Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/0F9538B2705F11EF9102C64DC4F9AE02.roa
File: 0F9538B2705F11EF9102C64DC4F9AE02.roa (raw, json)
Hash identifier: 4xNFkzhx20sXQsF9QTb4REY3OTWEwlbdtGmImoG4xJo=
Subject key identifier: A3:B6:5B:EC:E5:54:BE:D8:91:02:23:8E:59:23:82:33:8B:05:B9:3D
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0BC8
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/0F9538B2705F11EF9102C64DC4F9AE02.roa
Signing time: Wed 11 Sep 2024 16:58:26 +0000
ROA not before: Wed 11 Sep 2024 16:58:26 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
42.153.200.0/24 maxlen: 24
42.153.201.0/24 maxlen: 24
42.153.202.0/24 maxlen: 24
42.153.203.0/24 maxlen: 24
42.153.204.0/24 maxlen: 24
42.153.205.0/24 maxlen: 24
42.153.206.0/24 maxlen: 24
42.153.207.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00::/46 maxlen: 46
2401:3c00:4::/46 maxlen: 46
2401:3c00:8::/46 maxlen: 46
2401:3c00:c::/46 maxlen: 46
2401:3c00:10::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:40::/46 maxlen: 46
2401:3c00:44::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:4c::/46 maxlen: 46
2401:3c00:50::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:c8::/46 maxlen: 46
2401:3c00:cc::/46 maxlen: 46
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:241::/48 maxlen: 48
2401:3c00:242::/48 maxlen: 48
2401:3c00:243::/48 maxlen: 48
2401:3c00:244::/48 maxlen: 48
2401:3c00:245::/48 maxlen: 48
2401:3c00:246::/48 maxlen: 48
2401:3c00:247::/48 maxlen: 48
2401:3c00:248::/48 maxlen: 48
2401:3c00:249::/48 maxlen: 48
2401:3c00:24a::/48 maxlen: 48
2401:3c00:24b::/48 maxlen: 48
2401:3c00:24c::/48 maxlen: 48
2401:3c00:24d::/48 maxlen: 48
2401:3c00:24e::/48 maxlen: 48
2401:3c00:24f::/48 maxlen: 48
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Sep 11 16:58:26 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66e1cc32-b212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:6a:6b:d1:97:05:5a:b3:40:66:f1:d5:40:
cb:43:9d:1a:f4:91:a0:52:99:ff:90:03:57:a4:aa:
2d:b3:57:ab:34:5b:78:51:4e:22:4c:99:f3:48:a9:
22:da:00:a3:70:79:78:46:f1:ab:a1:e4:8a:66:52:
b2:0f:0a:a8:d0:84:b1:cc:d0:af:fc:11:8f:3f:f2:
55:76:52:0d:e8:34:e5:99:ab:b1:89:ec:0b:cd:75:
20:b7:1b:09:81:95:94:ac:e6:61:89:99:4c:36:63:
0d:e7:3c:e5:78:34:af:e1:ca:a3:a1:3f:64:2e:ed:
41:65:58:92:9a:2a:47:69:19:e0:85:10:7c:be:61:
6d:d9:e3:22:c4:cc:46:c4:16:8e:d8:0c:8a:54:94:
fd:63:5c:6b:68:df:0d:6c:98:52:a1:b2:f4:81:9b:
7f:64:50:eb:bb:8e:d0:de:80:71:79:13:06:4b:40:
7b:e7:c2:91:47:ba:09:55:43:c1:a2:7a:91:05:4c:
96:ce:d6:d3:fb:ff:29:13:20:ad:c4:55:a9:5d:29:
ec:55:f8:b8:88:4a:61:9f:57:bd:12:fc:21:30:8f:
15:a6:0c:d5:05:f9:6f:8e:43:95:bd:70:c8:a1:90:
71:6d:86:dd:7c:da:47:4f:14:dd:cd:c1:7d:e1:15:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:5B:EC:E5:54:BE:D8:91:02:23:8E:59:23:82:33:8B:05:B9:3D
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/0F9538B2705F11EF9102C64DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:40::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:c8::/45
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
5d:13:31:e7:9c:28:1b:b3:0c:7c:11:7a:a6:e6:6b:da:6e:62:
5b:11:13:70:db:66:a1:d4:c4:2a:23:83:ac:28:b9:17:bd:09:
09:10:0f:ee:f8:6f:c6:e8:63:4d:87:c5:52:7d:8a:97:7a:63:
54:4c:ee:65:cc:82:f4:13:3e:88:3d:db:b0:2c:2d:27:8f:d9:
32:00:62:f5:1f:c8:82:b6:a4:b9:08:fa:df:49:19:4c:63:9c:
99:b4:03:e5:67:d9:83:80:c8:d7:ee:59:97:97:6e:10:bf:f0:
f6:54:88:f7:77:a7:70:d8:22:26:d1:aa:fa:15:e4:01:0f:ed:
38:b6:97:8a:fa:1f:14:ee:c0:91:da:e7:0a:bb:60:96:fa:bf:
f7:d8:8a:04:9d:27:4c:3e:be:7f:46:d1:cb:53:02:9c:19:7c:
9b:be:4d:1e:c1:e0:ad:8a:93:69:fd:38:54:d5:3e:95:83:65:
c1:77:e6:97:9d:8a:aa:3d:ba:66:5f:65:87:3b:f1:f9:b0:41:
bb:a5:f4:c3:41:34:c4:c4:3b:33:a7:ab:d6:c3:58:1e:bc:ec:
a0:88:0a:89:78:50:e4:40:f2:14:89:59:36:e1:cc:b4:ab:e4:
c1:07:d9:c0:0b:cf:f7:d5:d4:71:b2:bb:1d:e6:36:4c:cb:77:
ed:ce:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:11:45 2025 by rpki-client