Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67523B4849E11EF98675122C4F9AE02.roa
File: C67523B4849E11EF98675122C4F9AE02.roa (raw, json)
Hash identifier: ItUfjgDqdFkNDPEeW8cTLECZBLRL15Jvu4L/IerbeLg=
Subject key identifier: 3F:A5:E5:4B:6D:1C:2F:DA:DB:B5:A1:4F:BB:94:3C:2C:BF:F1:BB:3A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9AE5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67523B4849E11EF98675122C4F9AE02.roa
Signing time: Mon 07 Oct 2024 11:24:54 +0000
ROA not before: Mon 07 Oct 2024 11:24:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 45.248.156.0/22 maxlen: 24
45.248.160.0/22 maxlen: 24
101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
101.0.38.0/24 maxlen: 24
101.0.41.0/24 maxlen: 24
101.0.42.0/24 maxlen: 24
101.0.45.0/24 maxlen: 24
101.0.49.0/24 maxlen: 24
101.0.50.0/24 maxlen: 24
101.0.53.0/24 maxlen: 24
101.0.54.0/23 maxlen: 24
101.0.57.0/24 maxlen: 24
103.40.196.0/22 maxlen: 24
103.41.20.0/22 maxlen: 24
103.41.24.0/22 maxlen: 24
103.41.36.0/22 maxlen: 24
103.66.204.0/22 maxlen: 24
103.66.208.0/22 maxlen: 24
103.72.168.0/22 maxlen: 24
103.72.220.0/22 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 23
103.165.76.0/24 maxlen: 24
103.166.214.0/23 maxlen: 23
103.166.215.0/24 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 23
103.168.33.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 23
103.178.203.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 23
103.179.120.0/24 maxlen: 24
103.179.224.0/23 maxlen: 23
103.179.224.0/24 maxlen: 24
103.179.226.0/23 maxlen: 23
103.179.226.0/24 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 23
103.180.168.0/24 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 23
103.180.174.0/24 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 23
103.181.151.0/24 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.181.212.0/24 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.217.116.0/22 maxlen: 24
103.217.120.0/22 maxlen: 24
103.223.8.0/22 maxlen: 24
103.223.12.0/22 maxlen: 24
114.134.24.0/22 maxlen: 24
163.47.212.0/22 maxlen: 24
175.176.184.0/22 maxlen: 24
180.188.224.0/24 maxlen: 24
180.188.232.0/24 maxlen: 24
180.188.236.0/23 maxlen: 24
180.188.241.0/24 maxlen: 24
180.188.242.0/23 maxlen: 24
180.188.246.0/23 maxlen: 24
180.188.248.0/24 maxlen: 24
180.188.249.0/24 maxlen: 24
180.188.250.0/24 maxlen: 24
180.188.251.0/24 maxlen: 24
180.188.252.0/22 maxlen: 24
202.14.120.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
203.115.68.0/24 maxlen: 24
203.115.73.0/24 maxlen: 24
203.115.84.0/23 maxlen: 24
203.115.91.0/24 maxlen: 24
210.89.39.0/24 maxlen: 24
210.89.58.0/23 maxlen: 24
210.89.61.0/24 maxlen: 24
210.89.62.0/23 maxlen: 24
223.130.28.0/22 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2401:a880::/32 maxlen: 48
2404:7c80::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39653 (0x9ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 7 11:24:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6703c506-5b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:2d:9b:61:b2:5b:16:e7:a1:67:2c:06:2b:
29:ba:f9:cd:24:20:80:af:6a:3c:ea:f7:a1:75:f2:
