Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3B58CD3AA56611EDB9AB4423C4F9AE02.roa
File: 3B58CD3AA56611EDB9AB4423C4F9AE02.roa (raw, json)
Hash identifier: KuEHHzRheMZ81i2Z259Df8+j0dvaGj0omIq+NdzanB0=
Subject key identifier: 82:3B:AC:5F:AF:A9:CA:15:A8:04:39:7B:EE:05:DD:81:8B:E9:40:B2
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 1DC7
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3B58CD3AA56611EDB9AB4423C4F9AE02.roa
Signing time: Sun 04 Jun 2023 07:54:53 +0000
ROA not before: Sun 04 Jun 2023 07:54:52 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 17501
IP address blocks: 27.34.0.0/17 maxlen: 24
103.211.148.0/22 maxlen: 22
103.211.148.0/23 maxlen: 24
103.254.184.0/22 maxlen: 22
103.254.184.0/24 maxlen: 24
103.254.185.0/24 maxlen: 24
103.254.186.0/24 maxlen: 24
103.254.187.0/24 maxlen: 24
124.41.192.0/18 maxlen: 20
124.41.192.0/19 maxlen: 24
124.41.224.0/20 maxlen: 24
124.41.240.0/22 maxlen: 24
124.41.248.0/21 maxlen: 21
124.41.248.0/22 maxlen: 22
124.41.248.0/23 maxlen: 24
124.41.250.0/24 maxlen: 24
124.41.251.0/24 maxlen: 24
124.41.252.0/24 maxlen: 24
124.41.253.0/24 maxlen: 24
124.41.254.0/24 maxlen: 24
124.41.255.0/24 maxlen: 24
139.5.68.0/22 maxlen: 24
139.5.72.0/22 maxlen: 22
139.5.72.0/24 maxlen: 24
139.5.73.0/24 maxlen: 24
139.5.74.0/24 maxlen: 24
139.5.75.0/24 maxlen: 24
202.79.32.0/19 maxlen: 24
202.166.192.0/19 maxlen: 24
2400:1a00::/32 maxlen: 32
2400:1a00::/48 maxlen: 48
2400:1a00:4::/48 maxlen: 48
2400:1a00:8000::/48 maxlen: 48
2400:1a00:8002::/48 maxlen: 48
2400:1a00:8004::/48 maxlen: 48
2400:1a00:8010::/48 maxlen: 48
2400:1a00:b010::/48 maxlen: 48
2400:1a00:b011::/48 maxlen: 48
2400:1a00:b012::/48 maxlen: 48
2400:1a00:b013::/48 maxlen: 48
2400:1a00:b020::/48 maxlen: 48
2400:1a00:b021::/48 maxlen: 48
2400:1a00:b022::/48 maxlen: 48
2400:1a00:b030::/48 maxlen: 48
2400:1a00:b031::/48 maxlen: 48
2400:1a00:b032::/48 maxlen: 48
2400:1a00:b040::/48 maxlen: 48
2400:1a00:b041::/48 maxlen: 48
2400:1a00:b050::/48 maxlen: 48
2400:1a00:b051::/48 maxlen: 48
2400:1a00:b060::/48 maxlen: 48
2400:1a00:b061::/48 maxlen: 48
2400:1a00:b111::/48 maxlen: 48
2400:1a00:b112::/48 maxlen: 48
2400:1a00:b1a6::/48 maxlen: 48
2400:1a00:b1af::/48 maxlen: 48
2400:1a00:b1ba::/48 maxlen: 48
2400:1a00:b1c0::/48 maxlen: 48
2400:1a00:b1c1::/48 maxlen: 48
2400:1a00:b1e0::/48 maxlen: 48
2400:1a00:b1e1::/48 maxlen: 48
2400:1a00:ba10::/48 maxlen: 48
2400:1a00:baa0::/48 maxlen: 48
2400:1a00:baa1::/48 maxlen: 48
2400:1a00:bb10::/48 maxlen: 48
2400:1a00:bb20::/48 maxlen: 48
2400:1a00:bb21::/48 maxlen: 48
2400:1a00:bc10::/48 maxlen: 48
