Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1758DDCA9FDA11EEB836756CC4F9AE02.roa
File: 1758DDCA9FDA11EEB836756CC4F9AE02.roa (raw, json)
Hash identifier: 6SPIYKDHp2ixF8Sgn3bAx/XOBzKUprY/XsHiwWVE/7g=
Subject key identifier: B5:99:7D:4B:C1:C0:A9:37:74:4C:22:DE:64:C5:7E:4B:03:70:EA:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1758DDCA9FDA11EEB836756CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:18 +0000
ROA not before: Thu 30 May 2024 16:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.119.176.0/22 maxlen: 24
45.119.180.0/22 maxlen: 24
45.119.184.0/22 maxlen: 24
45.119.188.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
45.124.224.0/22 maxlen: 24
45.124.228.0/22 maxlen: 24
45.124.232.0/22 maxlen: 24
45.124.236.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.163.177.0/24 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37057 (0x90c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a95e-0e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:e0:29:5c:b0:c0:64:1b:60:c3:57:cd:ce:
b6:84:e3:ef:f5:b2:4b:87:82:95:97:be:4a:2a:50:
3a:f9:38:c5:bd:10:28:ca:ed:2d:60:7c:f9:cb:28:
1f:53:13:1e:3a:55:ad:1b:7b:e6:4a:e6:e8:2a:75:
f1:e9:2c:ee:a2:5a:08:74:af:4a:89:d7:cf:91:44:
ee:53:64:fd:d5:74:29:7b:0f:49:2b:b7:44:f4:ac:
e0:4c:55:54:b9:1e:2e:44:4b:15:2c:a4:3a:df:4d:
8e:5f:8c:3e:64:65:34:eb:17:8b:e2:15:3b:b0:88:
47:7a:5c:b2:64:cf:35:af:3d:a8:bc:5c:f2:81:83:
a7:c2:fa:62:b9:ea:62:ed:15:54:f7:65:ab:d4:16:
d5:a7:9d:a0:fd:27:63:b1:ba:90:e6:07:21:1a:ce:
1e:f3:c1:ba:db:41:fb:cc:89:30:be:1e:51:48:a8:
a7:6f:dd:4f:28:4c:44:a3:4b:f7:77:14:c9:55:15:
99:ef:b7:5c:f8:00:5d:05:0e:f6:1e:fb:2f:a7:8b:
76:d5:9a:a1:1c:d5:f1:54:30:34:c1:30:22:08:fc:
7e:bc:45:29:0b:f8:da:f8:9c:ed:68:c2:2c:5b:1d:
c2:51:1f:34:1e:67:f8:fd:9f:9c:b3:60:49:56:bc:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:7D:4B:C1:C0:A9:37:74:4C:22:DE:64:C5:7E:4B:03:70:EA:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1758DDCA9FDA11EEB836756CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.119.176.0/20
45.121.0.0/22
45.124.224.0/20
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.163.177.0/24
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
b0:cc:9e:10:18:79:7e:50:2c:b3:d3:e8:24:70:fe:5c:38:f9:
5f:a8:0c:f9:e4:3c:17:d4:c5:af:5e:a2:81:0f:3b:29:53:2f:
90:52:0d:61:a0:6f:8f:c2:cb:6c:b0:03:a9:4b:da:c7:f0:0f:
f5:73:02:d9:8b:91:ad:fe:67:fb:eb:79:59:40:d5:13:95:c2:
