Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/36519E4E7FE611EC93C2C864C4F9AE02.roa
File: 36519E4E7FE611EC93C2C864C4F9AE02.roa (raw, json)
Hash identifier: 3Yqx86iBNGmcpYHkUtN51Rve8nKd4kzCfCoxakp9vdY=
Subject key identifier: 09:D1:63:2B:D1:B1:0D:69:93:47:8B:0B:B6:56:8C:BE:AF:0C:1C:7E
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0589
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/36519E4E7FE611EC93C2C864C4F9AE02.roa
Signing time: Fri 28 Jan 2022 02:58:47 +0000
ROA not before: Fri 28 Jan 2022 02:58:47 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 38195
IP address blocks: 27.122.112.0/20 maxlen: 22
27.122.112.0/22 maxlen: 24
27.122.116.0/23 maxlen: 24
27.122.120.0/21 maxlen: 24
43.245.152.0/24 maxlen: 24
43.245.153.0/24 maxlen: 24
43.245.154.0/23 maxlen: 24
103.7.48.0/22 maxlen: 24
103.21.0.0/22 maxlen: 23
103.21.2.0/24 maxlen: 24
103.29.86.0/23 maxlen: 23
103.42.226.0/23 maxlen: 23
103.200.13.0/24 maxlen: 24
103.200.14.0/24 maxlen: 24
103.200.15.0/24 maxlen: 24
103.248.16.0/22 maxlen: 22
111.118.192.0/21 maxlen: 24
114.129.184.0/21 maxlen: 21
116.255.0.0/18 maxlen: 24
119.15.72.0/21 maxlen: 21
122.199.0.0/18 maxlen: 18
123.176.119.0/24 maxlen: 24
125.63.0.0/19 maxlen: 19
125.63.24.0/24 maxlen: 24
125.63.25.0/24 maxlen: 24
125.63.26.0/24 maxlen: 24
125.63.27.0/24 maxlen: 24
125.63.28.0/24 maxlen: 24
125.63.29.0/24 maxlen: 24
125.63.30.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.0.0/24 maxlen: 24
125.253.1.0/24 maxlen: 24
125.253.2.0/24 maxlen: 24
125.253.3.0/24 maxlen: 24
125.253.4.0/24 maxlen: 24
125.253.10.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.15.0/24 maxlen: 24
125.253.20.0/24 maxlen: 24
125.253.22.0/23 maxlen: 24
125.253.28.0/23 maxlen: 24
125.253.39.0/24 maxlen: 24
125.253.54.0/24 maxlen: 24
125.253.56.0/24 maxlen: 24
125.253.57.0/24 maxlen: 24
125.253.96.0/20 maxlen: 24
202.63.64.0/20 maxlen: 20
202.65.64.0/19 maxlen: 19
202.70.129.0/24 maxlen: 24
202.80.144.0/21 maxlen: 21
202.80.151.0/24 maxlen: 24
202.86.112.0/24 maxlen: 24
202.86.119.0/24 maxlen: 24
202.90.206.0/23 maxlen: 23
202.130.192.0/23 maxlen: 23
202.130.194.0/24 maxlen: 24
202.130.196.0/22 maxlen: 22
202.130.197.0/24 maxlen: 24
202.130.200.0/23 maxlen: 23
202.130.202.0/24 maxlen: 24
202.130.204.0/24 maxlen: 24
202.130.207.0/24 maxlen: 24
202.130.208.0/22 maxlen: 22
202.130.212.0/23 maxlen: 23
202.130.215.0/24 maxlen: 24
202.130.216.0/24 maxlen: 24
202.130.218.0/23 maxlen: 23
202.130.220.0/22 maxlen: 22
202.137.160.0/20 maxlen: 24
202.144.160.0/20 maxlen: 20
202.144.160.0/24 maxlen: 24
202.144.161.0/24 maxlen: 24
202.144.162.0/24 maxlen: 24
202.144.165.0/24 maxlen: 24
202.144.168.0/24 maxlen: 24
202.144.170.0/24 maxlen: 24
202.144.171.0/24 maxlen: 24
202.144.172.0/22 maxlen: 22
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.166.0/24 maxlen: 24
202.171.174.0/24 maxlen: 24
202.171.182.0/23 maxlen: 24
202.177.40.0/24 maxlen: 24
202.177.41.0/24 maxlen: 24
202.177.42.0/24 maxlen: 24
202.177.43.0/24 maxlen: 24
203.14.230.0/24 maxlen: 24
203.24.182.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
203.32.82.0/24 maxlen: 24
203.33.254.0/24 maxlen: 24
203.123.96.0/19 maxlen: 19
203.132.64.0/19 maxlen: 19
203.132.64.0/24 maxlen: 24
203.132.65.0/24 maxlen: 24
203.132.66.0/24 maxlen: 24
