Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA126044D79B11ED83758740C4F9AE02.roa
File: AA126044D79B11ED83758740C4F9AE02.roa (raw, json)
Hash identifier: 0bDdkF3JRMk2Q3RQUgmX6U2cHxvcREMpAeOgP1eUdS8=
Subject key identifier: CA:CE:54:73:B1:33:F7:80:B4:F9:B4:C8:30:06:C6:05:0A:8B:D7:28
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 692A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA126044D79B11ED83758740C4F9AE02.roa
Signing time: Thu 27 Apr 2023 12:11:46 +0000
ROA not before: Thu 27 Apr 2023 12:11:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.188.0/22 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/23 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26922 (0x692a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 27 12:11:46 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644a6682-c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:7e:38:30:51:ed:96:18:0c:9b:bc:f9:b5:
4f:f1:f3:1b:65:70:49:34:aa:31:f5:f7:59:f7:44:
94:96:aa:8d:73:b7:57:0f:4f:9c:dd:f7:76:66:5c:
bb:e6:be:a1:79:71:3b:a7:e3:40:3c:e6:da:08:1f:
1c:5d:a0:0b:e8:b6:75:2b:78:d1:39:6c:4f:20:3d:
c0:ad:91:94:63:7f:5b:ce:19:26:ea:32:c1:23:35:
c3:86:9f:9a:b7:d9:87:db:c7:dd:db:91:2e:62:6b:
dd:c4:f6:e6:ee:0e:eb:ef:79:48:23:f0:8d:80:50:
fc:0c:d8:ea:45:6e:e3:95:3f:81:97:2d:2d:19:3d:
bf:e7:cb:34:59:5c:79:c0:ad:c9:b0:33:af:ba:ee:
9a:ce:91:17:24:78:c9:a5:3d:58:5a:26:b5:21:75:
c8:65:03:4a:7d:3a:0d:f3:f6:a3:87:2b:e4:ae:e5:
7e:e6:01:62:04:36:00:2b:ad:d0:f3:c5:80:72:c5:
06:7b:6d:d1:03:71:67:a7:59:cc:20:9b:13:db:e5:
3e:da:05:a0:e8:92:31:75:5b:f1:1c:f0:ce:22:72:
37:09:c2:db:34:2b:af:7c:7d:f1:ac:7c:ad:e9:fa:
96:4e:9d:3e:8d:e1:0b:c8:3d:d4:ff:ad:dc:04:9b:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:54:73:B1:33:F7:80:B4:F9:B4:C8:30:06:C6:05:0A:8B:D7:28
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA126044D79B11ED83758740C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.188.0/22
103.59.212.0/22
103.66.80.0/22
103.69.238.0/23
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:0e:cd:be:3a:1e:03:b1:9d:aa:94:04:59:69:99:25:a9:f8:
b3:a2:3e:98:c6:55:5c:c6:58:10:cd:f2:d7:32:dc:ba:a4:dd:
bd:e2:31:b0:e9:9b:d7:35:7a:48:51:fe:8a:cc:84:f9:2a:df:
66:e0:9f:fd:85:fd:39:92:ed:ea:96:c3:4d:c0:2b:b2:eb:d3:
3e:b3:71:39:58:7e:cf:29:63:aa:c3:83:aa:52:a7:2f:90:10:
53:3c:39:2b:72:fb:94:f9:3e:ad:42:c6:5b:9e:99:f1:76:ce:
ff:50:01:e6:24:e3:a9:b1:bb:2f:e2:7d:69:9a:ca:07:82:e9:
d5:9b:c3:94:cb:ab:55:35:73:97:9d:6a:f0:2b:b5:32:8e:ee:
ca:c6:37:ad:fa:ef:4b:68:2b:40:67:be:a2:4c:19:14:e9:12:
2c:af:45:c9:29:a7:9e:a9:2c:e4:2f:cf:39:0e:d2:36:2b:83:
49:1b:a1:ed:d2:d9:e6:ad:e0:12:89:02:35:9c:cb:59:fc:19:
fa:1c:0e:21:b9:3f:c2:19:ec:0a:ff:af:31:2c:72:eb:c2:5d:
21:f8:05:27:5c:64:37:d3:06:20:2e:48:fb:cb:30:40:d4:f2:
26:0f:e7:6c:eb:b5:00:12:01:36:02:96:da:c0:62:14:99:b2:
25:7e:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:33 2025 by rpki-client