Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
File: F879A552A6E111EDB4B73118C4F9AE02.roa (raw, json)
Hash identifier: jM2+toTj/7HFm3hyJtUciQpMOvQVLRUr44ZRSomAwfQ=
Subject key identifier: 1B:23:1B:BF:0C:00:99:43:BD:20:88:63:D3:24:8A:D1:2A:ED:CC:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71AA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
Signing time: Wed 10 May 2023 16:49:23 +0000
ROA not before: Wed 10 May 2023 16:49:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55824
IP address blocks: 45.118.48.0/21 maxlen: 21
45.118.48.0/22 maxlen: 24
45.118.52.0/22 maxlen: 24
45.118.96.0/22 maxlen: 24
45.118.100.0/22 maxlen: 24
45.118.168.0/22 maxlen: 24
45.118.172.0/22 maxlen: 24
45.118.192.0/22 maxlen: 24
45.118.196.0/22 maxlen: 24
45.118.208.0/22 maxlen: 24
45.118.212.0/22 maxlen: 24
45.119.16.0/22 maxlen: 24
45.119.20.0/22 maxlen: 24
45.119.32.0/22 maxlen: 24
45.119.36.0/22 maxlen: 24
45.119.168.0/22 maxlen: 24
45.119.172.0/22 maxlen: 24
45.124.184.0/22 maxlen: 24
45.124.188.0/22 maxlen: 24
45.125.144.0/22 maxlen: 24
45.125.148.0/22 maxlen: 24
45.125.176.0/22 maxlen: 24
45.125.180.0/22 maxlen: 24
45.127.64.0/24 maxlen: 24
45.127.65.0/24 maxlen: 24
45.127.66.0/24 maxlen: 24
45.127.67.0/24 maxlen: 24
45.127.68.0/24 maxlen: 24
45.127.69.0/24 maxlen: 24
45.127.70.0/24 maxlen: 24
45.127.71.0/24 maxlen: 24
45.127.72.0/24 maxlen: 24
45.127.73.0/24 maxlen: 24
45.127.74.0/24 maxlen: 24
45.127.75.0/24 maxlen: 24
45.127.76.0/24 maxlen: 24
45.127.77.0/24 maxlen: 24
103.58.80.0/22 maxlen: 24
103.58.84.0/22 maxlen: 24
103.58.120.0/22 maxlen: 23
103.58.120.0/24 maxlen: 24
103.58.122.0/23 maxlen: 24
103.58.124.0/22 maxlen: 24
103.58.168.0/22 maxlen: 24
103.58.172.0/22 maxlen: 24
103.58.200.0/22 maxlen: 24
103.58.204.0/22 maxlen: 24
103.58.240.0/22 maxlen: 24
103.58.244.0/22 maxlen: 24
103.59.16.0/22 maxlen: 24
103.59.20.0/22 maxlen: 24
103.59.66.0/24 maxlen: 24
103.59.80.0/22 maxlen: 24
103.59.84.0/22 maxlen: 24
103.59.224.0/22 maxlen: 24
103.59.228.0/22 maxlen: 24
103.60.48.0/22 maxlen: 24
103.60.52.0/22 maxlen: 24
103.68.177.0/24 maxlen: 24
103.194.24.0/24 maxlen: 24
103.194.28.0/22 maxlen: 24
103.194.56.0/22 maxlen: 24
103.194.60.0/22 maxlen: 24
103.194.136.0/22 maxlen: 24
103.194.140.0/22 maxlen: 24
103.194.200.0/22 maxlen: 24
103.194.204.0/22 maxlen: 24
103.194.216.0/22 maxlen: 24
103.194.220.0/22 maxlen: 24
103.213.16.0/22 maxlen: 24
103.213.20.0/22 maxlen: 24
103.218.144.0/22 maxlen: 24
103.218.148.0/22 maxlen: 24
220.156.190.0/23 maxlen: 24
2001:df3:1e00::/48 maxlen: 48
2406:f00:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29098 (0x71aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:49:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcb13-6b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:2f:1c:6d:01:ca:0b:9b:3e:ea:88:0b:28:
c7:50:d6:9f:ad:67:77:df:88:4b:5a:97:06:6f:f0:
84:ac:8d:13:69:f5:64:ea:33:ea:95:9f:ac:f4:cf:
df:0c:61:b1:de:c6:0e:ec:10:a1:24:50:c4:e2:47:
eb:60:2f:04:04:ce:d2:27:b9:90:de:c7:07:6d:4b:
5f:03:1e:61:b5:5f:a8:56:39:13:30:77:29:c0:0d:
0e:b1:a9:a2:e0:13:2f:45:42:2d:ca:6b:cc:9f:06:
b1:c5:94:1d:ca:54:96:59:89:51:7f:fd:18:c5:f8:
b7:27:a1:a2:34:42:3a:79:cd:d3:87:e8:19:a3:f8:
a6:41:cb:db:58:0b:09:e9:ce:27:bc:3b:b0:ee:9c:
06:d0:85:13:c1:01:fc:45:14:59:21:3c:e4:f6:16:
76:3b:2b:7e:ad:c6:ba:62:dd:ae:a1:a3:ed:d5:62:
