Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/D0577EEABC9B11EC8CE50536C4F9AE02.roa
File: D0577EEABC9B11EC8CE50536C4F9AE02.roa (raw, json)
Hash identifier: GG4g30CfkPCh9sciBB3qIupgmPzVCCcFZY0AkRt1duk=
Subject key identifier: 4A:75:07:8B:71:90:0C:55:66:72:0B:81:3B:BF:7F:43:DB:1A:10:59
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0508
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/D0577EEABC9B11EC8CE50536C4F9AE02.roa
Signing time: Fri 15 Apr 2022 09:09:55 +0000
ROA not before: Fri 15 Apr 2022 09:09:55 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.70.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.73.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.100.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.98.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Apr 15 09:09:55 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=62593662-2931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:ca:64:4b:82:33:47:b4:80:58:ee:2d:4e:
2f:d5:df:73:f4:53:5c:e3:6a:b5:0d:0e:21:64:bf:
7f:39:9c:c5:f1:c7:21:3a:9a:09:e1:c3:3d:7d:96:
fc:c4:64:ff:a0:69:c4:ff:b5:a9:cc:eb:fe:88:b0:
8b:20:64:7b:fd:b6:6d:68:16:3a:1a:52:3b:6c:33:
81:cc:10:75:ec:ce:24:ec:f5:d8:fc:1c:b6:6f:cd:
17:bc:6b:01:ba:b8:ae:6e:52:37:06:86:ab:3c:75:
3f:7c:5f:bf:cc:f4:82:95:09:69:08:19:a6:35:bf:
89:cd:ab:d8:6e:bc:95:79:e2:e8:f3:79:a1:45:bb:
e3:cd:78:93:42:f1:c2:64:67:69:3f:ff:46:e9:f9:
96:e8:0e:96:28:68:6d:ed:c6:bc:94:8f:7b:2b:16:
c0:26:dd:63:40:a4:a4:77:b8:0e:7d:51:7a:6d:52:
31:4d:2d:84:ca:3f:05:18:a7:75:8a:25:f4:1d:cd:
d5:4d:94:cb:d2:f2:e8:ac:8b:11:82:ac:87:8e:e0:
e8:2b:b3:02:56:74:86:a2:4b:d3:85:db:4a:64:af:
4b:b2:c6:4e:c8:72:9c:84:c7:09:9b:a8:6c:31:14:
68:bd:48:ae:9d:05:a4:cf:5e:0f:1f:b5:ec:29:ab:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:07:8B:71:90:0C:55:66:72:0B:81:3B:BF:7F:43:DB:1A:10:59
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/D0577EEABC9B11EC8CE50536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.70.255
164.90.72.0-164.90.74.255
164.90.76.0-164.90.86.255
164.90.89.0-164.90.98.255
164.90.100.0/23
164.90.104.0/21
164.90.113.0-164.90.117.255
164.90.122.0/24
164.90.127.0/24
202.63.32.0/19
202.168.96.0-202.168.110.255
202.168.112.0/20
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:cb:2f:21:45:45:c5:c4:6e:02:fd:0d:f2:cb:91:82:37:ec:
4f:80:f3:9b:ac:c8:71:fa:86:6d:f8:77:86:51:55:18:eb:a8:
fa:5e:68:b7:00:1a:a2:06:2b:dc:93:36:f3:36:8d:e1:06:5f:
9c:98:c0:1e:f7:2c:62:e7:82:ee:64:8f:b3:1a:d9:d2:42:d4:
8c:37:fe:97:e0:e7:28:93:7b:ae:5c:5b:ba:cb:2d:cd:37:34:
db:42:87:27:71:52:3f:88:19:88:e1:e1:2f:95:0c:c7:84:9b:
77:67:51:7e:58:37:5a:a0:01:fe:ac:88:89:33:fa:5f:00:b0:
c3:01:65:d7:2e:aa:53:da:a4:c6:3e:9d:36:af:3f:69:eb:65:
63:14:6f:2b:d4:c6:64:25:ab:29:f2:bd:51:aa:31:97:3d:f4:
53:07:f5:54:31:1d:81:e9:8a:7e:a4:8e:dd:24:bf:52:99:ba:
29:d7:e2:64:ff:6d:50:88:4b:a1:0e:7f:1c:68:79:fa:a9:f0:
12:16:96:98:06:91:8d:28:19:a7:66:91:83:c6:66:c7:ea:31:
b7:6f:c9:25:f1:a3:2e:4e:6c:c6:5a:d3:fb:4d:bd:30:61:04:
b5:09:30:d3:96:46:f9:e7:7d:c1:f5:e4:93:0a:21:f8:e1:0b:
a3:e6:e7:49
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG
RDJCRTgyNjAwHhcNMjIwNDE1MDkwOTU1WhcNMjIwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjU5MzY2Mi0yOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuf7KZEuCM0e0gFjuLU4v1d9z9FNc42q1DQ4hZL9/OZzF8cchOpoJ4cM9fZb8
xGT/oGnE/7WpzOv+iLCLIGR7/bZtaBY6GlI7bDOBzBB17M4k7PXY/By2b80XvGsB
uriublI3BoarPHU/fF+/zPSClQlpCBmmNb+JzavYbryVeeLo83mhRbvjzXiTQvHC
ZGdpP/9G6fmW6A6WKGht7ca8lI97KxbAJt1jQKSkd7gOfVF6bVIxTS2Eyj8FGKd1
iiX0Hc3VTZTL0vLorIsRgqyHjuDoK7MCVnSGokvThdtKZK9LssZOyHKchMcJm6hs
MRRovUiunQWkz14PH7XsKauIEQIDAQABo4IDNjCCAzIwHQYDVR0OBBYEFEp1B4tx
kAxVZnILgTu/f0PbGhBZMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRDA1NzdFRUFC
QzlCMTFFQzhDRTUwNTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgb8GCCsGAQUFBwEHAQH/
BIGvMIGsMIGEBAIAATB+AwQBZ4tIMAwDBAakWkADBACkWkYwDAMEA6RaSAMEAKRa
SjAMAwQCpFpMAwQApFpWMAwDBACkWlkDBACkWmIDBAGkWmQDBAOkWmgwDAMEAKRa
cQMEAaRadAMEAKRaegMEAKRafwMEBco/IDAMAwQFyqhgAwQAyqhuAwQEyqhwMCME
AgACMB0DBwAkBO/AAVUwEgMHACQE78ACNQMHACQE78ACNjANBgkqhkiG9w0BAQsF
AAOCAQEAl8svIUVFxcRuAv0N8suRgjfsT4Dzm6zIcfqGbfh3hlFVGOuo+l5otwAa
ogYr3JM28zaN4QZfnJjAHvcsYueC7mSPsxrZ0kLUjDf+l+DnKJN7rlxbusstzTc0
20KHJ3FSP4gZiOHhL5UMx4Sbd2dRflg3WqAB/qyIiTP6XwCwwwFl1y6qU9qkxj6d
Nq8/aetlYxRvK9TGZCWrKfK9Uaoxlz30Uwf1VDEdgemKfqSO3SS/Upm6KdfiZP9t
UIhLoQ5/HGh5+qnwEhaWmAaRjSgZp2aRg8Zmx+oxt2/JJfGjLk5sxlrT+029MGEE
tQkw05ZG+ed9wfXkkwoh+OELo+bnSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org