Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/562423D6848411EFA05CE04EC4F9AE02.roa
File: 562423D6848411EFA05CE04EC4F9AE02.roa (raw, json)
Hash identifier: eGsDCgtvtDn3YkAujHwJxwDowHt+gdVLGK7IBBk20J0=
Subject key identifier: E0:DF:09:AC:6C:25:41:35:C6:4D:F2:AF:3B:38:55:8F:B0:40:DB:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E93
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/562423D6848411EFA05CE04EC4F9AE02.roa
Signing time: Wed 04 Dec 2024 08:53:23 +0000
ROA not before: Wed 04 Dec 2024 08:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.87.0/24 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.102.147.0/24 maxlen: 24
103.103.55.0/24 maxlen: 24
103.105.96.0/24 maxlen: 24
103.124.120.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.163.14.0/23 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.171.109.0/24 maxlen: 24
103.183.86.0/23 maxlen: 24
103.183.233.0/24 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.216.140.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2405:e100::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40595 (0x9e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 4 08:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67501883-c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:a1:fd:40:97:f4:b7:cf:d6:93:49:04:5a:
b2:98:30:66:c7:49:5a:5c:b2:87:1e:fe:3d:27:5d:
61:c4:2d:29:d0:3f:a6:64:38:26:82:37:19:7a:56:
d5:82:ba:44:0e:06:d6:ba:49:eb:f9:d9:74:c8:b7:
e5:3c:91:2b:c0:d4:2d:d3:c7:d5:59:12:66:21:8d:
91:ce:3f:e0:ee:20:11:5a:f2:23:ec:79:97:61:b0:
7d:74:d5:07:1c:b1:a4:31:d8:fc:72:09:49:4e:ae:
93:3e:c9:7c:cb:3e:f5:c9:19:52:55:63:0c:fd:f2:
2e:86:fe:38:de:4d:6e:94:f1:72:1a:49:17:de:48:
92:61:f4:ef:51:1a:71:43:65:97:83:fe:3e:0c:a9:
7f:85:70:be:4c:39:6a:cb:17:bb:61:ba:ae:20:35:
dd:3b:06:92:07:ff:d1:5b:7d:05:d2:4a:8b:13:d9:
85:fa:68:97:ce:44:a2:eb:78:f1:0d:ce:0c:21:3f:
b9:cb:70:2c:db:3e:d2:3b:08:d0:eb:12:fd:dd:a1:
e1:af:bc:78:03:c0:d1:96:d5:a3:8b:e4:fa:9a:77:
7e:21:b7:4b:97:4d:59:7d:08:08:4d:43:37:ba:4e:
fe:e5:fa:af:b8:82:47:30:56:24:2b:f6:02:e6:54:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:09:AC:6C:25:41:35:C6:4D:F2:AF:3B:38:55:8F:B0:40:DB:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/562423D6848411EFA05CE04EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.0.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.68.87.0/24
103.69.24.0/22
103.70.80.0/22
103.91.73.0-103.91.74.255
103.94.83.0/24
103.100.4.0/22
103.102.147.0/24
103.103.55.0/24
103.105.96.0/24
103.124.120.0/23
103.153.12.0/24
103.163.14.0/23
103.164.141.0/24
103.165.88.0/23
103.165.102.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.171.109.0/24
103.183.86.0/23
103.183.233.0/24
103.190.8.0/23
103.198.172.0/22
103.216.140.0/24
103.216.142.0/23
103.217.132.0/22
103.224.144.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2001:df1:d240::/48
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
17:c8:35:db:c5:5c:6b:b2:6a:81:f7:3d:cb:94:a2:84:0f:b2:
65:68:60:36:25:a4:f6:c8:40:61:16:47:3f:f4:c7:a5:e8:b0:
d9:4f:82:cc:e1:16:d7:09:2a:13:09:f6:b8:27:7c:ff:22:70:
4e:44:e5:cf:c2:b8:41:c1:7c:85:71:96:4a:14:2a:6b:a6:95:
ac:02:ec:c3:4f:86:88:28:36:9c:a2:08:dc:27:6d:5a:db:56:
88:47:02:fa:6e:65:0d:04:50:a7:97:cd:7a:e2:69:91:f7:2a:
d0:34:3c:8b:0d:22:e2:5a:ac:20:27:fc:3d:91:97:ae:76:88:
58:34:9c:70:e2:1d:c9:10:d4:6f:8c:5c:83:2f:49:ec:99:e2:
c2:3a:cc:0c:fa:39:f0:11:90:8c:18:88:7b:44:aa:b1:8b:7b:
92:fc:8b:ec:7c:c2:1a:28:6d:23:f1:8b:07:40:6a:b5:2d:ce:
d1:49:bb:5c:d6:f6:fa:31:4e:dc:63:04:34:7c:68:4b:25:a0:
a3:4a:78:10:bd:e7:5e:a4:65:48:80:5f:5a:d3:21:17:c9:de:
94:5d:45:7e:c7:9c:44:57:d3:bc:c4:35:33:ec:01:f1:c4:f6:
f6:d1:e3:af:ec:a2:7c:27:f3:15:c9:0d:92:02:18:60:b5:9a:
d4:95:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:40 2025 by rpki-client