Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
File: BD2F954EC4C511EE8795D21FC4F9AE02.roa (raw, json)
Hash identifier: 5grGgMjPkyv8dwnl+8TNBFUN8/Z7SyLa6m2G2/5+PxA=
Subject key identifier: 67:6D:4C:E0:15:F3:21:E3:06:53:7F:E8:42:76:21:8C:8B:0C:E6:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8942
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
Signing time: Thu 30 May 2024 15:58:06 +0000
ROA not before: Thu 30 May 2024 15:58:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133982
IP address blocks: 45.118.156.0/24 maxlen: 24
45.118.157.0/24 maxlen: 24
45.118.158.0/24 maxlen: 24
45.118.159.0/24 maxlen: 24
103.46.200.0/24 maxlen: 24
103.46.201.0/24 maxlen: 24
103.46.202.0/24 maxlen: 24
103.46.203.0/24 maxlen: 24
103.48.196.0/24 maxlen: 24
103.48.197.0/24 maxlen: 24
103.48.198.0/24 maxlen: 24
103.48.199.0/24 maxlen: 24
103.56.228.0/24 maxlen: 24
103.56.229.0/24 maxlen: 24
103.56.230.0/24 maxlen: 24
103.56.231.0/24 maxlen: 24
103.57.84.0/22 maxlen: 24
103.85.143.0/24 maxlen: 24
103.87.56.0/24 maxlen: 24
103.87.57.0/24 maxlen: 24
103.87.58.0/24 maxlen: 24
103.87.59.0/24 maxlen: 24
103.92.40.0/22 maxlen: 24
103.95.80.0/24 maxlen: 24
103.95.81.0/24 maxlen: 24
103.95.82.0/24 maxlen: 24
103.95.83.0/24 maxlen: 24
103.108.4.0/24 maxlen: 24
103.108.5.0/24 maxlen: 24
103.108.6.0/24 maxlen: 24
103.108.7.0/24 maxlen: 24
103.110.48.0/24 maxlen: 24
103.110.49.0/24 maxlen: 24
103.120.50.0/24 maxlen: 24
103.120.51.0/24 maxlen: 24
103.139.56.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
103.160.26.0/23 maxlen: 24
103.161.56.0/23 maxlen: 24
103.164.188.0/24 maxlen: 24
103.170.80.0/23 maxlen: 24
103.172.72.0/23 maxlen: 24
103.177.120.0/23 maxlen: 24
103.181.166.0/24 maxlen: 24
103.205.146.0/24 maxlen: 24
103.211.12.0/24 maxlen: 24
103.211.13.0/24 maxlen: 24
103.211.14.0/24 maxlen: 24
103.211.15.0/24 maxlen: 24
103.211.16.0/24 maxlen: 24
103.211.17.0/24 maxlen: 24
103.211.18.0/24 maxlen: 24
103.211.19.0/24 maxlen: 24
103.211.52.0/24 maxlen: 24
103.211.53.0/24 maxlen: 24
103.211.54.0/24 maxlen: 24
103.211.55.0/24 maxlen: 24
103.212.144.0/24 maxlen: 24
103.212.145.0/24 maxlen: 24
103.212.146.0/24 maxlen: 24
103.212.147.0/24 maxlen: 24
103.212.156.0/24 maxlen: 24
103.212.157.0/24 maxlen: 24
103.212.158.0/24 maxlen: 24
103.212.159.0/24 maxlen: 24
103.214.60.0/24 maxlen: 24
103.214.61.0/24 maxlen: 24
103.214.62.0/24 maxlen: 24
103.214.63.0/24 maxlen: 24
110.235.216.0/22 maxlen: 24
110.235.224.0/24 maxlen: 24
110.235.225.0/24 maxlen: 24
110.235.226.0/24 maxlen: 24
110.235.227.0/24 maxlen: 24
110.235.228.0/24 maxlen: 24
110.235.229.0/24 maxlen: 24
110.235.230.0/24 maxlen: 24
110.235.231.0/24 maxlen: 24
110.235.232.0/24 maxlen: 24
110.235.233.0/24 maxlen: 24
110.235.234.0/24 maxlen: 24
