Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/B056EFE080FA11EC96280855C4F9AE02.roa
File: B056EFE080FA11EC96280855C4F9AE02.roa (raw, json)
Hash identifier: 1XfwzK6EfGw1l0eRf/MRMRwyDbECcPKPoQZCwBQVHKc=
Subject key identifier: BF:FC:DC:8B:4F:40:AD:A8:97:F9:E7:73:83:78:AB:42:A3:5C:FB:66
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0A65
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/B056EFE080FA11EC96280855C4F9AE02.roa
Signing time: Fri 24 Feb 2023 20:27:16 +0000
ROA not before: Fri 24 Feb 2023 20:27:16 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 136224
IP address blocks: 103.84.36.0/22 maxlen: 22
103.84.36.0/23 maxlen: 23
103.84.36.0/24 maxlen: 24
103.84.37.0/24 maxlen: 24
103.84.38.0/23 maxlen: 23
103.84.38.0/24 maxlen: 24
103.84.39.0/24 maxlen: 24
113.212.108.0/22 maxlen: 22
113.212.108.0/23 maxlen: 23
113.212.108.0/24 maxlen: 24
113.212.109.0/24 maxlen: 24
113.212.110.0/24 maxlen: 24
113.212.111.0/24 maxlen: 24
2400:9940::/32 maxlen: 32
2400:9940::/36 maxlen: 36
2400:9940::/40 maxlen: 40
2400:9940:1000::/36 maxlen: 36
2400:9940:1000::/48 maxlen: 48
2400:9940:1001::/48 maxlen: 48
2400:9940:1002::/48 maxlen: 48
2400:9940:2000::/36 maxlen: 36
2400:9940:2000::/40 maxlen: 40
2400:9940:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Feb 24 20:27:16 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f91da4-5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:5c:cd:c7:42:4c:2d:33:f4:32:50:08:e1:
34:2b:60:d8:53:07:0b:df:d7:73:98:3d:67:22:e1:
71:26:9e:c7:95:fc:67:1d:87:b9:8b:f5:e4:65:7c:
af:e2:1c:3a:7c:73:30:14:70:9e:8d:0e:b6:92:80:
8f:31:01:e1:28:bb:5e:14:33:03:3d:11:38:d5:33:
f6:eb:eb:cd:13:54:5f:5b:fc:86:6d:76:70:6c:f7:
29:fd:d2:f2:71:f5:65:f0:0e:85:3d:c8:79:da:91:
06:ee:8b:81:e7:a6:f1:af:19:1e:8e:3e:83:f7:38:
e9:13:6a:a4:38:d8:15:be:65:35:a5:1e:74:39:3b:
d0:84:b7:d6:ec:a1:f9:3e:09:1a:9a:c2:9e:01:93:
b2:4d:58:e5:46:87:dd:30:f6:f1:9b:dd:a2:2f:82:
af:59:a5:ac:d2:68:8e:9d:e8:74:65:1d:98:5a:1c:
8d:52:0d:70:ba:fd:b8:c4:58:7d:da:45:5d:78:8e:
32:e6:ac:81:23:10:d8:f0:84:3a:e3:7c:7c:1d:0d:
a4:7e:21:72:ce:64:52:f0:ca:b7:1c:59:f0:ca:bb:
55:89:01:07:07:f6:69:bb:c9:ad:e4:1e:19:87:64:
4e:c9:f2:eb:0c:47:84:40:cc:59:90:98:50:78:4d:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:DC:8B:4F:40:AD:A8:97:F9:E7:73:83:78:AB:42:A3:5C:FB:66
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/B056EFE080FA11EC96280855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.36.0/22
113.212.108.0/22
IPv6:
2400:9940::/32
Signature Algorithm: sha256WithRSAEncryption
14:e7:99:d4:86:ad:fd:95:03:26:64:e7:93:f3:cf:21:07:89:
82:68:ae:db:03:0d:3d:5d:b8:cb:4c:c8:de:f7:ca:4e:d0:e9:
eb:58:d6:58:1e:2b:e5:fc:7a:40:41:63:53:06:75:7c:2a:c6:
bd:d1:ca:68:27:6e:fe:ea:5f:96:fa:21:db:69:00:03:88:5b:
3d:24:16:04:50:50:17:60:3c:67:3d:d7:59:49:bf:2b:93:82:
02:40:2c:74:34:a1:b4:4b:de:f1:d5:4c:85:25:55:6d:d1:a5:
d4:97:f5:8d:94:01:a8:1a:8c:11:3c:e1:ef:6e:88:eb:16:9b:
3a:85:4d:6f:2b:c2:06:30:61:8d:12:a5:f5:6d:22:52:bb:d2:
2a:c9:ea:51:68:e2:91:66:5e:89:d3:00:e5:4f:b9:06:73:0a:
fa:79:03:64:e8:12:4b:e8:c0:0a:69:77:05:31:f4:e1:8b:c9:
21:e8:44:b7:43:46:40:81:64:94:4f:2b:fc:c5:74:78:57:2e:
88:82:67:bc:5a:fa:00:25:ff:19:f8:77:31:22:a1:0d:83:b0:
6c:af:88:4e:a9:c0:70:95:79:7b:29:8b:db:cb:23:1e:ae:68:
dd:36:00:d2:17:dc:4d:ef:f5:69:e7:b3:c6:af:ac:97:af:de:
97:53:d3:42
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF
QzQ1RUVGNjcwHhcNMjMwMjI0MjAyNzE2WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Y5MWRhNC01YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsFczcdCTC0z9DJQCOE0K2DYUwcL39dzmD1nIuFxJp7HlfxnHYe5i/XkZXyv
4hw6fHMwFHCejQ62koCPMQHhKLteFDMDPRE41TP26+vNE1RfW/yGbXZwbPcp/dLy
cfVl8A6FPch52pEG7ouB56bxrxkejj6D9zjpE2qkONgVvmU1pR50OTvQhLfW7KH5
PgkamsKeAZOyTVjlRofdMPbxm92iL4KvWaWs0miOneh0ZR2YWhyNUg1wuv24xFh9
2kVdeI4y5qyBIxDY8IQ643x8HQ2kfiFyzmRS8Mq3HFnwyrtViQEHB/Zpu8mt5B4Z
h2ROyfLrDEeEQMxZkJhQeE38owIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFL/83ItP
QK2ol/nnc4N4q0KjXPtmMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz
OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQ0NjMvQTRENDQwMEMxMzlGMTFFQUE2NTgyODYwQzRGOUFFMDIvQjA1NkVGRTA4
MEZBMTFFQzk2MjgwODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnVCQDBAJx1GwwDQQCAAIwBwMFACQAmUAwDQYJKoZIhvcN
AQELBQADggEBABTnmdSGrf2VAyZk55PzzyEHiYJortsDDT1duMtMyN73yk7Q6etY
1lgeK+X8ekBBY1MGdXwqxr3Rymgnbv7qX5b6IdtpAAOIWz0kFgRQUBdgPGc911lJ
vyuTggJALHQ0obRL3vHVTIUlVW3RpdSX9Y2UAagajBE84e9uiOsWmzqFTW8rwgYw
YY0SpfVtIlK70irJ6lFo4pFmXonTAOVPuQZzCvp5A2ToEkvowAppdwUx9OGLySHo
RLdDRkCBZJRPK/zFdHhXLoiCZ7xa+gAl/xn4dzEioQ2DsGyviE6pwHCVeXspi9vL
Ix6uaN02ANIX3E3v9Wnns8avrJev3pdT00I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org