5d:af:28:b1:0f:3b:10:07:1a:94:7d:fc:4e:ab:28:
39:c4:b0:44:a1:48:b2:5a:ff:dc:7a:db:ff:20:c2:
8b:9c:45:80:29:06:da:69:06:82:ff:36:42:10:57:
a2:5f:05:34:b0:cf:1d:2a:b7:87:05:8b:30:08:2c:
78:09:f7:7d:ce:f9:7d:8a:4c:dc:c2:51:aa:a3:08:
fc:d0:58:59:ac:39:98:dc:e8:56:bf:ab:43:c3:b7:
f7:a0:1a:1b:61:b7:2d:f2:74:ab:33:6a:af:a9:36:
b8:69:81:56:cc:d7:3b:ba:5b:8c:0b:df:03:ef:6b:
cb:91:f3:1b:60:98:25:63:7b:df:00:4c:14:95:7f:
0e:fc:48:03:43:8e:ed:96:0a:d6:14:ac:d5:85:ce:
d1:d0:7c:3c:7a:05:34:7a:af:b2:54:88:6f:51:bd:
29:ed:a6:d9:c1:cc:3a:2f:85:15:85:d0:0f:da:cf:
b1:9d:e8:85:9c:17:6f:7d:b6:ef:f7:b3:9b:83:1d:
ac:1a:0c:39:a9:3c:66:e4:03:d1:82:a8:de:89:95:
c7:b1:c5:0e:16:b9:69:23:de:f5:a8:4f:96:2a:6f:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A5:E5:4B:6D:1C:2F:DA:DB:B5:A1:4F:BB:94:3C:2C:BF:F1:BB:3A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67523B4849E11EF98675122C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.156.0-45.248.163.255
101.0.32.0/22
101.0.37.0-101.0.38.255
101.0.41.0-101.0.42.255
101.0.45.0/24
101.0.49.0-101.0.50.255
101.0.53.0-101.0.55.255
101.0.57.0/24
103.40.196.0/22
103.41.20.0-103.41.27.255
103.41.36.0/22
103.66.204.0-103.66.211.255
103.72.168.0/22
103.72.220.0/22
103.73.148.0-103.73.150.255
103.110.251.0/24
103.114.64.0/23
103.142.198.0/24
103.165.72.0/23
103.165.76.0/23
103.166.214.0/23
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.32.0/23
103.169.242.0/23
103.170.36.0/23
103.173.98.0/23
103.178.64.0/23
103.178.166.0/23
103.178.202.0/23
103.179.10.0/23
103.179.94.0-103.179.97.255
103.179.100.0/22
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.56.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.181.212.0/24
103.183.30.0-103.183.35.255
103.183.216.0/23
103.187.92.0/23
103.187.96.0/23
103.189.82.0/23
103.217.116.0-103.217.123.255
103.223.8.0/21
114.134.24.0/22
163.47.212.0/22
175.176.184.0/22
180.188.224.0/24
180.188.232.0/24
180.188.236.0/23
180.188.241.0-180.188.243.255
180.188.246.0-180.188.255.255
202.14.120.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
203.115.68.0/24
203.115.73.0/24
203.115.84.0/23
203.115.91.0/24
210.89.39.0/24
210.89.58.0/23
210.89.61.0-210.89.63.255
223.130.28.0/22
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2401:a880::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:91:82:7c:19:7a:aa:5a:45:6f:8a:77:c0:f2:71:9f:e9:47:
0b:60:4e:ce:30:fb:0c:64:0a:e8:51:e5:34:3a:00:11:7d:1b:
91:ce:46:b1:26:48:3d:9c:60:7b:f7:0f:d9:0d:1a:70:9f:51:
73:05:bb:b7:5d:57:96:05:fa:ca:2d:f2:1b:9d:9d:7d:1c:2c:
3f:32:83:88:08:3f:d1:b4:6f:69:df:dd:19:9d:bb:51:2b:21:
55:b1:92:4c:bc:1b:78:06:13:39:dd:3a:ed:f0:85:7a:71:c3:
25:ab:19:7c:07:20:eb:19:cf:65:b7:e2:a4:15:c6:3d:a2:04:
54:f8:14:0c:74:53:e2:26:fb:d0:3c:fe:6e:59:ba:f6:06:bb:
66:4d:e9:c6:c0:29:00:53:a1:a2:31:87:42:a8:08:4b:c6:04:
6c:5e:f6:72:4f:b0:05:0d:eb:da:bb:73:46:ee:3c:d4:14:27:
90:d9:ce:e5:e0:39:5e:f8:d7:37:fb:dc:83:95:27:d7:74:8d:
41:ec:b6:5a:14:11:61:62:e0:bf:dd:72:20:ca:a5:47:2c:ec:
6e:05:5e:76:0f:b1:3e:77:e7:ee:ca:b4:20:7c:d2:a4:2e:91:
d6:a1:49:a6:b7:34:93:dd:f4:25:66:38:e9:47:21:b2:87:46:
79:19:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:20 2025 by rpki-client