110.235.235.0/24 maxlen: 24
110.235.236.0/24 maxlen: 24
110.235.237.0/24 maxlen: 24
110.235.238.0/24 maxlen: 24
110.235.239.0/24 maxlen: 24
139.5.240.0/24 maxlen: 24
139.5.241.0/24 maxlen: 24
139.5.242.0/24 maxlen: 24
139.5.243.0/24 maxlen: 24
139.5.248.0/24 maxlen: 24
139.5.249.0/24 maxlen: 24
139.5.250.0/24 maxlen: 24
139.5.251.0/24 maxlen: 24
139.5.252.0/22 maxlen: 24
144.48.72.0/22 maxlen: 24
146.196.32.0/22 maxlen: 24
146.196.36.0/24 maxlen: 24
146.196.37.0/24 maxlen: 24
146.196.38.0/24 maxlen: 24
146.196.39.0/24 maxlen: 24
160.202.36.0/22 maxlen: 24
192.140.152.0/24 maxlen: 24
192.140.153.0/24 maxlen: 24
192.140.154.0/24 maxlen: 24
192.140.155.0/24 maxlen: 24
202.173.124.0/22 maxlen: 24
2401:9640::/32 maxlen: 32
2401:9640:800::/37 maxlen: 37
2401:9640:1000::/37 maxlen: 37
2401:9640:1800::/37 maxlen: 37
2401:9640:2000::/37 maxlen: 37
2401:9640:2800::/37 maxlen: 37
2401:9640:3000::/37 maxlen: 37
2401:9640:3800::/37 maxlen: 37
2401:9640:4000::/37 maxlen: 37
2401:9640:4800::/37 maxlen: 37
2401:9640:5000::/37 maxlen: 37
2401:9640:5800::/37 maxlen: 37
2401:9640:6000::/37 maxlen: 37
2401:9640:6800::/37 maxlen: 37
2401:9640:7000::/37 maxlen: 37
2401:9640:7800::/37 maxlen: 37
2401:9640:8000::/37 maxlen: 37
2401:9640:8800::/37 maxlen: 37
2407:aec0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35138 (0x8942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:58:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a20e-9501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:57:6a:d1:f9:3e:27:cc:d6:7a:cb:17:78:
18:59:dd:ba:89:75:f5:c4:58:57:32:5b:a7:f8:09:
d0:69:a3:d5:28:7b:6e:51:f8:71:24:ed:74:5f:27:
e4:66:35:a6:12:27:13:30:df:ff:12:ce:af:8a:71:
68:d8:5f:ac:15:e9:1e:e3:ca:76:b6:54:ed:a4:2d:
b9:6b:39:8e:5d:2a:e1:91:7e:1c:3d:3a:57:78:20:
de:aa:11:e4:90:9f:a7:66:aa:16:51:50:37:dd:fc:
42:ec:80:15:a4:2d:c2:ed:59:d3:ea:1c:9f:38:a2:
ff:80:6e:ae:ba:ab:6e:9d:a1:9e:a7:b9:8d:82:26:
be:1c:c7:16:30:e0:db:b0:c5:e3:65:c7:c9:66:28:
c8:91:e3:5f:47:56:86:d1:3e:ba:24:cb:f3:3a:84:
af:a7:99:bf:4d:21:45:06:5c:5f:21:55:63:80:e3:
62:66:c6:7a:c8:51:be:7b:13:d9:ca:93:dd:72:47:
56:cf:65:fb:c0:96:0e:61:1b:48:68:45:e5:8e:48:
06:6c:68:2e:6c:83:dd:a3:35:6d:64:a0:4d:9b:9f:
ce:be:43:b7:26:fd:d0:96:1c:01:ae:42:ee:26:73:
73:c2:f0:9c:17:48:5f:d6:51:ab:d6:f2:fb:b5:9d:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:4C:E0:15:F3:21:E3:06:53:7F:E8:42:76:21:8C:8B:0C:E6:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.156.0/22
103.46.200.0/22
103.48.196.0/22
103.56.228.0/22
103.57.84.0/22
103.85.143.0/24
103.87.56.0/22
103.92.40.0/22
103.95.80.0/22
103.108.4.0/22
103.110.48.0/23
103.120.50.0/23
103.139.56.0/24
103.157.227.0/24
103.160.26.0/23
103.161.56.0/23
103.164.188.0/24
103.170.80.0/23
103.172.72.0/23
103.177.120.0/23
