Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9F386B8F05D11EB8102F267C4F9AE02.roa
File: B9F386B8F05D11EB8102F267C4F9AE02.roa (raw, json)
Hash identifier: VHsxua2+xyVVHaaqCjM5n40IiXivUOTI6WJZYwqYieQ=
Subject key identifier: FC:F3:D9:AE:AC:AE:96:D8:E0:0F:81:12:2F:2A:46:34:0D:87:C8:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5FC8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9F386B8F05D11EB8102F267C4F9AE02.roa
Signing time: Mon 07 Nov 2022 08:21:34 +0000
ROA not before: Mon 07 Nov 2022 08:21:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133275
IP address blocks: 43.228.220.0/22 maxlen: 24
43.248.236.0/22 maxlen: 24
45.115.4.0/22 maxlen: 24
45.119.136.0/22 maxlen: 24
45.119.140.0/22 maxlen: 24
45.125.60.0/22 maxlen: 24
103.36.124.0/22 maxlen: 24
103.46.192.0/23 maxlen: 24
103.46.194.0/23 maxlen: 24
103.47.168.0/22 maxlen: 24
103.47.236.0/22 maxlen: 24
103.59.192.0/22 maxlen: 24
103.59.196.0/22 maxlen: 24
103.86.40.0/22 maxlen: 24
103.95.120.0/22 maxlen: 24
103.193.196.0/22 maxlen: 24
103.196.52.0/22 maxlen: 24
103.208.200.0/22 maxlen: 24
103.248.116.0/22 maxlen: 24
116.204.188.0/22 maxlen: 22
137.59.240.0/22 maxlen: 24
157.119.124.0/22 maxlen: 24
157.119.216.0/24 maxlen: 24
157.119.217.0/24 maxlen: 24
157.119.218.0/24 maxlen: 24
157.119.219.0/24 maxlen: 24
2404:4340::/32 maxlen: 32
2404:4340::/33 maxlen: 33
2404:4340::/48 maxlen: 48
2404:4340:1::/48 maxlen: 48
2404:4340:2::/48 maxlen: 48
2404:4340:3::/48 maxlen: 48
2404:4340:4::/48 maxlen: 48
2404:4340:5::/48 maxlen: 48
2404:4340:6::/48 maxlen: 48
2404:4340:7::/48 maxlen: 48
2404:4340:8000::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24520 (0x5fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 7 08:21:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6368c00e-dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:89:24:bd:09:46:99:0d:93:0b:fe:ef:ad:
0f:2e:59:48:a0:a1:39:cf:4f:b1:9c:bc:7e:4a:df:
8d:0a:67:a4:82:63:64:eb:30:5a:03:27:80:d2:36:
da:65:a2:80:c7:76:e4:2d:77:df:4c:d1:e1:bf:23:
81:32:39:24:57:ef:93:72:92:1e:b9:42:78:33:aa:
28:79:10:fa:2c:fe:7d:44:37:df:bb:17:27:c3:88:
af:79:1a:21:dc:be:59:7d:93:27:12:50:3e:a9:8d:
65:16:ce:8d:16:8e:2a:fe:45:ee:a9:63:7c:6a:27:
89:d4:08:11:12:87:ca:ac:0b:5d:d5:11:7d:37:a1:
9a:e9:01:b4:e1:a8:3e:b3:2f:43:51:5f:a2:8c:f0:
94:4d:4b:77:c3:32:2e:53:bc:33:a8:53:63:36:6d:
8f:93:84:62:aa:6c:62:cf:2d:b8:2c:bb:95:04:19:
be:99:b2:f9:e4:50:4c:a4:4c:31:49:54:e0:72:42:
e6:87:7f:bf:6d:13:0e:4a:7e:68:8a:9d:6b:ba:3c:
05:aa:67:ed:8d:7b:bb:bd:e0:0b:57:0c:a2:e7:d7:
9f:33:3d:02:ef:d1:a4:05:5c:ff:a6:e6:80:6a:94:
ff:78:5f:d0:27:56:15:0a:28:cb:b5:5b:d0:53:91:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:D9:AE:AC:AE:96:D8:E0:0F:81:12:2F:2A:46:34:0D:87:C8:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9F386B8F05D11EB8102F267C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.220.0/22
