Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE590484012111EE9BBB0A1FC4F9AE02.roa
File: DE590484012111EE9BBB0A1FC4F9AE02.roa (raw, json)
Hash identifier: XvDKy+mq/N9afTIExSv0q2GaUZRaRPshYdv5PhWFyLs=
Subject key identifier: BE:EF:BA:0E:BA:02:DD:09:EB:A2:8C:CF:4B:B6:80:A3:5E:CD:22:02
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1980
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE590484012111EE9BBB0A1FC4F9AE02.roa
Signing time: Wed 07 Jun 2023 01:25:26 +0000
ROA not before: Wed 07 Jun 2023 01:25:26 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 4837
IP address blocks: 1.24.32.0/21 maxlen: 21
1.24.80.0/21 maxlen: 21
1.24.88.0/22 maxlen: 22
1.24.92.0/23 maxlen: 23
1.24.94.0/24 maxlen: 24
1.24.192.0/21 maxlen: 21
1.24.216.0/22 maxlen: 22
1.24.236.0/22 maxlen: 22
1.25.0.0/21 maxlen: 21
1.25.24.0/21 maxlen: 21
1.25.32.0/22 maxlen: 22
1.25.40.0/21 maxlen: 21
1.25.92.0/22 maxlen: 22
1.25.128.0/21 maxlen: 21
1.28.12.0/22 maxlen: 22
1.28.16.0/21 maxlen: 21
1.28.24.0/22 maxlen: 22
1.28.96.0/22 maxlen: 22
1.28.140.0/22 maxlen: 22
1.28.148.0/22 maxlen: 22
1.28.156.0/22 maxlen: 22
1.28.168.0/22 maxlen: 22
1.28.176.0/22 maxlen: 22
1.28.224.0/22 maxlen: 22
1.30.40.0/21 maxlen: 21
1.30.48.0/22 maxlen: 22
1.30.92.0/22 maxlen: 22
1.30.96.0/22 maxlen: 22
1.30.100.0/22 maxlen: 22
1.30.164.0/22 maxlen: 22
1.30.176.0/21 maxlen: 21
1.31.36.0/22 maxlen: 22
1.31.192.0/22 maxlen: 22
58.18.96.0/20 maxlen: 20
58.240.60.0/23 maxlen: 23
60.23.240.0/20 maxlen: 20
60.28.3.0/24 maxlen: 24
60.28.4.0/22 maxlen: 22
60.28.8.0/24 maxlen: 24
60.28.64.0/21 maxlen: 21
60.28.72.0/23 maxlen: 23
60.28.80.0/20 maxlen: 20
60.28.96.0/23 maxlen: 23
60.30.0.0/24 maxlen: 24
60.30.1.0/24 maxlen: 24
60.30.2.0/24 maxlen: 24
60.30.32.0/21 maxlen: 21
60.30.40.0/23 maxlen: 23
60.31.140.0/22 maxlen: 22
60.31.144.0/21 maxlen: 21
60.31.152.0/22 maxlen: 22
60.31.244.0/24 maxlen: 24
60.220.0.0/14 maxlen: 14
61.138.81.0/24 maxlen: 24
61.138.82.0/24 maxlen: 24
61.138.110.0/24 maxlen: 24
61.181.26.0/24 maxlen: 24
61.181.244.0/24 maxlen: 24
103.3.112.0/22 maxlen: 22
103.3.142.0/24 maxlen: 24
103.251.240.0/22 maxlen: 22
110.17.171.0/24 maxlen: 24
110.18.32.0/20 maxlen: 20
110.18.56.0/22 maxlen: 22
110.18.80.0/21 maxlen: 21
110.18.198.0/23 maxlen: 23
110.18.236.0/22 maxlen: 22
110.18.248.0/21 maxlen: 21
110.19.4.0/24 maxlen: 24
110.19.92.0/24 maxlen: 24
110.19.100.0/22 maxlen: 22
110.19.112.0/21 maxlen: 21
110.19.120.0/21 maxlen: 21
111.160.61.0/24 maxlen: 24
111.160.62.0/24 maxlen: 24
113.9.3.0/24 maxlen: 24
113.9.4.0/24 maxlen: 24
113.9.6.0/24 maxlen: 24
116.112.80.0/20 maxlen: 20
116.113.128.0/19 maxlen: 19
116.113.160.0/21 maxlen: 21
116.115.40.0/21 maxlen: 21
116.115.48.0/20 maxlen: 20
116.115.64.0/19 maxlen: 19
119.248.0.0/14 maxlen: 14
120.0.0.0/12 maxlen: 12
122.97.172.0/22 maxlen: 22
122.97.176.0/22 maxlen: 22
122.136.96.0/19 maxlen: 19
124.67.92.0/22 maxlen: 22
124.67.96.0/20 maxlen: 20
124.93.0.0/16 maxlen: 16
124.93.212.0/22 maxlen: 22
125.35.128.0/20 maxlen: 20
125.211.0.0/16 maxlen: 16
180.129.128.0/17 maxlen: 17
202.99.237.0/24 maxlen: 24
202.99.242.0/24 maxlen: 24
203.93.144.0/20 maxlen: 20
203.93.160.0/20 maxlen: 20
210.5.128.0/20 maxlen: 20
210.22.48.0/20 maxlen: 20
210.51.212.0/22 maxlen: 22
218.21.248.0/22 maxlen: 22
218.21.252.0/23 maxlen: 23
218.21.254.0/24 maxlen: 24
