 maxlen: 23
39.109.66.0/24 maxlen: 24
39.109.67.0/24 maxlen: 24
39.109.68.0/22 maxlen: 22
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/21 maxlen: 21
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.76.0/24 maxlen: 24
39.109.77.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/21 maxlen: 21
39.109.80.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.83.0/24 maxlen: 24
39.109.84.0/24 maxlen: 24
39.109.85.0/24 maxlen: 24
39.109.86.0/24 maxlen: 24
39.109.87.0/24 maxlen: 24
39.109.88.0/22 maxlen: 22
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
39.109.90.0/24 maxlen: 24
39.109.91.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.119.132.0/23 maxlen: 23
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Feb 25 12:49:14 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6218d04a-01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:dc:b1:4b:3e:43:65:c7:02:66:de:16:3b:
2a:b7:45:3d:3f:f5:1b:57:e4:f1:13:a5:0b:f8:6e:
d7:2c:7b:4e:c2:79:e9:9d:14:46:c1:1e:ac:26:97:
81:50:b1:f1:d0:39:b5:90:76:dd:30:2a:49:6a:fc:
ca:2a:25:7a:40:00:50:1f:5a:e1:e8:94:db:28:d6:
54:ae:51:87:2d:90:47:0f:5a:ed:ee:75:bf:cd:6f:
e6:22:08:f4:65:87:92:36:04:11:b5:8c:b9:e2:f8:
ea:c0:f9:8c:d1:8b:ed:b3:8b:e9:4e:25:9d:3a:8b:
c7:48:fb:3e:f2:db:ab:5b:06:66:26:b0:ca:3f:c3:
05:2c:2c:06:f4:56:31:e7:11:21:ab:1c:31:1f:05:
c3:9c:a8:ce:40:60:1b:d6:ba:39:1b:b8:e9:31:fd:
79:44:5d:fa:ce:37:b9:fb:73:90:e4:f6:95:e0:8d:
6e:7b:5e:61:14:52:48:6a:51:b9:50:1e:e8:d2:cf:
c3:9a:1d:bf:0d:e5:25:2b:27:f9:a0:9d:21:8f:f1:
d8:68:d9:31:cf:9d:60:24:0d:a5:31:85:60:11:25:
92:bd:9f:45:10:77:a1:4b:db:44:5a:5a:b8:d4:ce:
8d:cf:a5:77:83:2b:33:c2:63:b2:b5:83:f9:2e:01:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:91:73:D4:A1:FC:DC:AE:FD:AF:D9:51:11:01:CD:B3:9C:DD:1B
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/55BA2EE0963911ECA9404D81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0-39.109.91.255
103.98.14.0/24
103.119.132.0/23
IPv6:
2403:e840::/32
Signature Algorithm: sha256WithRSAEncryption
21:4a:47:07:5a:be:19:1e:32:ae:0c:b2:2f:30:ea:49:22:9a:
21:cf:61:59:ec:7e:f8:59:ba:6f:de:0c:1b:cd:4f:ce:c3:91:
d2:5a:f0:10:b6:f6:86:96:dd:ca:e3:01:e6:9c:e0:64:b9:f6:
de:49:0f:8c:96:c5:83:24:9f:38:7d:07:ef:f6:fc:d4:59:9d:
13:32:39:96:ee:ce:9f:6f:ba:7a:da:fe:cb:61:56:a1:83:d0:
b1:bd:71:a0:65:d0:1c:53:d8:11:07:1c:c3:14:36:b3:35:6e:
e8:e1:dd:d8:e6:68:5f:77:ea:28:63:93:5a:60:3d:cf:8c:14:
5e:df:f5:b3:a6:75:91:75:1a:e2:83:f5:93:56:22:96:fc:3d:
f0:a7:9d:1e:b5:46:a1:b6:68:a7:2d:32:9e:75:98:34:42:eb:
10:0c:20:fc:63:d1:24:4b:58:1a:9b:c1:66:c7:c6:1d:82:d9:
64:93:1c:e9:36:6c:4e:9c:d4:93:e5:94:e3:b5:46:69:dd:6a:
30:3f:73:6e:16:77:c9:b3:31:24:5a:7a:c3:87:59:18:2d:2d:
e1:cc:b1:1f:cc:aa:34:61:b2:5c:1e:e6:86:2d:68:f7:7f:33:
16:f4:75:eb:63:a7:71:dc:bb:ce:11:58:9b:54:28:d1:76:72:
8a:1d:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org