Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/99F1974CAF4D11EC8CB13F3FC4F9AE02.roa
File: 99F1974CAF4D11EC8CB13F3FC4F9AE02.roa (raw, json)
Hash identifier: vxs3CXM4o/pKxAVEs40v2EIKTqJNL99zfTF597uGHdI=
Subject key identifier: 84:0D:C2:5C:97:9A:4A:E6:0C:22:13:59:97:C0:E2:FA:6A:B8:2F:76
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 09DB
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/99F1974CAF4D11EC8CB13F3FC4F9AE02.roa
Signing time: Mon 06 Mar 2023 06:07:53 +0000
ROA not before: Mon 06 Mar 2023 06:07:52 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 136395
IP address blocks: 103.86.108.0/22 maxlen: 22
103.86.108.0/23 maxlen: 23
103.86.108.0/24 maxlen: 24
103.86.109.0/24 maxlen: 24
103.86.110.0/24 maxlen: 24
103.86.111.0/24 maxlen: 24
202.181.4.0/22 maxlen: 22
202.181.4.0/23 maxlen: 23
202.181.4.0/24 maxlen: 24
202.181.5.0/24 maxlen: 24
202.181.6.0/23 maxlen: 23
202.181.6.0/24 maxlen: 24
202.181.7.0/24 maxlen: 24
2400:bcc0::/32 maxlen: 32
2400:bcc0::/36 maxlen: 36
2400:bcc0:1::/48 maxlen: 48
2400:bcc0:2::/48 maxlen: 48
2400:bcc0:3::/48 maxlen: 48
2400:bcc0:4::/48 maxlen: 48
2400:bcc0:1000::/36 maxlen: 36
2400:bcc0:1000::/48 maxlen: 48
2400:bcc0:1001::/48 maxlen: 48
2400:bcc0:1002::/48 maxlen: 48
2400:bcc0:1003::/48 maxlen: 48
2400:bcc0:1004::/48 maxlen: 48
2400:bcc0:1005::/48 maxlen: 48
2400:bcc0:1006::/48 maxlen: 48
2400:bcc0:1007::/48 maxlen: 48
2400:bcc0:1008::/48 maxlen: 48
2400:bcc0:1009::/48 maxlen: 48
2400:bcc0:100a::/48 maxlen: 48
2400:bcc0:100b::/48 maxlen: 48
2400:bcc0:100c::/48 maxlen: 48
2400:bcc0:100d::/48 maxlen: 48
2400:bcc0:100e::/48 maxlen: 48
2400:bcc0:100f::/48 maxlen: 48
2400:bcc0:1010::/48 maxlen: 48
2400:bcc0:1011::/48 maxlen: 48
2400:bcc0:1012::/48 maxlen: 48
2400:bcc0:1013::/48 maxlen: 48
2400:bcc0:1014::/48 maxlen: 48
2400:bcc0:1015::/48 maxlen: 48
2400:bcc0:1016::/48 maxlen: 48
2400:bcc0:1017::/48 maxlen: 48
2400:bcc0:1018::/48 maxlen: 48
2400:bcc0:1019::/48 maxlen: 48
2400:bcc0:101a::/48 maxlen: 48
2400:bcc0:101b::/48 maxlen: 48
2400:bcc0:101c::/48 maxlen: 48
2400:bcc0:101d::/48 maxlen: 48
2400:bcc0:101e::/48 maxlen: 48
2400:bcc0:101f::/48 maxlen: 48
2400:bcc0:2000::/36 maxlen: 36
2400:bcc0:3000::/36 maxlen: 36
2400:bcc0:3001::/48 maxlen: 48
2400:bcc0:3002::/48 maxlen: 48
2400:bcc0:3003::/48 maxlen: 48
2400:bcc0:3004::/48 maxlen: 48
2400:bcc0:3005::/48 maxlen: 48
2400:bcc0:3006::/48 maxlen: 48
2400:bcc0:300b::/48 maxlen: 48
2400:bcc0:300c::/48 maxlen: 48
2400:bcc0:3010::/48 maxlen: 48
2400:bcc0:3011::/48 maxlen: 48
2400:bcc0:3012::/48 maxlen: 48
2400:bcc0:3013::/48 maxlen: 48
