Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2DF28318368D11ED9458DD49C4F9AE02.roa
File: 2DF28318368D11ED9458DD49C4F9AE02.roa (raw, json)
Hash identifier: 1YI4vmNFrplahH8AKYM3vQp3L2N6TATezJ3qbZ5LGrU=
Subject key identifier: 88:1D:D4:12:DF:EB:F5:11:30:42:D2:36:94:6F:A7:0B:AC:AB:6D:BF
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 267E
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2DF28318368D11ED9458DD49C4F9AE02.roa
Signing time: Sat 17 Sep 2022 13:32:31 +0000
ROA not before: Sat 17 Sep 2022 13:32:31 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 45458
IP address blocks: 27.100.40.0/21 maxlen: 24
27.100.41.0/29 maxlen: 29
49.0.112.0/20 maxlen: 20
49.0.112.0/21 maxlen: 24
49.0.120.0/21 maxlen: 24
49.229.16.0/20 maxlen: 24
49.229.32.0/19 maxlen: 19
49.229.32.0/20 maxlen: 24
49.229.48.0/24 maxlen: 24
49.229.49.0/24 maxlen: 24
49.229.50.0/24 maxlen: 24
49.229.53.0/24 maxlen: 24
49.229.54.0/24 maxlen: 24
49.229.55.0/24 maxlen: 24
49.229.56.0/24 maxlen: 24
49.229.57.0/24 maxlen: 24
49.229.58.0/24 maxlen: 24
49.229.59.0/24 maxlen: 24
49.229.60.0/24 maxlen: 24
49.229.61.0/24 maxlen: 24
49.229.62.0/24 maxlen: 24
49.229.63.0/24 maxlen: 24
49.229.64.0/19 maxlen: 19
49.229.64.0/24 maxlen: 24
49.229.65.0/24 maxlen: 24
49.229.66.0/24 maxlen: 24
49.229.67.0/24 maxlen: 24
49.229.69.0/24 maxlen: 24
49.229.70.0/24 maxlen: 24
49.229.71.0/24 maxlen: 24
49.229.72.0/24 maxlen: 24
49.229.73.0/24 maxlen: 24
49.229.74.0/24 maxlen: 24
49.229.76.0/24 maxlen: 24
49.229.77.0/24 maxlen: 24
49.229.78.0/24 maxlen: 24
49.229.79.0/24 maxlen: 24
49.229.80.0/24 maxlen: 24
49.229.81.0/24 maxlen: 24
49.229.82.0/24 maxlen: 24
49.229.83.0/24 maxlen: 24
49.229.84.0/24 maxlen: 24
49.229.85.0/24 maxlen: 24
49.229.86.0/24 maxlen: 24
49.229.87.0/24 maxlen: 24
49.229.96.0/20 maxlen: 20
49.229.96.0/24 maxlen: 24
49.229.97.0/24 maxlen: 24
49.229.98.0/24 maxlen: 24
49.229.99.0/24 maxlen: 24
49.229.102.0/24 maxlen: 24
49.229.103.0/24 maxlen: 24
49.229.104.0/24 maxlen: 24
49.229.105.0/24 maxlen: 24
49.229.106.0/24 maxlen: 24
49.229.107.0/24 maxlen: 24
49.229.108.0/24 maxlen: 24
49.229.109.0/24 maxlen: 24
49.229.110.0/24 maxlen: 24
49.229.152.0/21 maxlen: 21
49.229.152.0/23 maxlen: 23
49.229.154.0/24 maxlen: 24
49.229.155.0/24 maxlen: 24
49.229.156.0/24 maxlen: 24
49.229.157.0/24 maxlen: 24
49.229.158.0/24 maxlen: 24
49.229.159.0/24 maxlen: 24
49.231.0.0/19 maxlen: 24
49.231.32.0/22 maxlen: 24
49.231.36.0/22 maxlen: 24
49.231.40.0/22 maxlen: 24
49.231.64.0/20 maxlen: 24
49.231.80.0/21 maxlen: 24
49.231.88.0/21 maxlen: 24
49.231.128.0/21 maxlen: 21
49.231.131.0/24 maxlen: 24
49.231.135.0/24 maxlen: 24
49.231.136.0/21 maxlen: 24
49.231.144.0/20 maxlen: 24
49.231.160.0/19 maxlen: 24
49.231.192.0/18 maxlen: 24
58.64.0.0/19 maxlen: 23
58.64.0.0/20 maxlen: 24
58.64.16.0/21 maxlen: 24
58.64.25.0/24 maxlen: 24
58.64.26.0/23 maxlen: 24
58.64.28.0/22 maxlen: 24
58.64.32.0/20 maxlen: 24
103.3.65.0/24 maxlen: 24
103.3.66.0/23 maxlen: 24
103.48.12.0/24 maxlen: 24
110.49.0.0/17 maxlen: 23
110.49.0.0/18 maxlen: 24
110.49.64.0/20 maxlen: 24
110.49.80.0/21 maxlen: 24
110.49.88.0/24 maxlen: 24
110.49.90.0/23 maxlen: 24
110.49.92.0/22 maxlen: 24
110.49.96.0/19 maxlen: 24
110.49.144.0/24 maxlen: 24
110.49.150.0/24 maxlen: 24
110.49.169.0/24 maxlen: 24
115.178.56.0/24 maxlen: 24
115.178.58.0/24 maxlen: 24
119.31.4.0/22 maxlen: 22
119.31.64.0/24 maxlen: 24
202.80.224.0/19 maxlen: 23
