Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/30832184992D11EDB3DE6E21C4F9AE02.roa
File: 30832184992D11EDB3DE6E21C4F9AE02.roa (raw, json)
Hash identifier: xOHtfg6Oos9bbnTX+fwHBkuLAeJ7RIji10EVOtL5sVs=
Subject key identifier: AB:99:50:76:93:17:DB:77:A1:D5:36:C9:A7:B9:01:84:6F:CE:74:75
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 112F
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/30832184992D11EDB3DE6E21C4F9AE02.roa
Signing time: Sat 21 Jan 2023 02:05:03 +0000
ROA not before: Sat 21 Jan 2023 02:05:03 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 9902
IP address blocks: 103.23.136.0/22 maxlen: 22
103.23.136.0/24 maxlen: 24
103.23.137.0/24 maxlen: 24
103.23.138.0/24 maxlen: 24
103.23.139.0/24 maxlen: 24
103.25.92.0/24 maxlen: 24
103.25.93.0/24 maxlen: 24
103.25.94.0/24 maxlen: 24
103.25.95.0/24 maxlen: 24
103.244.248.0/22 maxlen: 22
103.244.248.0/24 maxlen: 24
103.244.249.0/24 maxlen: 24
103.244.250.0/24 maxlen: 24
103.244.251.0/24 maxlen: 24
110.235.220.0/22 maxlen: 22
110.235.220.0/24 maxlen: 24
110.235.221.0/24 maxlen: 24
110.235.222.0/24 maxlen: 24
110.235.223.0/24 maxlen: 24
123.108.248.0/21 maxlen: 21
123.108.248.0/24 maxlen: 24
123.108.249.0/24 maxlen: 24
123.108.250.0/24 maxlen: 24
123.108.251.0/24 maxlen: 24
123.108.252.0/24 maxlen: 24
123.108.253.0/24 maxlen: 24
123.108.254.0/23 maxlen: 24
124.199.112.0/20 maxlen: 20
124.199.112.0/24 maxlen: 24
124.199.113.0/24 maxlen: 24
124.199.114.0/24 maxlen: 24
124.199.115.0/24 maxlen: 24
124.199.116.0/24 maxlen: 24
124.199.117.0/24 maxlen: 24
124.199.118.0/24 maxlen: 24
124.199.119.0/24 maxlen: 24
124.199.120.0/24 maxlen: 24
124.199.121.0/24 maxlen: 24
124.199.122.0/24 maxlen: 24
124.199.123.0/24 maxlen: 24
124.199.124.0/24 maxlen: 24
124.199.125.0/24 maxlen: 24
124.199.126.0/24 maxlen: 24
124.199.127.0/24 maxlen: 24
163.53.196.0/22 maxlen: 22
163.53.196.0/24 maxlen: 24
163.53.197.0/24 maxlen: 24
163.53.198.0/24 maxlen: 24
163.53.199.0/24 maxlen: 24
202.124.32.0/24 maxlen: 24
202.124.33.0/24 maxlen: 24
202.124.34.0/24 maxlen: 24
202.124.35.0/24 maxlen: 24
202.124.36.0/24 maxlen: 24
202.124.37.0/24 maxlen: 24
202.124.38.0/24 maxlen: 24
202.124.39.0/24 maxlen: 24
202.124.40.0/24 maxlen: 24
202.124.41.0/24 maxlen: 24
202.124.42.0/24 maxlen: 24
202.124.43.0/24 maxlen: 24
202.124.44.0/24 maxlen: 24
202.124.45.0/24 maxlen: 24
202.124.46.0/24 maxlen: 24
202.124.47.0/24 maxlen: 24
203.80.160.0/21 maxlen: 21
203.80.161.0/24 maxlen: 24
203.80.162.0/24 maxlen: 24
203.80.163.0/24 maxlen: 24
203.80.164.0/24 maxlen: 24
203.80.165.0/24 maxlen: 24
203.80.166.0/24 maxlen: 24
203.80.167.0/24 maxlen: 24
203.167.16.0/22 maxlen: 22
203.167.16.0/24 maxlen: 24
203.167.17.0/24 maxlen: 24
203.167.18.0/23 maxlen: 24
2402:5100::/32 maxlen: 32
2402:5100::/48 maxlen: 48
2402:5100:1::/48 maxlen: 48
2402:5100:2::/48 maxlen: 48
2402:5100:3::/48 maxlen: 48
2402:5100:4::/48 maxlen: 48
2402:5100:5::/48 maxlen: 48
2402:5100:6::/47 maxlen: 47
2402:5100:8::/45 maxlen: 45
2402:5100:10::/44 maxlen: 44
2402:5100:20::/43 maxlen: 43
2402:5100:40::/42 maxlen: 42
2402:5100:80::/41 maxlen: 41
2402:5100:100::/40 maxlen: 40
2402:5100:200::/39 maxlen: 39
2402:5100:400::/38 maxlen: 38
2402:5100:800::/37 maxlen: 37
2402:5100:1000::/36 maxlen: 36
2402:5100:2000::/35 maxlen: 35
2402:5100:4000::/34 maxlen: 34
2402:5100:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4399 (0x112f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Jan 21 02:05:03 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63cb484f-f762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:af:a1:e6:e9:b7:62:8f:26:6e:b6:08:52:
e5:b3:e0:7c:26:2b:40:2b:7f:1b:0d:9a:d4:d5:99:
78:2b:a7:79:42:f4:20:26:b8:19:6d:22:7d:63:97:
75:f7:6c:34:1d:2e:0b:35:5c:2b:2e:7b:22:ae:56:
15:43:c4:6a:94:70:12:bf:0e:e3:99:63:f6:b5:0f:
a7:53:f2:00:d9:74:c6:e4:aa:0e:9e:dd:a1:74:c7:
15:06:27:cd:b3:75:41:a9:78:2d:3b:d4:69:78:d6:
06:86:4c:de:d7:91:0a:b7:c1:91:02:17:81:b8:51:
da:35:79:a4:bc:39:52:38:21:38:f7:1e:11:3b:f7:
9e:0e:dd:86:c2:3c:38:52:0a:c0:ce:d3:f5:2f:70:
96:71:ca:8f:92:56:a2:3e:d2:9c:46:9a:3d:a3:d0:
d1:05:fa:32:ad:34:22:e2:49:d6:5a:cb:96:86:c2:
b4:06:f3:11:9b:4a:ae:39:98:0e:d0:35:c8:f3:78:
63:bc:26:48:57:9a:0e:ad:c4:a0:0f:b5:8f:3f:1a:
0a:b8:36:b4:0c:80:b7:7d:47:04:30:92:2c:ec:d5:
f6:59:a5:54:9f:c4:e8:6d:7f:9a:a4:4f:2e:4f:04:
be:63:22:12:2e:30:14:65:30:97:1d:f8:a7:ba:17:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:50:76:93:17:DB:77:A1:D5:36:C9:A7:B9:01:84:6F:CE:74:75
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/30832184992D11EDB3DE6E21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.136.0/22
103.25.92.0/22
103.244.248.0/22
110.235.220.0/22
123.108.248.0/21
124.199.112.0/20
163.53.196.0/22
202.124.32.0/20
203.80.160.0/21
203.167.16.0/22
IPv6:
2402:5100::/32
Signature Algorithm: sha256WithRSAEncryption
83:da:a7:72:e4:73:e4:c1:b7:56:a6:3e:e6:b9:e1:2b:73:a3:
4d:c0:2c:cc:83:88:ea:6f:a2:02:b6:6f:d5:04:5c:9d:2b:31:
4a:d2:03:23:47:5d:aa:a3:c1:d9:b9:a9:d2:b4:36:00:46:66:
1a:7a:9c:02:fb:19:a4:90:b6:a9:29:d5:64:46:bf:61:43:bf:
4a:0c:e8:4e:50:1d:ac:33:b2:be:f0:a8:7e:1e:1d:0e:81:8a:
bb:9c:73:78:1a:1b:46:18:de:99:12:3f:a7:91:25:14:ee:15:
9d:70:4f:7b:b2:ae:a6:3f:4d:45:d2:ba:1d:1c:e6:67:41:a4:
12:70:7e:50:9e:5d:3c:4b:a6:34:2c:ea:86:5e:5a:d1:3b:3e:
c6:d9:95:ec:83:02:2c:08:64:74:74:b2:87:66:5b:4a:ba:57:
0d:9f:64:c1:54:70:2a:52:ff:c6:9c:b7:71:29:11:81:cb:5f:
63:ad:da:62:3b:e6:ef:7f:c7:09:92:3e:62:e5:6d:26:23:0c:
c9:1f:a6:98:9b:35:11:1d:b7:64:5a:2f:a5:d5:09:07:c1:25:
e4:d4:81:ea:54:3d:52:f7:f2:9f:d9:d4:7a:af:80:57:50:57:
30:af:76:ed:66:30:1e:b1:14:bf:e5:5b:69:df:16:d2:3e:d4:
99:1f:4b:93
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgICES8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4
QzU3RkQ2NkMwHhcNMjMwMTIxMDIwNTAzWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02M2NiNDg0Zi1mNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5KWvoebpt2KPJm62CFLls+B8JitAK38bDZrU1Zl4K6d5QvQgJrgZbSJ9Y5d1
92w0HS4LNVwrLnsirlYVQ8RqlHASvw7jmWP2tQ+nU/IA2XTG5KoOnt2hdMcVBifN
s3VBqXgtO9RpeNYGhkze15EKt8GRAheBuFHaNXmkvDlSOCE49x4RO/eeDt2Gwjw4
UgrAztP1L3CWccqPklaiPtKcRpo9o9DRBfoyrTQi4knWWsuWhsK0BvMRm0quOZgO
0DXI83hjvCZIV5oOrcSgD7WPPxoKuDa0DIC3fUcEMJIs7NX2WaVUn8TobX+apE8u
TwS+YyISLjAUZTCXHfinuhecCQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFKuZUHaT
F9t3odU2yae5AYRvznR1MB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQUFCODAyRThDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvMzA4MzIxODQ5
OTJEMTFFREIzREU2RTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E
VTBTMEIEAgABMDwDBAJnF4gDBAJnGVwDBAJn9PgDBAJu69wDBAN7bPgDBAR8x3AD
BAKjNcQDBATKfCADBAPLUKADBALLpxAwDQQCAAIwBwMFACQCUQAwDQYJKoZIhvcN
AQELBQADggEBAIPap3Lkc+TBt1amPua54Stzo03ALMyDiOpvogK2b9UEXJ0rMUrS
AyNHXaqjwdm5qdK0NgBGZhp6nAL7GaSQtqkp1WRGv2FDv0oM6E5QHawzsr7wqH4e
HQ6Birucc3gaG0YY3pkSP6eRJRTuFZ1wT3uyrqY/TUXSuh0c5mdBpBJwflCeXTxL
pjQs6oZeWtE7PsbZleyDAiwIZHR0sodmW0q6Vw2fZMFUcCpS/8act3EpEYHLX2Ot
2mI75u9/xwmSPmLlbSYjDMkfppibNREdt2RaL6XVCQfBJeTUgepUPVL38p/Z1Hqv
gFdQVzCvdu1mMB6xFL/lW2nfFtI+1JkfS5M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org