Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/34642158F1C711ECBBC34549C4F9AE02.roa
File: 34642158F1C711ECBBC34549C4F9AE02.roa (raw, json)
Hash identifier: Vz4/FxzUZSJ43de06cdE7cfBQBuxyFpFFdPGdLarEVs=
Subject key identifier: 31:9B:FD:C8:33:04:A8:3E:FB:AC:C5:6B:6C:9C:79:EF:CA:A7:BA:D0
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 06B7
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/34642158F1C711ECBBC34549C4F9AE02.roa
Signing time: Wed 22 Jun 2022 01:04:02 +0000
ROA not before: Wed 22 Jun 2022 01:04:02 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24093
IP address blocks: 125.63.0.0/19 maxlen: 19
125.63.8.0/24 maxlen: 24
125.63.9.0/24 maxlen: 24
125.63.12.0/24 maxlen: 24
125.63.15.0/24 maxlen: 24
125.63.19.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.8.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.14.0/24 maxlen: 24
125.253.16.0/24 maxlen: 24
125.253.25.0/24 maxlen: 24
125.253.28.0/23 maxlen: 23
125.253.28.0/24 maxlen: 24
125.253.29.0/24 maxlen: 24
125.253.32.0/24 maxlen: 24
125.253.33.0/24 maxlen: 24
125.253.34.0/24 maxlen: 24
125.253.35.0/24 maxlen: 24
125.253.41.0/24 maxlen: 24
125.253.43.0/24 maxlen: 24
125.253.44.0/24 maxlen: 24
125.253.45.0/24 maxlen: 24
125.253.46.0/24 maxlen: 24
125.253.47.0/24 maxlen: 24
125.253.48.0/24 maxlen: 24
125.253.50.0/23 maxlen: 23
125.253.50.0/24 maxlen: 24
125.253.51.0/24 maxlen: 24
125.253.60.0/24 maxlen: 24
125.253.61.0/24 maxlen: 24
125.253.96.0/20 maxlen: 20
125.253.97.0/24 maxlen: 24
125.253.98.0/24 maxlen: 24
125.253.99.0/24 maxlen: 24
125.253.100.0/24 maxlen: 24
125.253.101.0/24 maxlen: 24
125.253.102.0/24 maxlen: 24
125.253.103.0/24 maxlen: 24
125.253.106.0/24 maxlen: 24
125.253.107.0/24 maxlen: 24
125.253.109.0/24 maxlen: 24
125.253.110.0/24 maxlen: 24
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.164.0/24 maxlen: 24
202.171.165.0/24 maxlen: 24
202.171.167.0/24 maxlen: 24
202.171.169.0/24 maxlen: 24
202.171.170.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.176.0/24 maxlen: 24
202.171.177.0/24 maxlen: 24
202.171.178.0/24 maxlen: 24
202.171.179.0/24 maxlen: 24
202.171.184.0/23 maxlen: 23
202.171.186.0/23 maxlen: 23
202.171.189.0/24 maxlen: 24
202.171.190.0/24 maxlen: 24
202.171.191.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
223.27.66.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Jun 22 01:04:02 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62b26a82-8178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:43:27:a9:26:e4:30:60:3d:53:ef:61:91:
4b:79:fb:bc:1c:51:57:3a:ff:9e:ba:6d:98:a3:ae:
3a:9d:d7:3f:39:c3:cc:67:60:e6:6c:9a:c1:6f:99:
75:3c:24:08:65:27:55:ac:ae:76:48:ae:ca:a8:5b:
61:7c:e6:63:e4:88:e2:99:8a:59:79:2a:b3:d2:b8:
bf:4c:65:26:1e:24:ab:76:6a:43:e7:5e:3e:76:77:
4a:be:df:b5:40:4d:5a:ba:46:c0:49:84:0c:31:ca:
e9:bb:ee:59:8c:3e:2a:0c:3d:b7:a5:cd:3e:20:ea:
8e:c0:76:01:61:bf:4e:f7:02:c7:0e:81:cb:9d:5b:
8a:fc:14:fb:76:00:d8:ef:77:4f:9e:fb:ac:b4:f9:
be:f4:c0:d2:fb:cd:6b:35:c7:d3:8b:7c:63:fa:83:
fa:d1:b5:43:ee:03:3a:f3:6d:51:33:5e:0f:02:f3:
14:20:52:d2:38:eb:d0:85:56:de:ca:3c:9b:fb:27:
99:34:79:a3:d9:d6:4f:e7:b6:a4:c5:f8:6c:7c:4a:
60:b4:22:bb:23:35:65:8d:f3:56:ac:77:2e:1e:b6:
b9:c2:27:ab:65:14:db:bf:d5:52:5b:76:39:16:46:
59:c5:40:ab:5e:20:d4:4b:6b:fa:a2:d1:c3:d2:bb:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:FD:C8:33:04:A8:3E:FB:AC:C5:6B:6C:9C:79:EF:CA:A7:BA:D0
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/34642158F1C711ECBBC34549C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.63.0.0/19
125.253.0.0/18
125.253.96.0/20
202.171.160.0/19
203.25.102.0/24
223.27.66.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:08:54:5d:e0:18:7d:40:d3:bf:ef:7e:02:5e:f8:74:d0:43:
f2:ab:ca:c7:6a:a0:63:e6:04:9b:c1:e2:89:44:52:e1:05:99:
8b:d2:7a:93:99:90:b9:74:33:c6:a0:d9:ca:89:6b:26:0e:03:
80:2f:82:25:9d:28:63:15:2d:ca:06:82:80:d4:1a:a5:9c:6f:
fe:92:b7:e1:8f:cd:00:3e:58:d1:c6:7b:01:c9:3b:d4:81:ec:
d2:c2:b3:7e:6a:07:9c:63:df:d3:01:4a:0f:e3:72:58:a7:fc:
58:29:ea:71:7a:6e:61:d1:34:20:db:b9:61:cb:c6:fe:43:96:
66:48:38:96:aa:93:b4:e4:f1:fc:e8:8e:66:63:89:9d:67:5b:
50:6e:33:f0:f7:bf:2b:75:eb:1a:d9:1e:d0:f5:8f:9e:5c:e0:
92:a4:2a:15:b9:04:34:95:c9:39:27:cd:52:ad:aa:eb:cd:a2:
05:bf:44:2d:0a:80:5a:50:0a:d3:12:0e:35:75:1f:45:d3:18:
b3:ae:ca:13:69:51:79:08:cb:28:26:aa:8d:1f:03:01:f1:71:
75:e8:8a:3f:6a:b8:ab:4f:d3:76:41:cd:70:4f:c3:9f:66:c4:
b1:98:4d:55:ab:73:98:41:86:26:83:06:f9:b7:12:da:65:0e:
b9:f1:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org