Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/81868EFA7D2411EEB24DBE31C4F9AE02.roa
File: 81868EFA7D2411EEB24DBE31C4F9AE02.roa (raw, json)
Hash identifier: SGIExStNOafT+Jqn8fO9ryAdUny0/nS/IZwgSbGahsI=
Subject key identifier: 36:D1:F1:26:9D:54:CA:C7:58:5C:82:A6:72:C8:A7:76:1C:0B:03:35
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1AF7
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/81868EFA7D2411EEB24DBE31C4F9AE02.roa
Signing time: Tue 26 Mar 2024 08:01:37 +0000
ROA not before: Tue 26 Mar 2024 08:01:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132220
IP address blocks: 45.125.152.0/22 maxlen: 22
45.125.152.0/24 maxlen: 24
45.125.153.0/24 maxlen: 24
45.125.154.0/24 maxlen: 24
45.125.155.0/24 maxlen: 24
45.248.16.0/22 maxlen: 22
45.248.16.0/24 maxlen: 24
45.248.17.0/24 maxlen: 24
45.248.18.0/24 maxlen: 24
45.248.19.0/24 maxlen: 24
45.250.232.0/22 maxlen: 22
45.250.232.0/24 maxlen: 24
45.250.233.0/24 maxlen: 24
45.250.234.0/24 maxlen: 24
45.250.235.0/24 maxlen: 24
103.7.148.0/22 maxlen: 22
103.7.148.0/24 maxlen: 24
103.7.149.0/24 maxlen: 24
103.7.150.0/24 maxlen: 24
103.7.151.0/24 maxlen: 24
103.216.52.0/22 maxlen: 22
103.216.52.0/24 maxlen: 24
103.216.53.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
103.216.55.0/24 maxlen: 24
157.119.176.0/22 maxlen: 22
157.119.176.0/24 maxlen: 24
157.119.177.0/24 maxlen: 24
157.119.178.0/24 maxlen: 24
157.119.179.0/24 maxlen: 24
183.87.160.0/19 maxlen: 19
183.87.160.0/20 maxlen: 20
183.87.160.0/24 maxlen: 24
183.87.161.0/24 maxlen: 24
183.87.162.0/24 maxlen: 24
183.87.163.0/24 maxlen: 24
183.87.164.0/24 maxlen: 24
183.87.165.0/24 maxlen: 24
183.87.166.0/24 maxlen: 24
183.87.167.0/24 maxlen: 24
183.87.168.0/24 maxlen: 24
183.87.169.0/24 maxlen: 24
183.87.170.0/24 maxlen: 24
183.87.171.0/24 maxlen: 24
183.87.172.0/24 maxlen: 24
183.87.173.0/24 maxlen: 24
183.87.174.0/24 maxlen: 24
183.87.175.0/24 maxlen: 24
183.87.176.0/24 maxlen: 24
183.87.177.0/24 maxlen: 24
183.87.178.0/24 maxlen: 24
183.87.179.0/24 maxlen: 24
183.87.180.0/24 maxlen: 24
183.87.181.0/24 maxlen: 24
183.87.182.0/24 maxlen: 24
183.87.183.0/24 maxlen: 24
183.87.184.0/24 maxlen: 24
183.87.185.0/24 maxlen: 24
183.87.186.0/24 maxlen: 24
183.87.187.0/24 maxlen: 24
183.87.188.0/24 maxlen: 24
183.87.189.0/24 maxlen: 24
183.87.190.0/24 maxlen: 24
183.87.191.0/24 maxlen: 24
183.87.193.0/24 maxlen: 24
183.87.194.0/23 maxlen: 24
183.87.196.0/22 maxlen: 22
183.87.196.0/24 maxlen: 24
183.87.197.0/24 maxlen: 24
183.87.198.0/24 maxlen: 24
183.87.199.0/24 maxlen: 24
183.87.200.0/21 maxlen: 21
183.87.200.0/24 maxlen: 24
183.87.201.0/24 maxlen: 24
183.87.202.0/24 maxlen: 24
183.87.203.0/24 maxlen: 24
183.87.204.0/24 maxlen: 24
183.87.205.0/24 maxlen: 24
183.87.206.0/24 maxlen: 24
183.87.207.0/24 maxlen: 24
183.87.208.0/22 maxlen: 22
