Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BC303C66B1AD11ECA2E52046C4F9AE02.roa
File: BC303C66B1AD11ECA2E52046C4F9AE02.roa (raw, json)
Hash identifier: S6oAMPqKauL7cQ5EHdfti04YtyXlmrI5rA7FZwr4h2g=
Subject key identifier: A3:9F:A1:0F:F5:5E:45:EA:84:39:E9:52:47:18:C9:1E:33:AF:4B:29
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3178
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BC303C66B1AD11ECA2E52046C4F9AE02.roa
Signing time: Fri 01 Apr 2022 17:40:24 +0000
ROA not before: Fri 01 Apr 2022 17:40:24 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/22 maxlen: 22
103.207.84.0/24 maxlen: 24
116.90.99.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.118.0/24 maxlen: 24
116.90.119.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.121.0/24 maxlen: 24
116.90.122.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.151.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.155.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:203::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12664 (0x3178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Apr 1 17:40:24 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62473908-7fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:d6:c7:e7:22:cf:1f:11:f7:20:43:bd:ce:
e3:03:3b:98:04:28:15:9b:51:cb:7e:ed:2b:f9:8a:
e4:7d:43:58:89:07:91:7a:92:64:2c:29:91:96:19:
28:a2:48:2f:a8:57:cc:1b:ff:fc:c9:72:9e:0a:d9:
9c:b3:67:a7:03:a0:98:44:c4:02:f9:97:0a:7a:e4:
4d:6f:a8:7c:b1:db:4c:ea:8d:23:e4:9b:41:f4:0b:
7e:8c:cf:0e:70:b9:d8:8f:ff:2d:62:5f:1b:62:24:
ea:fc:b3:45:88:dc:d8:a3:1b:1c:c0:4f:cf:cc:ca:
e3:50:a8:d5:fd:c7:b1:fa:c2:8b:03:5b:eb:2b:e7:
02:5e:26:a7:0d:84:70:a1:b6:bd:34:37:e6:1e:43:
d4:87:f5:98:17:35:f0:2b:5d:ca:dc:18:6a:9a:8c:
f5:f3:80:1e:b6:fa:b3:3c:d0:b3:12:5b:14:51:e6:
47:b0:92:ff:5c:e5:5d:e6:1c:54:d4:b8:3c:3e:6f:
5e:8c:14:93:cf:35:5c:b5:e4:a1:93:86:e8:46:48:
78:16:c1:a0:4e:7f:5d:59:02:d9:4b:48:42:e9:2c:
b8:ed:2a:45:b1:25:ac:7f:62:ac:58:43:e4:10:6a:
0c:b1:3f:dc:19:cf:21:04:6f:ed:31:a6:27:c6:0a:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:A1:0F:F5:5E:45:EA:84:39:E9:52:47:18:C9:1E:33:AF:4B:29
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BC303C66B1AD11ECA2E52046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/22
116.90.99.0/24
116.90.106.0-116.90.111.255
116.90.118.0-116.90.127.255
121.46.64.0/24
121.46.66.0/24
202.69.32.0/19
202.142.144.0/20
IPv6:
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
68:1a:21:d4:16:96:b0:0c:8f:e1:84:f4:d8:2b:76:a5:e5:a3:
49:6a:a0:4c:88:01:1b:69:f3:65:38:ed:18:31:1f:3b:72:fc:
c5:1e:f1:45:4c:21:53:04:94:d5:94:5b:6d:9e:bb:77:2e:3f:
17:d0:fa:8e:95:8d:67:8c:84:a9:7c:bb:2c:ff:77:64:74:2a:
fe:59:f4:0c:95:29:cd:48:0f:48:82:e6:fd:b7:8d:e1:a4:ab:
9b:45:ef:b0:d3:3b:ff:32:45:be:a1:07:66:e3:69:a9:83:07:
c6:ee:68:50:56:33:fc:0c:45:c2:43:01:db:f4:77:60:1a:7f:
ac:bb:4b:cb:ee:9a:48:37:0e:70:92:92:f9:78:a8:a7:1f:f4:
a7:df:8e:16:46:78:62:bc:ca:b7:bf:25:9b:d2:24:e8:e2:4b:
f5:7e:39:84:e1:8b:15:d6:59:81:5b:3d:18:7b:ad:90:04:fa:
93:7e:0c:47:4d:3e:0e:96:93:ef:15:74:7f:86:9c:36:78:c5:
cc:47:5d:70:1d:1f:5b:53:1f:63:84:5b:33:05:e9:fe:07:f7:
55:29:35:b8:9f:38:79:4e:81:3a:71:29:6c:c9:0f:ea:4d:7f:
4f:23:c3:c7:b7:f7:22:23:ed:05:6d:22:2c:59:b8:0b:3f:e2:
d7:93:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org