43.248.236.0/22
45.115.4.0/22
45.119.136.0/21
45.125.60.0/22
103.36.124.0/22
103.46.192.0/22
103.47.168.0/22
103.47.236.0/22
103.59.192.0/21
103.86.40.0/22
103.95.120.0/22
103.193.196.0/22
103.196.52.0/22
103.208.200.0/22
103.248.116.0/22
116.204.188.0/22
137.59.240.0/22
157.119.124.0/22
157.119.216.0/22
IPv6:
2404:4340::/32
Signature Algorithm: sha256WithRSAEncryption
13:e0:4c:07:67:50:9c:83:86:a7:f3:c8:fe:50:89:e2:30:3e:
04:4d:4a:79:df:1d:59:77:7d:0e:3a:b4:0f:d9:d0:0a:a1:22:
88:f1:21:de:52:b9:38:6a:15:1a:8f:78:a6:f0:25:24:50:41:
82:d7:bf:82:82:94:5f:cd:09:22:bc:b4:26:86:8a:8b:3b:a5:
82:52:67:0e:38:cb:60:81:31:7a:1b:1a:b8:94:cd:0c:e9:ee:
c5:4f:0a:57:1d:1f:9f:9c:74:c2:01:45:ea:88:6d:5d:89:c7:
26:7b:ce:23:f1:35:79:57:c6:81:42:e2:a7:95:05:42:75:27:
3c:4f:ef:75:fd:08:4e:69:ea:c2:22:08:5c:84:ec:ca:29:aa:
1e:05:18:0a:b5:86:4b:aa:6d:11:cd:ef:7e:65:9e:8f:f7:53:
e1:2e:2b:5a:b2:ca:72:9f:c7:68:ae:bf:ab:78:87:ba:9f:19:
de:00:cf:67:d9:4b:4c:6f:9f:30:a0:ab:19:91:82:35:67:f5:
a6:ae:b5:6f:8c:a1:55:0e:ac:4d:2f:a5:e0:7a:90:13:3b:d6:
3d:62:ea:35:35:77:a2:2d:d9:aa:cd:94:97:11:95:54:c9:ea:
43:94:de:27:ed:09:78:83:34:4f:89:ec:16:cf:d5:1b:9c:ed:
1c:12:31:0d
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgICX8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMTA3MDgyMTM0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzY4YzAwZS1kZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnriJJL0JRpkNkwv+760PLllIoKE5z0+xnLx+St+NCmekgmNk6zBaAyeA0jba
ZaKAx3bkLXffTNHhvyOBMjkkV++TcpIeuUJ4M6ooeRD6LP59RDffuxcnw4iveRoh
3L5ZfZMnElA+qY1lFs6NFo4q/kXuqWN8aieJ1AgREofKrAtd1RF9N6Ga6QG04ag+
sy9DUV+ijPCUTUt3wzIuU7wzqFNjNm2Pk4Riqmxizy24LLuVBBm+mbL55FBMpEwx
SVTgckLmh3+/bRMOSn5oip1rujwFqmftjXu7veALVwyi59efMz0C79GkBVz/puaA
apT/eF/QJ1YVCijLtVvQU5EX3wIDAQABo4IDGTCCAxUwHQYDVR0OBBYEFPzz2a6s
rpbY4A+BEi8qRjQNh8h/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjlGMzg2QjhG
MDVEMTFFQjgxMDJGMjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaIGCCsGAQUFBwEHAQH/
BIGSMIGPMH4EAgABMHgDBAIr5NwDBAIr+OwDBAItcwQDBAMtd4gDBAItfTwDBAJn
JHwDBAJnLsADBAJnL6gDBAJnL+wDBANnO8ADBAJnVigDBAJnX3gDBAJnwcQDBAJn
xDQDBAJn0MgDBAJn+HQDBAJ0zLwDBAKJO/ADBAKdd3wDBAKdd9gwDQQCAAIwBwMF
ACQEQ0AwDQYJKoZIhvcNAQELBQADggEBABPgTAdnUJyDhqfzyP5QieIwPgRNSnnf
HVl3fQ46tA/Z0AqhIojxId5SuThqFRqPeKbwJSRQQYLXv4KClF/NCSK8tCaGios7
pYJSZw44y2CBMXobGriUzQzp7sVPClcdH5+cdMIBReqIbV2JxyZ7ziPxNXlXxoFC
4qeVBUJ1JzxP73X9CE5p6sIiCFyE7Mopqh4FGAq1hkuqbRHN735lno/3U+EuK1qy
ynKfx2iuv6t4h7qfGd4Az2fZS0xvnzCgqxmRgjVn9aautW+MoVUOrE0vpeB6kBM7
1j1i6jU1d6It2arNlJcRlVTJ6kOU3iftCXiDNE+J7BbP1Ruc7RwSMQ0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:19 2025 by rpki-client