84:12:80:bc:42:57:95:34:f4:72:a5:d2:f8:05:83:
16:e6:7d:4e:f2:16:51:fd:3f:95:e2:14:4a:c8:7f:
91:87:79:c0:43:b7:1e:4f:71:80:26:f2:df:14:80:
82:a8:f9:5a:b2:a4:5d:5b:5a:b8:22:3c:7b:73:6a:
39:c6:f2:3e:b7:29:16:e8:ee:2c:b4:fb:40:ee:ac:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:1B:BF:0C:00:99:43:BD:20:88:63:D3:24:8A:D1:2A:ED:CC:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.48.0/21
45.118.96.0/21
45.118.168.0/21
45.118.192.0/21
45.118.208.0/21
45.119.16.0/21
45.119.32.0/21
45.119.168.0/21
45.124.184.0/21
45.125.144.0/21
45.125.176.0/21
45.127.64.0-45.127.77.255
103.58.80.0/21
103.58.120.0/21
103.58.168.0/21
103.58.200.0/21
103.58.240.0/21
103.59.16.0/21
103.59.66.0/24
103.59.80.0/21
103.59.224.0/21
103.60.48.0/21
103.68.177.0/24
103.194.24.0/24
103.194.28.0/22
103.194.56.0/21
103.194.136.0/21
103.194.200.0/21
103.194.216.0/21
103.213.16.0/21
103.218.144.0/21
220.156.190.0/23
IPv6:
2001:df3:1e00::/48
2406:f00:3::/48
Signature Algorithm: sha256WithRSAEncryption
4a:a1:e9:aa:54:1f:44:50:fd:d7:31:74:f3:a3:52:6d:1c:99:
e2:3d:78:59:d5:89:9c:d0:eb:b7:0c:e8:11:b5:02:0f:76:a4:
95:87:e9:81:90:c5:f1:ca:ce:b9:91:a0:21:9f:7e:05:23:76:
2d:82:60:10:77:12:e0:95:18:87:b8:00:cd:fb:84:b5:72:97:
fe:a4:6f:b9:22:24:d3:87:34:2e:44:7e:c0:3c:a1:61:b7:25:
10:be:dc:e8:d9:bc:42:a7:0f:29:53:c5:2c:5d:fe:1f:e7:fe:
ec:52:6b:9d:61:67:42:c7:fc:d0:1d:65:31:8c:bf:c2:cf:e5:
6a:5d:90:10:2f:de:f4:7c:29:30:d7:1a:db:2b:81:75:a3:22:
3f:37:41:80:de:f4:3d:ae:3b:3e:11:fe:11:ae:ea:91:a9:95:
42:a9:cb:9a:cd:5e:4a:87:ba:fb:9c:48:bb:47:43:50:45:88:
3f:58:39:fe:d8:fd:3a:53:fb:95:d6:cf:76:3b:ae:1b:9d:35:
77:93:1e:6e:19:e2:e4:67:b6:30:91:5d:50:0f:f3:0e:08:8f:
97:8f:64:14:dc:e5:e9:c2:6c:8c:07:5a:0f:2b:7b:b8:37:cc:
e3:34:64:7f:9a:c9:79:90:f6:cd:09:85:32:fa:1c:e8:6a:8a:
dc:28:63:29
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgICcaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViY2IxMy02Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vEvHG0BygubPuqICyjHUNafrWd334hLWpcGb/CErI0TafVk6jPqlZ+s9M/f
DGGx3sYO7BChJFDE4kfrYC8EBM7SJ7mQ3scHbUtfAx5htV+oVjkTMHcpwA0Osami
4BMvRUItymvMnwaxxZQdylSWWYlRf/0Yxfi3J6GiNEI6ec3Th+gZo/imQcvbWAsJ
6c4nvDuw7pwG0IUTwQH8RRRZITzk9hZ2Oyt+rca6Yt2uoaPt1WKEEoC8QleVNPRy
pdL4BYMW5n1O8hZR/T+V4hRKyH+Rh3nAQ7ceT3GAJvLfFICCqPlasqRdW1q4Ijx7
c2o5xvI+tykW6O4stPtA7qxbywIDAQABo4IDdjCCA3IwHQYDVR0OBBYEFBsjG78M
AJlDvSCIY9MkitEq7cw1MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjg3OUE1NTJB
NkUxMTFFREI0QjczMTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgf8GCCsGAQUFBwEHAQH/
BIHvMIHsMIHPBAIAATCByAMEAy12MAMEAy12YAMEAy12qAMEAy12wAMEAy120AME
Ay13EAMEAy13IAMEAy13qAMEAy18uAMEAy19kAMEAy19sDAMAwQGLX9AAwQBLX9M
AwQDZzpQAwQDZzp4AwQDZzqoAwQDZzrIAwQDZzrwAwQDZzsQAwQAZztCAwQDZztQ
AwQDZzvgAwQDZzwwAwQAZ0SxAwQAZ8IYAwQCZ8IcAwQDZ8I4AwQDZ8KIAwQDZ8LI
AwQDZ8LYAwQDZ9UQAwQDZ9qQAwQB3Jy+MBgEAgACMBIDBwAgAQ3zHgADBwAkBg8A
AAMwDQYJKoZIhvcNAQELBQADggEBAEqh6apUH0RQ/dcxdPOjUm0cmeI9eFnViZzQ
67cM6BG1Ag92pJWH6YGQxfHKzrmRoCGffgUjdi2CYBB3EuCVGIe4AM37hLVyl/6k
b7kiJNOHNC5EfsA8oWG3JRC+3OjZvEKnDylTxSxd/h/n/uxSa51hZ0LH/NAdZTGM
v8LP5WpdkBAv3vR8KTDXGtsrgXWjIj83QYDe9D2uOz4R/hGu6pGplUKpy5rNXkqH
uvucSLtHQ1BFiD9YOf7Y/TpT+5XWz3Y7rhudNXeTHm4Z4uRntjCRXVAP8w4Ij5eP
ZBTc5enCbIwHWg8re7g3zOM0ZH+ayXmQ9s0JhTL6HOhqitwoYyk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:15 2025 by rpki-client