Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB2B8A78DC7611EDBEA50049C4F9AE02.roa
File: CB2B8A78DC7611EDBEA50049C4F9AE02.roa (raw, json)
Hash identifier: D5xkutSq2dtzL5UvdldBi3uXx3FbnY/aCRTWozbqIs0=
Subject key identifier: 37:3D:58:BE:E4:E1:01:28:D6:1F:69:F4:48:72:2B:10:AF:7B:D4:02
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3417
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB2B8A78DC7611EDBEA50049C4F9AE02.roa
Signing time: Sun 16 Apr 2023 17:10:31 +0000
ROA not before: Sun 16 Apr 2023 17:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.240.0/22 maxlen: 22
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.96.0/24 maxlen: 24
115.186.98.0/24 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/24 maxlen: 24
115.186.103.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/24 maxlen: 24
115.186.113.0/24 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
115.186.121.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 22
117.102.21.0/24 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/21 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13335 (0x3417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 16 17:10:31 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643c2c07-ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:61:73:cb:80:e6:d8:70:45:e7:62:3d:0a:
dd:7a:9c:2e:b7:a3:a7:24:40:94:6d:f8:fb:bb:ab:
38:d2:23:a4:e9:d3:59:c1:3c:db:e0:6e:28:57:62:
3c:fe:e9:54:cc:e8:06:1c:66:59:e4:d8:9f:07:d2:
e9:a2:60:fb:af:73:63:8b:4c:a6:18:d6:a2:c6:a4:
da:bd:d2:37:b3:58:87:01:da:b6:c9:b2:b8:d3:4c:
3e:83:f6:49:94:a4:29:e3:e9:44:ff:40:b3:ac:75:
9c:10:49:04:35:d4:bb:16:de:e6:fb:40:44:ff:a2:
83:2a:da:39:6b:5b:fc:2c:8b:3e:39:63:4c:34:82:
f7:f0:e5:64:ff:fb:6f:a9:82:ea:88:82:a8:8e:32:
fc:54:3c:97:f5:cb:8c:91:ba:2f:18:18:f1:dc:74:
64:8e:f6:51:75:8c:b8:00:f5:c0:d3:fe:07:3b:29:
99:1e:e0:70:25:96:b2:7f:97:6f:d2:94:71:d1:b7:
cb:53:1c:0c:b4:9f:bc:ac:79:e5:f2:1c:2a:19:01:
d8:17:54:cd:04:2f:7e:3d:a4:74:47:4c:ad:86:53:
18:2f:48:d6:e4:fd:9b:b9:fa:71:1a:72:5e:e1:16:
11:65:34:d7:b2:21:34:49:c8:b6:c1:42:91:79:2e:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:58:BE:E4:E1:01:28:D6:1F:69:F4:48:72:2B:10:AF:7B:D4:02
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB2B8A78DC7611EDBEA50049C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.240.0/20
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0/21
115.186.88.0/24
115.186.90.0/23
115.186.93.0/24
115.186.96.0/24
115.186.98.0/24
115.186.101.0-115.186.104.255
115.186.106.0-115.186.113.255
115.186.115.0/24
115.186.117.0-115.186.123.255
115.186.125.0-115.186.126.255
117.102.0.0-117.102.10.255
117.102.12.0/23
117.102.16.0-117.102.28.255
117.102.30.0-117.102.47.255
203.81.192.0/21
203.81.208.0/21
203.81.230.0/24
203.81.232.0/21
Signature Algorithm: sha256WithRSAEncryption
92:ff:c6:76:2f:7c:4d:b9:79:04:8c:6d:a9:ce:36:8c:18:6e:
eb:b6:eb:86:fc:15:fa:ba:50:9c:f7:f9:5c:e8:3b:cb:81:69:
f6:18:ba:48:b5:db:b0:0f:5e:ca:50:d0:b9:3c:99:66:b8:1e:
92:54:82:73:b9:f4:b9:80:c1:86:0c:73:13:df:af:6b:30:35:
88:73:cc:33:22:13:33:6f:c6:0b:fb:cd:f0:01:3a:02:36:78:
dd:ae:6b:a4:dc:d6:75:a9:b6:b2:df:22:da:fa:9e:82:15:5a:
96:0f:d7:22:6c:dd:7f:4d:90:a4:d2:dc:40:23:c2:cb:64:73:
d4:a6:d8:75:93:b9:6c:4d:82:59:e4:a8:60:b8:eb:06:a0:54:
2b:7c:68:82:c8:2a:7f:f8:9f:53:69:01:dd:17:b0:35:f8:cd:
8d:79:50:c8:23:d3:e1:26:f2:c2:a3:41:af:00:30:c3:25:a4:
42:da:bb:25:04:8f:44:c5:77:8b:4d:ec:97:c9:18:6c:15:b2:
10:5f:3e:93:b3:e7:b8:3d:4b:7c:01:03:22:65:83:28:38:64:
3e:d8:3c:4e:84:b2:a4:4a:55:ca:12:1e:4d:ac:5f:89:43:ea:
1c:42:b6:18:79:e0:88:bd:f0:ee:e1:2e:d4:4d:31:4f:bd:a5:
8b:7c:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org