103.181.166.0/24
103.205.146.0/24
103.211.12.0-103.211.19.255
103.211.52.0/22
103.212.144.0/22
103.212.156.0/22
103.214.60.0/22
110.235.216.0/22
110.235.224.0/20
139.5.240.0/22
139.5.248.0/21
144.48.72.0/22
146.196.32.0/21
160.202.36.0/22
192.140.152.0/22
202.173.124.0/22
IPv6:
2401:9640::/32
2407:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
31:68:9d:8c:4a:ae:c2:d7:35:52:09:a4:bc:8c:0c:47:25:ac:
61:54:61:39:c2:25:30:1b:33:6a:02:04:9b:e9:2a:e2:f9:b0:
57:07:4b:12:39:70:c2:29:63:2d:af:f1:58:eb:30:48:29:2b:
f8:6f:cf:89:4f:c2:ac:b6:09:72:7b:f9:d5:ff:d7:58:f9:3d:
1b:33:f0:84:30:31:4d:2f:4f:7a:59:5b:43:92:c0:78:97:24:
2d:eb:ca:d1:d8:a1:1a:f2:26:72:5a:09:a4:8a:3c:33:d6:d9:
10:f0:3b:31:b4:80:02:51:83:1e:b8:d4:a9:da:7c:e3:92:1e:
d0:cd:cd:89:53:77:69:39:98:99:8d:de:1a:f7:ab:b6:d2:81:
97:7c:48:e6:bd:6b:25:6b:da:b0:6d:bd:6d:37:2e:e1:cd:f9:
db:a6:af:e4:61:f0:d1:d2:cb:75:94:93:cf:c2:29:f4:54:77:
ae:5c:df:a1:fe:c1:00:cc:03:ef:9a:b7:ed:b9:d6:a8:05:a8:
af:15:12:88:16:48:1a:c2:de:6d:16:dd:3d:82:48:3e:c1:f0:
5a:bf:66:9b:79:32:23:8e:4c:88:3d:05:2c:39:17:ae:75:78:
58:72:8b:da:89:78:6d:08:b5:93:6f:e5:29:70:15:1e:9a:c0:
a7:80:1d:32
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIDAIlCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTgwNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyMGUtOTUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO3CV2rR+T4nzNZ6yxd4GFnduol19cRYVzJbp/gJ0Gmj1Sh7blH4cSTtdF8n
5GY1phInEzDf/xLOr4pxaNhfrBXpHuPKdrZU7aQtuWs5jl0q4ZF+HD06V3gg3qoR
5JCfp2aqFlFQN938QuyAFaQtwu1Z0+ocnzii/4Burrqrbp2hnqe5jYImvhzHFjDg
27DF42XHyWYoyJHjX0dWhtE+uiTL8zqEr6eZv00hRQZcXyFVY4DjYmbGeshRvnsT
2cqT3XJHVs9l+8CWDmEbSGhF5Y5IBmxoLmyD3aM1bWSgTZufzr5Dtyb90JYcAa5C
7iZzc8LwnBdIX9ZRq9by+7Wdx08CAwEAAaOCA40wggOJMB0GA1UdDgQWBBRnbUzg
FfMh4wZTf+hCdiGMiwzmfTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JEMkY5NTRF
QzRDNTExRUU4Nzk1RDIxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBFQYIKwYBBQUHAQcB
Af8EggEEMIIBADCB5wQCAAEwgeADBAItdpwDBAJnLsgDBAJnMMQDBAJnOOQDBAJn
OVQDBABnVY8DBAJnVzgDBAJnXCgDBAJnX1ADBAJnbAQDBAFnbjADBAFneDIDBABn
izgDBABnneMDBAFnoBoDBAFnoTgDBABnpLwDBAFnqlADBAFnrEgDBAFnsXgDBABn
taYDBABnzZIwDAMEAmfTDAMEAmfTEAMEAmfTNAMEAmfUkAMEAmfUnAMEAmfWPAME
Am7r2AMEBG7r4AMEAosF8AMEA4sF+AMEApAwSAMEA5LEIAMEAqDKJAMEAsCMmAME
AsqtfDAUBAIAAjAOAwUAJAGWQAMFACQHrsAwDQYJKoZIhvcNAQELBQADggEBADFo
nYxKrsLXNVIJpLyMDEclrGFUYTnCJTAbM2oCBJvpKuL5sFcHSxI5cMIpYy2v8Vjr
MEgpK/hvz4lPwqy2CXJ7+dX/11j5PRsz8IQwMU0vT3pZW0OSwHiXJC3rytHYoRry
JnJaCaSKPDPW2RDwOzG0gAJRgx641KnafOOSHtDNzYlTd2k5mJmN3hr3q7bSgZd8
SOa9ayVr2rBtvW03LuHN+dumr+Rh8NHSy3WUk8/CKfRUd65c36H+wQDMA++at+25
1qgFqK8VEogWSBrC3m0W3T2CSD7B8Fq/Zpt5MiOOTIg9BSw5F651eFhyi9qJeG0I
tZNv5SlwFR6awKeAHTI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:09 2025 by rpki-client