183.87.208.0/24 maxlen: 24
183.87.209.0/24 maxlen: 24
183.87.210.0/24 maxlen: 24
183.87.211.0/24 maxlen: 24
2403:7100::/32 maxlen: 32
2403:7100::/48 maxlen: 48
2403:7100:1::/48 maxlen: 48
2403:7100:2::/48 maxlen: 48
2403:7100:3::/48 maxlen: 48
2403:7100:4::/48 maxlen: 48
2403:7100:5::/48 maxlen: 48
2403:7100:6::/48 maxlen: 48
2403:7100:7::/48 maxlen: 48
2403:7100:8::/48 maxlen: 48
2403:7100:9::/48 maxlen: 48
2403:7100:a::/48 maxlen: 48
2403:7100:b::/48 maxlen: 48
2403:7100:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6903 (0x1af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75
Validity
Not Before: Mar 26 08:01:37 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660280e0-e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:7c:ab:0c:d8:54:06:1c:e9:3d:7a:e4:9b:
fb:86:c0:e2:6d:f2:12:f6:95:0f:b8:5d:20:55:5f:
6a:44:af:1b:3f:94:28:02:93:81:36:22:5c:05:81:
fa:d4:1a:4d:e0:84:6d:05:85:dc:36:8e:71:75:fa:
2a:2a:a4:e9:b7:a7:23:47:06:8a:f8:2e:ab:23:f6:
5b:c4:00:34:47:14:e6:41:33:40:2d:7a:6c:02:d8:
a8:68:a7:80:b8:bc:05:83:8f:a1:7d:81:11:5b:f8:
2c:39:82:1b:f6:b9:eb:58:dd:5e:90:d3:fd:7c:4c:
79:8e:e9:45:67:8e:97:9a:7e:73:2d:55:46:d2:13:
e8:82:af:b7:fc:37:fd:1e:a5:69:5e:37:96:51:46:
e8:07:7f:c4:fb:dc:4d:f9:df:fd:da:c7:a4:5b:a9:
a5:41:24:e5:30:6d:4a:76:d9:15:6e:8d:e8:3e:6c:
7c:b6:d7:64:bb:89:f9:dc:88:1f:71:57:62:f9:e2:
a0:79:57:b2:4d:08:bd:80:6a:2a:93:46:5f:9b:86:
26:46:61:3e:e2:f0:c3:dd:ef:33:25:98:07:eb:7b:
8e:08:dd:06:0c:3b:7a:b4:1f:97:32:16:33:38:1d:
73:20:61:80:57:95:23:8a:e4:b6:05:1d:c6:65:a5:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:F1:26:9D:54:CA:C7:58:5C:82:A6:72:C8:A7:76:1C:0B:03:35
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/81868EFA7D2411EEB24DBE31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.152.0/22
45.248.16.0/22
45.250.232.0/22
103.7.148.0/22
103.216.52.0/22
157.119.176.0/22
183.87.160.0/19
183.87.193.0-183.87.211.255
IPv6:
2403:7100::/32
Signature Algorithm: sha256WithRSAEncryption
b0:43:0d:d9:6e:e7:3d:8b:62:5d:4f:72:bc:06:18:8d:63:c3:
fa:32:8e:b7:fa:24:57:7d:d3:13:e2:cc:c5:48:5d:41:3b:a5:
0e:17:db:65:c9:1a:af:3e:89:d3:e4:09:89:48:12:80:7c:f1:
f9:a7:3d:70:8a:9e:ff:9d:fe:d3:cd:b1:cb:a7:fd:41:f9:b6:
9c:f9:92:96:f6:95:35:26:9a:64:83:c0:4a:86:06:82:62:eb:
6d:5e:c1:1d:1c:96:92:e0:11:7c:eb:b1:44:96:51:50:6d:74:
76:4b:2e:88:d1:07:4c:56:fc:16:4f:53:1f:11:f0:96:da:f3:
0c:a1:97:7d:ab:e7:c6:83:38:da:d3:9e:51:01:af:5e:20:cc:
f1:57:66:78:00:04:6f:a2:50:2f:6f:ef:47:2d:73:56:fe:a8:
63:8c:41:81:42:5d:c0:7d:5e:4a:6b:e4:94:59:6e:1e:9f:1c:
81:af:05:a0:11:25:b4:24:5c:e7:c7:99:05:e9:12:94:d7:a1:
27:b6:f8:6d:2e:18:14:ca:9b:4a:8c:85:a7:ac:63:95:f0:50:
8b:4d:7f:6b:e0:ae:f1:c6:63:07:f8:ea:31:4f:c5:56:8f:fd:
6f:1d:1d:13:70:11:b9:8d:63:0c:c0:65:bf:5b:4d:45:a0:1c:
89:42:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:58 2025 by rpki-client