Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/94FF9B64366311EEB376DC3AC4F9AE02.roa
File: 94FF9B64366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: Swv7KC2cTde25X8oGxPODN+uE0zb2Bw+QImlpw+j7+U=
Subject key identifier: B2:D6:F8:62:DB:65:54:67:FC:33:B7:D1:DD:C1:BB:70:15:B0:6A:58
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 52
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/94FF9B64366311EEB376DC3AC4F9AE02.roa
Signing time: Wed 29 Nov 2023 07:16:58 +0000
ROA not before: Wed 29 Nov 2023 07:16:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132280
IP address blocks: 83.118.0.0/17 maxlen: 17
83.118.0.0/21 maxlen: 23
83.118.8.0/21 maxlen: 23
83.118.16.0/21 maxlen: 23
83.118.24.0/21 maxlen: 23
83.118.26.0/23 maxlen: 24
83.118.32.0/21 maxlen: 23
83.118.32.0/24 maxlen: 24
83.118.35.0/24 maxlen: 24
83.118.36.0/24 maxlen: 24
83.118.40.0/21 maxlen: 23
83.118.45.0/24 maxlen: 24
83.118.48.0/21 maxlen: 23
83.118.52.0/24 maxlen: 24
83.118.55.0/24 maxlen: 24
83.118.56.0/21 maxlen: 23
83.118.56.0/23 maxlen: 24
83.118.61.0/24 maxlen: 24
83.118.64.0/21 maxlen: 23
83.118.65.0/24 maxlen: 24
83.118.72.0/21 maxlen: 23
83.118.75.0/24 maxlen: 24
83.118.80.0/21 maxlen: 23
83.118.88.0/21 maxlen: 23
83.118.92.0/24 maxlen: 24
83.118.96.0/21 maxlen: 23
83.118.98.0/24 maxlen: 24
83.118.104.0/21 maxlen: 23
83.118.105.0/24 maxlen: 24
83.118.109.0/24 maxlen: 24
83.118.111.0/24 maxlen: 24
83.118.112.0/21 maxlen: 23
83.118.112.0/24 maxlen: 24
83.118.114.0/24 maxlen: 24
83.118.118.0/24 maxlen: 24
83.118.120.0/21 maxlen: 23
83.118.120.0/23 maxlen: 24
87.124.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Nov 29 07:16:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6566e569-e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:61:9e:20:b1:a5:b2:0d:d9:a1:80:59:1a:
b9:0c:24:bb:7e:fa:3b:5e:aa:a2:a5:1c:c8:52:c3:
3c:0d:ab:2c:cd:36:8d:aa:cc:4b:3f:54:6f:78:2f:
6e:b3:be:d3:de:67:c5:5e:d6:87:fb:d5:d8:14:94:
cd:24:5e:f7:7d:bd:d7:09:7a:ac:1e:5e:ef:76:c1:
d2:c8:5f:e9:51:e8:94:a9:ac:54:5a:05:ed:ea:00:
29:23:0b:a8:30:36:44:cc:5f:53:4c:6e:b3:24:c0:
0f:47:71:b2:3d:38:a5:e4:da:91:b8:16:fb:2f:cc:
d8:8c:64:0f:5f:ae:ad:60:a3:97:1b:d8:43:a5:44:
43:86:e8:2c:9d:5d:08:ac:8d:a6:40:b0:9c:0b:68:
19:c0:2e:fa:d3:ee:75:b6:2b:ac:1b:1d:fc:5a:c0:
8b:0c:b2:3b:77:fd:47:ce:9e:43:84:0e:7a:11:f3:
e2:46:0b:6d:96:8f:5d:70:be:4d:86:1a:ba:ae:3a:
e1:e2:de:52:d9:f0:f3:e9:e5:6d:9a:0e:6b:13:cc:
a0:82:4b:a9:39:62:c5:73:71:de:9c:04:ca:b7:cc:
ef:ee:52:aa:76:0c:b3:6a:7e:69:9a:5b:9f:ea:18:
e3:55:e0:89:6c:73:be:d9:73:d6:68:3c:b7:08:87:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:F8:62:DB:65:54:67:FC:33:B7:D1:DD:C1:BB:70:15:B0:6A:58
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/94FF9B64366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.118.0.0/17
87.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0e:53:24:35:38:f9:a7:0b:b6:c1:bc:a6:1f:68:f1:85:81:89:
fb:a7:52:19:ce:0f:00:a4:a0:74:7f:07:74:6c:a6:b9:1f:c9:
3d:cc:70:dd:16:80:14:85:be:23:93:6c:ec:bd:91:d5:ba:a1:
44:fb:cc:e5:e1:5f:05:ac:77:2a:77:3e:c7:26:80:2a:ba:2f:
d2:42:13:d4:1e:c6:36:94:30:e9:60:fd:4b:0d:44:9a:f0:10:
a5:1e:81:7f:e6:39:fc:02:34:8d:65:c2:f4:98:ad:bd:58:63:
9d:02:49:0b:2d:51:64:b4:c1:e5:d9:c1:df:1c:21:d0:13:c2:
73:12:1a:8b:c8:62:cd:5e:ec:59:f1:20:7a:a8:db:0f:19:88:
f9:70:eb:de:4a:dd:a8:94:d6:fe:39:07:81:4c:46:95:77:dd:
d3:99:c4:e2:69:77:89:6b:16:03:c6:c6:ca:7b:36:03:76:cf:
4c:3d:10:de:67:8a:1f:bd:e2:cc:dd:70:e8:bd:d9:a2:e4:76:
08:41:21:1c:07:20:fb:fd:14:2e:69:8e:ad:1f:65:df:89:e7:
6b:f2:ac:33:7d:61:c5:f2:ce:56:05:35:2e:53:6f:8b:a0:f0:
22:a3:fe:a7:b0:c1:1a:22:b0:4b:59:ec:6b:d1:b8:d8:44:83:
e9:3a:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:54 2025 by rpki-client