73:d3:e4:27:70:03:c8:7d:76:b0:ce:bd:56:1f:2f:8c:c1:e3:
c6:09:37:87:40:45:79:ea:bf:3a:16:a2:b3:14:6f:d0:5c:03:
4d:d6:30:2f:75:1d:98:e7:dc:80:8b:b5:83:be:38:8a:dc:28:
1d:2d:1f:a1:ae:78:05:48:27:70:52:07:28:b4:d6:b9:c4:10:
7a:a0:a4:f5:f1:79:8e:75:ef:22:98:8e:de:4c:b9:7a:fa:46:
4c:a4:e5:8e:56:ae:02:a8:93:6b:89:33:7e:70:1c:84:e7:08:
9b:28:19:2d:fb:33:8a:a8:e9:72:b0:2c:60:b0:05:73:71:ca:
ad:4e:06:8d:75:f3:a7:8c:6e:60:77:54:20:3f:e1:b0:0c:b2:
48:e2:61:70:cb:92:21:03:67:0c:dd:bb:21:6b:96:ad:89:72:
22:bb:f9:9a:e9:37:89:84:a7:3a:dd:c5:18:d1:29:b8:a7:9a:
3a:b4:5d:db
-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgIDAJDBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjkxOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE5NWUtMGUwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALlo4ClcsMBkG2DDV83OtoTj7/WyS4eClZe+SipQOvk4xb0QKMrtLWB8+cso
H1MTHjpVrRt75krm6Cp18eks7qJaCHSvSonXz5FE7lNk/dV0KXsPSSu3RPSs4ExV
VLkeLkRLFSykOt9Njl+MPmRlNOsXi+IVO7CIR3pcsmTPNa89qLxc8oGDp8L6Yrnq
Yu0VVPdlq9QW1aedoP0nY7G6kOYHIRrOHvPButtB+8yJML4eUUiop2/dTyhMRKNL
93cUyVUVme+3XPgAXQUO9h77L6eLdtWaoRzV8VQwNMEwIgj8frxFKQv42vic7WjC
LFsdwlEfNB5n+P2fnLNgSVa82wkCAwEAAaOCBA4wggQKMB0GA1UdDgQWBBS1mX1L
wcCpN3RMIt5kxX5LA3DqNjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE3NThERENB
OUZEQTExRUVCODM2NzU2Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBlgYIKwYBBQUHAQcB
Af8EggGFMIIBgTCCAWUEAgABMIIBXQMEAhtvSAMEAhtweAMEAht0KAMEAht6PDAM
AwQCJP8MAwQDJP8QAwQCLXNYAwQELXewAwQCLXkAAwQELXzgAwQCZw/8AwQCZxz0
AwQCZx5AAwQCZx50AwQCZx6wAwQCZzdIAwQCZz1IAwQCZ0JIAwQCZ0psAwQCZ0zQ
AwQCZ1JQAwQCZ1KQAwQAZ6OxAwQAZ7BKAwQCZ8VwAwQCZ8e0AwQCZ8e8MAwDBANn
x8gDBANnx9ADBAJnyFQDBAFnyYYDBAJny0gwDAMEAmfQ5AMEAmfQ6AMEA2fSWAME
AmfSZAMEAGflAAMEAmf2KAMEAmf2wAMEAmf3BAMEAmf3NAMEBnCFwAMEAniKDAME
BXr84AMEAok7XDALAwMAiwUDBAKLBQgDBAK0XiADBAPKFSgDBALKK3gDBALKjIAD
BALKlDgDBALKqFQDBAPKqsgDBALKsAADBATLmSADBALcnpwwFgQCAAIwEAMFACQB
sgADBwAkBg8AAAcwDQYJKoZIhvcNAQELBQADggEBALDMnhAYeX5QLLPT6CRw/lw4
+V+oDPnkPBfUxa9eooEPOylTL5BSDWGgb4/Cy2ywA6lL2sfwD/VzAtmLka3+Z/vr
eVlA1ROVwnPT5CdwA8h9drDOvVYfL4zB48YJN4dARXnqvzoWorMUb9BcA03WMC91
HZjn3ICLtYO+OIrcKB0tH6GueAVIJ3BSByi01rnEEHqgpPXxeY517yKYjt5MuXr6
Rkyk5Y5WrgKok2uJM35wHITnCJsoGS37M4qo6XKwLGCwBXNxyq1OBo1186eMbmB3
VCA/4bAMskjiYXDLkiEDZwzduyFrlq2JciK7+ZrpN4mEpzrdxRjRKbinmjq0Xds=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:11 2025 by rpki-client