Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F73D27C8A98411ECAB2A1750C4F9AE02.roa
File: F73D27C8A98411ECAB2A1750C4F9AE02.roa (raw, json)
Hash identifier: sJJwqgEFa1wScwjptVJm5zZ338EpFgIbKuTozMWCgyI=
Subject key identifier: 98:09:65:2C:E8:BE:55:21:DB:C4:81:EE:CB:95:A4:DE:BE:BA:FB:28
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 06D8
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F73D27C8A98411ECAB2A1750C4F9AE02.roa
Signing time: Tue 22 Mar 2022 02:08:29 +0000
ROA not before: Tue 22 Mar 2022 02:08:29 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 137969
IP address blocks: 39.109.66.0/23 maxlen: 23
39.109.66.0/24 maxlen: 24
39.109.67.0/24 maxlen: 24
39.109.68.0/22 maxlen: 22
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/21 maxlen: 21
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.77.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/21 maxlen: 21
39.109.80.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.83.0/24 maxlen: 24
39.109.88.0/22 maxlen: 22
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
39.109.90.0/24 maxlen: 24
39.109.91.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.119.132.0/23 maxlen: 23
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502
Validity
Not Before: Mar 22 02:08:29 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=62392f9d-fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:92:44:b8:c6:83:2e:73:a4:4e:ec:c2:f9:
39:49:cc:a4:7e:9d:26:11:62:f2:9e:09:d5:f1:96:
11:86:ca:7e:e7:87:b7:32:54:c8:58:00:c7:57:5b:
f4:bf:a2:99:04:90:28:e5:f4:fd:79:86:9e:87:d9:
66:06:8c:fc:b2:e2:a5:30:98:5f:00:a8:00:e4:8c:
6a:3b:07:73:e2:44:ee:d8:a4:52:88:91:3d:a7:da:
10:5e:75:c3:4f:13:d0:fb:77:ac:b3:ec:8f:ea:f2:
10:59:3c:40:00:19:dd:fc:af:4f:50:1c:aa:5b:1f:
41:de:11:f5:56:23:ba:62:42:cd:71:15:08:db:29:
e6:9b:97:a6:db:62:4e:a1:ce:58:d7:75:7c:e8:5a:
f1:de:0b:95:fb:52:9f:b7:0f:33:7d:79:eb:e4:53:
40:7e:7d:40:67:88:6d:f7:fb:ae:80:08:ab:6a:c0:
73:49:0f:f2:75:dd:b7:02:e1:27:05:fa:c3:17:67:
3d:ad:28:2c:98:e5:8e:b5:8d:92:b7:b1:b2:bc:38:
fb:e3:4e:e7:eb:35:93:3c:2d:ba:c7:dc:d1:25:17:
c7:30:4d:75:30:70:b5:22:d0:6c:bb:d8:3f:2f:67:
2b:d5:10:0c:36:ce:3a:8b:b4:20:d6:a9:6e:10:dd:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:65:2C:E8:BE:55:21:DB:C4:81:EE:CB:95:A4:DE:BE:BA:FB:28
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F73D27C8A98411ECAB2A1750C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0-39.109.91.255
103.98.14.0/24
103.119.132.0/23
IPv6:
2403:e840::/32
Signature Algorithm: sha256WithRSAEncryption
1e:ed:3c:e7:ab:d1:00:9d:2a:83:32:85:aa:71:e3:f8:a0:e8:
8c:65:a2:50:54:f9:99:a2:a5:29:06:07:fe:87:78:02:3a:3a:
ab:60:4f:6d:f9:60:0f:28:19:eb:2b:ae:46:06:ca:00:4c:6c:
39:a1:f8:c8:51:98:9d:80:8c:02:79:23:77:72:07:56:44:7f:
6c:e4:5e:9b:d3:39:30:b9:39:aa:b1:1f:78:21:dc:85:d3:58:
bd:87:b8:23:d2:d8:12:af:75:34:64:70:e1:61:5d:b1:f6:3d:
73:4d:a4:5f:ce:06:17:0d:f8:f6:7e:a4:70:db:4d:7a:5b:08:
25:96:96:27:af:82:e7:4e:2e:b5:ff:ab:14:0c:d9:e7:4b:ac:
a4:a6:2c:98:b4:46:7c:ab:17:4e:f9:b0:1c:83:65:af:43:21:
31:a6:95:95:8d:cb:4d:93:8f:bd:61:92:70:65:9f:1f:18:b3:
10:18:f9:c5:73:54:4d:2c:2c:7e:06:5b:65:eb:04:66:7b:44:
34:23:ae:95:08:96:f0:17:9b:45:46:e2:1d:40:fc:cc:e0:f7:
29:25:d9:3c:32:19:2b:71:24:f1:eb:9e:ba:af:f8:73:f9:48:
38:6d:78:b7:51:59:6a:67:41:70:7b:ea:0a:0d:84:26:98:77:
0d:ff:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:31 2025 by rpki-client