2400:1a00:bc11::/48 maxlen: 48
2400:1a00:bd11::/48 maxlen: 48
2400:1a00:bd12::/48 maxlen: 48
2400:1a00:bd20::/48 maxlen: 48
2400:1a00:bd21::/48 maxlen: 48
2400:1a00:bda0::/48 maxlen: 48
2400:1a00:bde0::/48 maxlen: 48
2400:1a00:bde1::/48 maxlen: 48
2400:1a00:efff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7623 (0x1dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E
Validity
Not Before: Jun 4 07:54:52 2023 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=647c434c-636f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:d0:3b:78:75:d0:df:e2:06:33:37:7e:63:
c0:41:cf:53:21:dc:96:02:86:a5:0e:a6:71:71:58:
0d:11:84:34:f7:9c:6d:ca:a4:e9:71:df:d4:c4:fe:
54:3d:c3:3c:82:14:29:72:ea:e7:23:b5:9d:81:fb:
fe:41:72:a0:46:3d:a0:7e:32:a1:06:a0:ef:2b:ba:
c7:a6:9b:b8:b2:87:d2:5e:1a:55:70:e4:59:34:39:
cd:dd:86:0b:e1:1b:d7:33:c3:47:a9:dc:79:65:03:
7e:82:e1:92:26:c6:a3:fc:1f:78:87:d1:fd:19:e3:
91:83:fc:33:7d:a2:71:84:3c:0c:89:02:c5:0c:f4:
81:25:e8:8d:df:d5:b6:f0:8e:bc:33:6a:96:3a:76:
82:a9:1d:68:59:23:d8:b2:54:f1:96:27:20:93:7e:
c2:5d:8b:b5:98:31:5c:92:0f:73:1d:db:9c:6e:d1:
01:b4:f5:55:26:64:47:1b:9d:6c:f8:ec:4c:15:ee:
09:ad:f5:12:27:be:80:01:a6:f3:5e:42:4d:c7:f3:
bb:7f:d7:1e:c7:82:74:fb:3d:37:b3:9c:10:8a:e9:
e2:0f:a7:3a:06:d9:18:05:59:cd:3e:94:ca:95:63:
02:3b:02:b6:3c:17:1c:8c:8f:dc:2e:ed:b2:1c:96:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:AC:5F:AF:A9:CA:15:A8:04:39:7B:EE:05:DD:81:8B:E9:40:B2
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3B58CD3AA56611EDB9AB4423C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.34.0.0/17
103.211.148.0/22
103.254.184.0/22
124.41.192.0/18
139.5.68.0-139.5.75.255
202.79.32.0/19
202.166.192.0/19
IPv6:
2400:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
30:3f:60:ec:b2:64:4a:ca:70:cc:47:60:ea:85:f3:f1:39:05:
94:8c:ba:85:a0:e6:65:0f:28:95:a2:3c:56:73:a5:da:6d:79:
31:b3:05:bf:6b:6c:c6:2d:c7:ff:e5:e0:e4:17:d3:9b:b2:9e:
65:6f:c9:2a:1b:76:e8:47:b6:6f:67:d6:29:32:81:4e:0d:db:
e4:8c:9d:f4:da:32:ae:3f:d9:9a:bd:16:a9:67:f8:72:e9:04:
9b:b8:7c:76:d6:ff:e6:9d:fa:bc:a5:bf:d3:67:36:17:6b:79:
84:24:e9:19:e2:c5:0f:56:be:41:22:15:93:1e:16:59:54:6b:
00:87:05:19:21:bb:1f:43:e1:ec:46:9f:da:fd:1f:71:8a:1d:
99:9b:ac:50:bf:ea:8e:69:38:85:87:a3:4f:88:41:7f:96:69:
33:7f:48:e6:ae:e8:13:9f:b8:9a:95:d3:19:ef:01:27:c3:18:
2b:d3:89:35:b3:2b:ee:e1:54:d1:3b:b5:21:f4:e1:98:3e:43:
8e:4b:3d:aa:ba:0c:bb:45:f9:5f:18:37:8d:8d:24:05:6c:c6:
a0:76:11:44:25:ec:cb:e4:cb:4d:be:bf:da:50:bc:86:65:ae:
6b:78:d2:20:a2:6a:50:12:0c:c6:32:8c:f9:96:ac:05:17:fc:
fe:6f:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:17 2025 by rpki-client