203.132.67.0/24 maxlen: 24
203.132.68.0/24 maxlen: 24
203.132.69.0/24 maxlen: 24
203.132.70.0/24 maxlen: 24
203.132.71.0/24 maxlen: 24
203.132.72.0/24 maxlen: 24
203.132.73.0/24 maxlen: 24
203.132.88.0/21 maxlen: 24
203.153.16.0/22 maxlen: 22
203.153.16.0/24 maxlen: 24
203.153.18.0/24 maxlen: 24
210.5.32.0/21 maxlen: 21
223.27.64.0/22 maxlen: 22
2401:d000::/28 maxlen: 28
2404:c600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Jan 28 02:58:47 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61f35be7-7da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:5f:a6:8d:aa:01:71:db:d6:56:4e:54:ef:
5a:ba:01:f3:71:ef:11:fe:60:f2:8c:2f:d0:b0:c8:
1a:bc:29:30:a2:18:ae:82:47:33:0d:31:1d:e8:52:
6f:99:55:78:ee:65:b4:9a:15:86:44:df:87:84:10:
27:00:67:63:1d:da:7d:78:a6:48:70:60:54:3d:ac:
ec:b8:54:23:da:49:07:3c:05:51:78:3b:3e:2a:34:
24:c8:17:c3:54:67:d2:21:80:30:d7:cd:c3:8c:ad:
c1:86:b2:69:48:00:5e:44:92:ad:80:eb:95:b7:fc:
29:e4:b0:16:46:7c:6f:c1:af:9d:21:84:cc:94:40:
12:38:f9:3e:6c:97:27:bb:31:b0:7b:df:8d:1d:1f:
9f:2a:80:f2:43:5d:a9:04:65:d0:8e:03:c5:c4:17:
f4:53:43:4e:c8:63:37:be:b0:ba:d0:ca:f8:05:7e:
4c:46:31:57:4c:20:de:9f:16:53:27:9f:c5:f9:ed:
61:d0:33:6a:4e:ce:3a:3b:9a:64:7b:05:e7:79:04:
a4:69:2f:85:f7:69:bf:f6:c6:d5:14:79:8f:f7:56:
82:3e:47:eb:36:36:4f:dd:83:d2:ca:6f:2c:75:57:
3f:a9:57:d4:71:28:d0:20:e3:07:24:bb:cb:c3:72:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:63:2B:D1:B1:0D:69:93:47:8B:0B:B6:56:8C:BE:AF:0C:1C:7E
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/36519E4E7FE611EC93C2C864C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.122.112.0/20
43.245.152.0/22
103.7.48.0/22
103.21.0.0/22
103.29.86.0/23
103.42.226.0/23
103.200.13.0-103.200.15.255
103.248.16.0/22
111.118.192.0/21
114.129.184.0/21
116.255.0.0/18
119.15.72.0/21
122.199.0.0/18
123.176.119.0/24
125.63.0.0/19
125.253.0.0/18
125.253.96.0/20
202.63.64.0/20
202.65.64.0/19
202.70.129.0/24
202.80.144.0/21
202.86.112.0/24
202.86.119.0/24
202.90.206.0/23
202.130.192.0-202.130.194.255
202.130.196.0-202.130.202.255
202.130.204.0/24
202.130.207.0-202.130.213.255
202.130.215.0-202.130.216.255
202.130.218.0-202.130.223.255
202.137.160.0/20
202.144.160.0/20
202.171.160.0/19
202.177.40.0/22
203.14.230.0/24
203.24.182.0/24
203.25.102.0/24
203.32.82.0/24
203.33.254.0/24
203.123.96.0/19
203.132.64.0/19
203.153.16.0/22
210.5.32.0/21
223.27.64.0/22
IPv6:
2401:d000::/28
2404:c600::/32
Signature Algorithm: sha256WithRSAEncryption
65:d2:9d:7d:e8:5d:b3:2f:8e:98:48:67:dd:02:51:1a:4c:e8:
fd:2b:22:d2:42:ac:36:d3:95:b4:01:cb:7c:41:12:7a:94:17:
61:74:6e:86:73:e8:2e:36:f6:f5:8e:34:06:c0:44:1a:4f:a3:
4c:13:db:aa:3b:6d:0a:90:6a:a1:de:e4:1f:d0:00:bc:1f:a8:
26:a2:7a:60:be:07:85:ba:a3:41:e0:ec:37:98:52:18:23:50:
14:da:0a:db:04:85:14:35:a3:3b:86:a7:bd:19:f5:dc:17:b3:
79:24:96:04:90:92:09:4b:4c:d5:a6:81:d1:23:2f:15:b7:87:
92:4f:9e:97:3c:98:54:93:b3:f8:48:a7:d4:fa:b4:69:75:b6:
98:99:dc:ef:5d:a6:83:dd:14:b3:79:bd:e3:61:e7:32:fc:f3:
67:98:df:cc:b0:4c:93:1b:e0:49:07:e0:a6:b8:81:37:f1:63:
6d:a5:ec:de:0b:43:81:97:9e:1c:09:9c:c0:42:bb:45:20:4d:
0f:0d:1c:98:c5:93:ac:fa:60:a4:7c:d9:51:6a:a2:d2:c3:8d:
34:b4:63:6d:96:a8:37:a6:e7:aa:1e:0c:0d:64:14:59:65:95:
e2:e8:97:ca:c6:2d:00:60:ac:fe:f5:f3:24:7e:15:1a:49:f2:
54:4d:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org