2400:bcc0:3014::/48 maxlen: 48
2400:bcc0:3015::/48 maxlen: 48
2400:bcc0:3016::/48 maxlen: 48
2400:bcc0:4000::/36 maxlen: 36
2400:bcc0:5000::/36 maxlen: 36
2400:bcc0:6000::/36 maxlen: 36
2400:bcc0:7000::/36 maxlen: 36
2400:bcc0:8000::/36 maxlen: 36
2400:bcc0:9000::/36 maxlen: 36
2400:bcc0:a000::/36 maxlen: 36
2400:bcc0:b000::/36 maxlen: 36
2400:bcc0:c000::/36 maxlen: 36
2400:bcc0:d000::/36 maxlen: 36
2400:bcc0:e000::/36 maxlen: 36
2400:bcc0:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Mar 6 06:07:52 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=64058338-67b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:00:b6:84:c2:82:b8:db:90:82:26:f7:cb:
ee:c6:50:98:52:5d:40:1b:0f:b1:c3:32:80:4c:8b:
89:bd:92:3d:44:07:83:2f:26:49:8f:46:b0:0f:07:
dd:f6:64:21:ba:e4:c0:79:bc:7f:ed:b1:a8:11:94:
f9:69:e0:28:8a:75:35:ca:c4:ab:da:8b:b2:c8:60:
a7:4b:87:a2:cf:bd:61:75:b3:7b:60:2b:35:09:d8:
20:99:46:14:f2:62:cc:56:a0:d5:11:05:c8:c0:f1:
71:08:ff:e2:92:0b:7f:64:00:3d:52:bc:85:27:14:
42:8a:e8:66:56:46:42:c8:a0:15:30:a7:42:0d:d9:
bd:b2:b6:75:67:7e:25:16:ed:e0:40:39:85:a2:14:
ca:a5:61:78:a9:19:04:02:49:14:ce:68:f0:01:70:
e8:70:3b:35:98:ef:70:d7:90:62:90:14:66:6f:82:
36:9b:c6:c9:2a:5c:dc:aa:c0:f2:12:13:24:30:09:
f0:43:ef:22:40:da:e0:16:46:72:b7:2f:44:2e:a9:
c8:20:dd:f1:4d:3b:68:82:59:f3:33:3d:08:54:77:
28:f9:bf:2c:b9:5a:68:24:90:53:07:90:77:f8:af:
54:88:71:e0:dc:ac:0e:47:71:2a:08:95:d0:ad:85:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:C2:5C:97:9A:4A:E6:0C:22:13:59:97:C0:E2:FA:6A:B8:2F:76
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/99F1974CAF4D11EC8CB13F3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.108.0/22
202.181.4.0/22
IPv6:
2400:bcc0::/32
Signature Algorithm: sha256WithRSAEncryption
86:eb:8d:6e:fb:d5:b8:1f:39:a5:dd:5b:c8:03:13:04:ce:e3:
7b:63:2e:49:a6:27:89:9b:93:b7:fe:58:5d:5d:94:92:58:92:
56:4e:b4:20:8e:fd:b6:0f:2e:46:07:f6:69:12:8b:74:81:f7:
17:58:92:5f:c8:4d:c5:ac:8a:e0:fc:17:81:18:03:e5:37:60:
4b:06:fb:5b:33:11:62:5b:98:5d:8f:d6:be:75:0b:ae:1f:e6:
d0:23:34:54:51:54:0f:e1:99:66:5b:50:4e:ca:3f:1b:0b:ca:
20:35:5e:e4:9a:19:a1:c7:ed:cb:70:20:45:b6:2e:cc:00:6b:
44:ea:9c:24:25:6b:af:e2:69:5c:bc:27:5c:d8:b0:7d:85:57:
01:99:ad:3e:e5:3f:c8:2a:d2:35:8b:8b:b9:f2:68:7d:03:87:
85:4e:7c:4c:a8:d7:9c:f8:61:5e:81:b4:3c:88:cc:f4:9d:e3:
cc:8c:16:6d:a5:90:9b:da:5f:97:31:2d:91:16:33:6e:76:53:
46:06:8a:7d:7b:84:62:d9:b6:95:d6:71:19:77:7c:da:b3:21:
67:19:8c:65:43:72:21:e8:d1:e0:a4:c4:d5:37:f3:e4:d1:09:
38:a4:96:f4:92:68:87:32:dc:4b:8e:2d:3f:cb:ba:43:38:27:
1d:44:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org