Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E117D6926E9811EF8C39A53EC4F9AE02.roa
File: E117D6926E9811EF8C39A53EC4F9AE02.roa (raw, json)
Hash identifier: 8r+2nbieoAS01VYKZH/dKelyoDzGN9WOn3lowfgnbPk=
Subject key identifier: 56:29:6F:28:1A:CE:DD:F9:31:60:11:03:8B:0F:09:84:25:86:E5:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 984B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E117D6926E9811EF8C39A53EC4F9AE02.roa
Signing time: Mon 09 Sep 2024 10:47:16 +0000
ROA not before: Mon 09 Sep 2024 10:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.163.177.0/24 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38987 (0x984b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 9 10:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ded234-f257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:a9:33:85:0e:16:24:c7:ab:9a:49:28:c4:
7f:78:d1:f2:79:d7:e3:da:0e:41:ef:d8:e7:22:ac:
03:d1:33:52:64:3b:65:e0:36:2c:5b:c0:a7:1e:8d:
5e:8b:5d:64:f0:a0:3f:cc:09:43:1c:90:70:6c:35:
39:e2:e7:65:dd:5c:2a:b3:f8:63:b2:1b:03:f8:42:
3e:ca:9b:7c:2b:a2:18:29:5d:ac:bc:a2:d0:77:81:
ec:8d:da:41:eb:00:2a:f2:77:a5:4a:b6:86:e8:50:
fc:bf:af:5a:8a:61:3e:7d:2f:6b:b6:95:1f:cd:d2:
76:36:08:a6:7a:97:ba:d8:21:2c:49:7f:f0:77:42:
f9:1f:3f:4e:a9:e0:03:e4:ae:90:9d:75:7f:30:60:
8b:56:d0:dd:20:41:52:ca:04:17:37:3b:4a:22:e1:
86:93:b6:c8:4e:bf:76:ca:8b:f5:0d:88:47:5b:d4:
22:6e:71:55:b8:7e:8e:8c:6d:6a:a0:f9:1f:83:52:
e1:e0:5f:4f:48:83:5d:10:fa:4b:72:c7:e3:f8:c6:
22:02:e2:10:8a:83:46:a1:1a:a7:6b:47:b0:02:d0:
20:ef:af:3b:ef:d5:40:95:7d:57:43:cd:c2:ff:bd:
0e:aa:b1:bf:54:78:e2:96:48:43:1d:86:f4:f1:34:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:29:6F:28:1A:CE:DD:F9:31:60:11:03:8B:0F:09:84:25:86:E5:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E117D6926E9811EF8C39A53EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.121.0.0/22
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.163.177.0/24
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ff:10:53:e1:2b:25:d5:85:d9:07:6b:81:d2:45:34:4b:2b:
b4:da:fe:80:66:4b:bf:74:fb:6c:63:f5:0e:fe:b8:36:02:2a:
c4:dc:45:47:0b:6a:e8:f3:38:2a:22:7b:14:f4:a8:12:51:20:
88:a1:97:73:24:cb:ea:e2:67:fe:22:a0:42:4e:c2:0c:b9:85:
d4:ef:0f:1b:9c:6f:95:8f:05:c0:5e:b4:16:1f:de:57:db:be:
a4:93:80:df:cb:b1:83:f7:de:ea:96:ae:e9:66:80:bf:82:aa:
10:12:1d:f4:a6:e6:d0:e3:ee:85:3c:bc:a6:a1:47:60:fe:c6:
45:7a:4d:c8:5e:c5:60:07:14:7a:e6:15:1d:f8:89:1c:b8:93:
9d:73:84:14:92:35:84:18:21:c6:3f:28:a8:b1:97:76:65:e9:
d2:b9:ed:63:a7:6b:00:45:32:d9:58:85:09:16:9a:3b:35:8a:
d7:7a:dd:a5:c1:fa:d0:5c:a5:e2:d4:c0:04:99:b6:7a:19:d3:
8d:59:84:3b:6a:0e:ef:72:67:ca:c9:22:11:fb:e8:be:bd:ea:
b2:72:22:f3:33:08:48:30:31:ab:33:91:67:a2:c8:ed:f4:92:
84:e7:27:7a:82:16:46:b6:c4:56:17:24:78:30:79:eb:52:ac:
62:83:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:26 2025 by rpki-client