Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/37BE0C46F48F11EBBDB05E64C4F9AE02.roa
File: 37BE0C46F48F11EBBDB05E64C4F9AE02.roa (raw, json)
Hash identifier: +dWWYxlc1RGv56+Ht6PqTiQVWqevtlaIvdXxhNpS5OQ=
Subject key identifier: 02:21:2A:B8:6D:FD:C1:14:BB:79:31:DB:A5:3B:6F:D0:BF:F2:D1:A1
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0AE9
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/37BE0C46F48F11EBBDB05E64C4F9AE02.roa
Signing time: Thu 16 Mar 2023 03:26:40 +0000
ROA not before: Thu 16 Mar 2023 03:26:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 23
103.6.208.0/23 maxlen: 24
103.6.210.0/24 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5200::/48 maxlen: 48
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Mar 16 03:26:40 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64128c70-c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:50:6f:58:ef:c5:72:27:a9:cd:2e:d0:c5:
26:f5:22:f8:13:b9:27:ed:ad:6e:8d:29:a1:6f:ed:
28:ea:37:43:7c:0a:90:0e:1e:a4:7a:79:2d:7d:1d:
88:2b:cb:ba:1a:14:df:46:bc:23:bc:40:9b:46:c8:
dc:eb:07:0a:5e:fb:39:ad:a4:e9:f6:58:25:b1:ab:
4b:44:54:d8:83:56:08:0d:36:1a:4e:0b:c5:01:47:
f8:07:44:b4:89:2f:1f:68:14:27:e1:d9:47:59:83:
6c:d7:e4:db:a5:a6:42:7f:c7:7a:50:eb:cf:7e:3a:
24:93:5a:02:12:26:61:bf:1f:3b:07:cf:33:87:fa:
fa:ab:64:6d:f0:8a:cc:a9:34:b6:4b:5f:9b:f1:c0:
ee:28:3a:81:ac:42:a2:8a:31:eb:37:52:0b:65:e0:
81:b1:21:75:f8:33:f1:01:64:b1:8a:94:91:d0:e5:
67:38:45:c6:55:74:0d:93:a3:3e:d2:61:2b:32:15:
a1:3f:7d:f9:aa:59:2e:b3:1d:87:30:6a:64:8e:44:
03:b9:88:eb:4c:e3:54:00:8e:42:b6:db:e8:51:4a:
ce:62:cc:85:bb:5e:9c:da:c4:5e:c3:55:98:39:ee:
31:e2:81:38:da:10:0d:1e:67:e3:23:01:c2:f1:c6:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:2A:B8:6D:FD:C1:14:BB:79:31:DB:A5:3B:6F:D0:BF:F2:D1:A1
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/37BE0C46F48F11EBBDB05E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
4e:4a:82:58:f7:72:cf:db:4c:28:41:28:d9:fa:1f:0c:b2:6a:
bf:1a:60:a9:3e:fe:35:f9:b8:11:95:0c:31:e5:b2:24:a8:6b:
0b:de:09:2c:94:d3:4f:17:d0:d8:95:e1:6a:10:90:6c:e3:39:
bc:ce:cd:0e:2f:b9:21:07:71:15:a4:a6:6d:d6:e9:5d:a5:b0:
38:c9:db:60:31:dc:6e:1b:13:5f:ae:8f:2f:a3:49:47:51:88:
06:0a:70:b4:17:47:ff:ee:8c:34:42:c6:05:90:20:77:18:06:
ce:f7:92:67:fb:88:a4:56:c6:7b:9c:cc:8f:5d:b9:f3:25:fe:
0d:f3:88:6a:fa:de:95:86:60:f3:b7:fd:72:f1:0d:ad:3c:da:
5c:31:62:c8:f5:b8:d8:1b:23:55:da:00:61:f9:2e:5a:50:0a:
7d:66:5e:dd:64:8b:0a:14:e5:76:9d:ff:85:c3:a4:7d:70:64:
ca:12:57:13:dc:b4:1a:6d:26:48:f7:29:26:d1:b1:f3:b5:2c:
6d:99:cb:db:ea:af:2f:41:dc:19:be:0c:91:26:de:59:d9:6b:
da:dd:97:dd:67:a6:72:d5:1e:5a:db:33:b8:e1:9c:db:7e:c8:
41:55:9a:08:82:4d:d5:87:40:7f:06:c1:43:ab:41:6f:e0:66:
22:cb:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org