202.80.225.0/24 maxlen: 24
202.80.226.0/23 maxlen: 24
202.80.228.0/22 maxlen: 24
202.80.232.0/21 maxlen: 24
202.80.240.0/20 maxlen: 24
2405:9800:7::/48 maxlen: 48
2405:9800:9::/48 maxlen: 48
2405:9800:a::/48 maxlen: 48
2405:9800:9802::/48 maxlen: 48
2405:9800:9803::/48 maxlen: 48
2405:9800:9811::/48 maxlen: 48
2405:9800:c000::/36 maxlen: 47
2405:9800:c000::/37 maxlen: 48
2405:9800:c800::/40 maxlen: 48
2405:9800:c900::/45 maxlen: 48
2405:9800:c908::/46 maxlen: 48
2405:9800:c90d::/48 maxlen: 48
2405:9800:c90e::/47 maxlen: 48
2405:9800:c910::/44 maxlen: 48
2405:9800:c920::/43 maxlen: 48
2405:9800:c940::/42 maxlen: 48
2405:9800:c980::/41 maxlen: 48
2405:9800:ca00::/39 maxlen: 48
2405:9800:cc00::/38 maxlen: 48
2405:9800:d000::/36 maxlen: 48
2405:9800:f000::/36 maxlen: 36
2405:9800:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9854 (0x267e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 17 13:32:31 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6325cc6f-d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:f0:4d:1d:a8:24:23:48:c9:ec:a1:b9:4a:
b5:32:2e:16:df:5f:0d:d8:3e:bd:4d:fd:08:1c:40:
df:74:5e:fd:e1:b7:28:06:e1:60:64:33:74:3a:26:
55:73:b2:1b:0c:54:19:e9:d8:58:fc:6e:b4:6f:a7:
e3:97:6d:c0:4b:3c:89:93:f0:c7:da:a7:f4:96:c2:
1a:6f:6a:d1:3a:07:e9:5a:73:c0:d7:ff:21:8a:28:
61:99:75:08:9f:f9:1c:57:5e:65:ee:89:a1:ce:73:
48:e8:d7:75:21:31:df:6a:19:3c:a0:14:06:ec:b9:
ac:40:19:38:82:0d:a3:2e:a3:38:26:e4:6c:d9:89:
9f:87:27:61:57:c0:1e:85:11:d4:ad:45:a3:7e:56:
ed:c5:2d:eb:14:b4:b2:1c:19:d1:f2:e6:29:28:3d:
18:6c:4c:76:48:cb:86:1f:32:b7:de:0d:43:01:6d:
69:78:72:40:94:82:76:35:8d:c6:f0:e0:d0:a2:a1:
6c:8f:ee:ba:1c:6e:c6:4d:70:72:a2:da:60:4d:9c:
41:e1:fb:c7:3e:c0:cd:ae:0e:6e:98:ab:61:3b:15:
ab:62:82:a2:57:5a:88:b2:6d:d8:18:98:e9:dd:aa:
5b:19:65:06:11:17:41:31:17:c0:16:1a:97:08:54:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:D4:12:DF:EB:F5:11:30:42:D2:36:94:6F:A7:0B:AC:AB:6D:BF
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2DF28318368D11ED9458DD49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.40.0/21
49.0.112.0/20
49.229.16.0-49.229.111.255
49.229.152.0/21
49.231.0.0-49.231.43.255
49.231.64.0/19
49.231.128.0/17
58.64.0.0-58.64.47.255
103.3.65.0-103.3.67.255
103.48.12.0/24
110.49.0.0/17
110.49.144.0/24
110.49.150.0/24
110.49.169.0/24
115.178.56.0/24
115.178.58.0/24
119.31.4.0/22
119.31.64.0/24
202.80.224.0/19
IPv6:
2405:9800:7::/48
2405:9800:9::-2405:9800:a:ffff:ffff:ffff:ffff:ffff
2405:9800:9802::/47
2405:9800:9811::/48
2405:9800:c000::/35
2405:9800:f000::/36
Signature Algorithm: sha256WithRSAEncryption
5a:7e:d4:87:fe:2a:0f:72:1b:31:8b:de:0e:ff:46:ba:62:16:
22:b6:43:5f:d8:96:5c:eb:f2:60:d0:5a:29:0f:ea:21:91:0c:
de:99:7a:e1:32:76:db:35:07:ea:ea:fc:63:8b:5e:d2:cb:b8:
42:45:97:03:cf:ea:32:60:38:a7:88:aa:06:ac:ea:e3:4e:9d:
3b:6e:3d:3b:11:00:7b:a3:08:aa:cb:4f:b9:1e:a9:f3:79:8d:
cc:9f:54:95:b1:02:63:03:9b:a5:ed:b7:e9:02:25:9f:f2:25:
88:e3:88:47:40:05:4d:c8:a6:5f:ea:62:e4:65:b3:5e:c6:e4:
67:52:76:55:3e:fe:ac:dc:b4:70:f9:95:2f:ab:bf:72:f0:e6:
cd:54:82:15:26:25:1b:ff:c4:f3:96:fc:b1:c4:c7:9c:c5:de:
d7:76:00:72:15:94:d7:e1:66:f9:95:fe:89:26:a1:a3:ec:f9:
98:ce:33:64:a7:da:20:30:99:31:2d:ce:a4:71:8d:b3:c3:35:
0a:81:68:33:a7:cc:5d:25:78:b7:69:ba:7d:19:78:c3:e3:bc:
c7:a6:0d:28:7a:70:d3:26:59:c5:ad:fd:13:f4:42:f2:b2:75:
bd:f8:8c:02:0f:c4:f1:dd:30:90:cc:65:0a:99:1d:98:83:cf:
d5:46:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org