Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
File: B50867848DBA11EEB52CED5EC4F9AE02.roa (raw, json)
Hash identifier: ZC6yLqjtVHs8FkW0+fhpNUxLoiqCP7yVsYIv+GjMZY0=
Subject key identifier: BC:02:F7:A4:CE:99:B4:4B:0F:AF:CB:38:8F:E6:84:D2:57:E9:5C:13
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 07A8
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
Signing time: Tue 28 Nov 2023 06:52:33 +0000
ROA not before: Tue 28 Nov 2023 06:52:33 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E
Validity
Not Before: Nov 28 06:52:33 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65658e31-110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:0d:e3:08:ca:f1:ac:7d:f7:76:d7:93:82:
47:62:e4:2e:29:fd:c4:4d:f5:c4:24:33:2f:af:78:
1f:79:5a:eb:ea:26:df:06:47:c8:6c:86:02:11:10:
74:f3:60:81:80:bb:d4:33:5c:15:7e:4d:49:4a:8d:
94:e8:5b:ac:ca:a9:86:0c:17:88:93:77:9a:9f:2b:
b4:63:e2:7e:a4:d7:95:42:58:91:c8:62:50:b2:ba:
3a:f0:e4:33:21:92:4a:64:6e:1e:2a:2d:15:67:67:
20:f1:44:a7:70:4f:c1:cb:37:ba:09:03:80:b4:11:
ee:8c:ad:2d:b7:40:7a:07:43:1b:ad:0d:f8:cd:bf:
57:bc:db:1e:93:92:ea:d8:35:fa:c1:96:55:e5:93:
81:43:e2:60:d7:08:94:dc:4b:75:59:20:a4:eb:88:
7c:57:93:35:45:4a:13:2d:5a:a0:f3:f0:96:34:37:
83:a5:28:4a:7b:1f:2d:0c:5c:bc:70:16:45:da:44:
5f:ed:ce:f9:98:30:27:15:d5:7a:50:fd:b7:2a:d5:
94:25:bd:5d:15:56:fa:f5:e5:05:a1:c3:e2:85:db:
47:f5:be:7e:a2:02:18:92:20:c8:da:c7:ec:47:1f:
a0:4c:42:b8:04:3e:2c:6c:d9:55:b8:95:e9:53:86:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:F7:A4:CE:99:B4:4B:0F:AF:CB:38:8F:E6:84:D2:57:E9:5C:13
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/B50867848DBA11EEB52CED5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
1a:65:90:6e:04:37:dc:cd:b1:19:7a:ee:48:fa:88:8b:66:61:
e3:f9:fe:f5:f7:37:f1:e8:b3:dd:06:e4:3e:3e:26:46:0e:4d:
5b:ff:61:d2:fc:3f:cf:dc:68:40:53:30:aa:39:36:e1:68:73:
e9:e2:41:e9:84:e4:50:d8:08:f9:f7:46:85:e6:cd:e8:e0:26:
eb:e7:6a:58:71:a6:69:6e:26:22:94:03:65:52:35:0b:94:be:
b1:36:b6:4b:af:a1:4f:fe:21:af:a4:d4:6a:ef:2a:c0:ea:cc:
fe:1b:c6:f8:9e:6c:da:81:08:9f:4d:dd:2f:99:d9:2c:41:65:
de:67:12:36:eb:a8:81:06:38:06:db:8e:3d:8d:7f:12:47:74:
54:5e:20:05:ce:cd:ca:63:93:c7:40:27:e2:02:f8:f5:05:0b:
a5:e0:8a:3e:13:c7:ca:a9:00:73:71:80:50:45:5d:7e:a7:a4:
81:c3:3c:45:b8:58:59:7c:af:11:b5:35:b6:2c:64:1d:64:0d:
02:1e:45:24:53:73:c5:17:91:e8:3e:e7:32:cf:78:73:1f:ab:
45:23:47:9b:56:c2:10:ad:22:01:f8:ab:8b:f2:b3:33:b0:d1:
92:64:67:4a:91:bd:10:e1:d0:33:29:cd:55:49:fc:9b:86:53:
4c:36:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:07 2025 by rpki-client