218.24.160.0/20 maxlen: 20
218.26.80.0/21 maxlen: 21
218.61.146.0/24 maxlen: 24
218.62.33.0/24 maxlen: 24
218.67.240.0/24 maxlen: 24
218.67.241.0/24 maxlen: 24
218.67.242.0/24 maxlen: 24
218.69.89.0/24 maxlen: 24
218.69.93.0/24 maxlen: 24
218.69.95.0/24 maxlen: 24
218.69.96.0/24 maxlen: 24
218.69.250.0/24 maxlen: 24
218.104.64.0/20 maxlen: 20
218.104.144.0/20 maxlen: 20
218.106.80.0/20 maxlen: 20
219.158.64.0/20 maxlen: 20
219.158.80.0/20 maxlen: 20
219.158.96.0/20 maxlen: 20
219.158.112.0/20 maxlen: 20
219.159.20.0/22 maxlen: 22
219.159.59.0/24 maxlen: 24
219.159.60.0/23 maxlen: 23
220.248.160.0/19 maxlen: 19
221.3.128.0/17 maxlen: 17
221.8.12.0/24 maxlen: 24
221.10.25.0/24 maxlen: 24
221.13.64.0/19 maxlen: 19
221.192.166.0/23 maxlen: 23
221.199.204.0/22 maxlen: 22
221.203.244.0/22 maxlen: 22
221.203.248.0/21 maxlen: 21
221.208.150.0/24 maxlen: 24
221.208.160.0/22 maxlen: 22
221.208.255.0/24 maxlen: 24
221.212.0.0/16 maxlen: 16
221.212.126.0/24 maxlen: 24
221.213.0.0/16 maxlen: 16
222.161.0.0/22 maxlen: 22
222.161.2.0/23 maxlen: 23
222.161.4.0/22 maxlen: 22
2408:8000:5004::/48 maxlen: 48
2408:822a:9200::/39 maxlen: 39
2408:822a:9400::/38 maxlen: 38
2408:822a:9800::/37 maxlen: 37
2408:822a:a000::/37 maxlen: 37
2408:862a:9200::/39 maxlen: 39
2408:862a:9400::/38 maxlen: 38
2408:862a:9800::/37 maxlen: 37
2408:862a:a000::/37 maxlen: 37
2408:872b:400::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6528 (0x1980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Jun 7 01:25:26 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=647fdc86-073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:86:f6:a1:ce:9a:0b:9c:49:4a:6a:97:11:
7e:29:f7:95:79:a2:1f:f0:52:c4:cf:36:92:91:2f:
12:c2:cb:a7:9b:5a:70:b5:68:2c:04:ea:9e:58:a6:
43:48:13:d7:20:64:12:59:a1:f7:0c:ce:a7:b7:f7:
14:23:2e:4f:70:d3:11:ec:72:e6:4b:58:72:bc:33:
13:3a:e6:37:f4:5b:43:af:69:12:16:8e:7e:3b:8f:
10:9f:c4:dc:32:e3:de:df:aa:76:6c:78:ad:73:d6:
3c:c0:a6:e0:aa:f4:53:90:32:be:75:4b:ee:73:1f:
b9:99:f1:e6:42:b5:b2:be:b4:16:a2:6b:20:6b:4b:
e6:8b:99:17:b8:7c:94:c7:a3:d1:5b:c6:b0:2a:4b:
0f:77:f4:ef:29:61:3d:64:a4:16:07:60:88:51:85:
e1:f0:7e:57:44:1b:64:e3:4f:fa:56:45:61:59:c2:
08:3d:f7:66:37:f7:24:a3:a8:0c:1e:c8:2b:95:20:
1f:cf:a8:61:67:fb:c5:09:93:d7:08:07:65:6b:0e:
f0:1e:7e:fc:8f:4e:4c:6d:4b:16:8b:e8:e5:bf:de:
13:96:51:26:d5:95:05:74:bd:c7:04:03:1b:f1:51:
ee:44:29:27:c7:d6:4d:41:6b:bc:29:bf:07:25:92:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:BA:0E:BA:02:DD:09:EB:A2:8C:CF:4B:B6:80:A3:5E:CD:22:02
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE590484012111EE9BBB0A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.24.32.0/21
1.24.80.0-1.24.94.255
1.24.192.0/21
1.24.216.0/22
1.24.236.0/22
1.25.0.0/21
1.25.24.0-1.25.35.255
1.25.40.0/21
1.25.92.0/22
1.25.128.0/21
1.28.12.0-1.28.27.255
1.28.96.0/22
1.28.140.0/22
1.28.148.0/22
1.28.156.0/22
1.28.168.0/22
1.28.176.0/22
1.28.224.0/22
1.30.40.0-1.30.51.255
1.30.92.0-1.30.103.255
1.30.164.0/22
1.30.176.0/21
1.31.36.0/22
1.31.192.0/22
58.18.96.0/20
58.240.60.0/23
60.23.240.0/20
60.28.3.0-60.28.8.255
60.28.64.0-60.28.73.255
60.28.80.0-60.28.97.255
60.30.0.0-60.30.2.255
60.30.32.0-60.30.41.255
60.31.140.0-60.31.155.255
60.31.244.0/24
60.220.0.0/14
61.138.81.0-61.138.82.255
61.138.110.0/24
61.181.26.0/24
61.181.244.0/24
103.3.112.0/22
103.3.142.0/24
103.251.240.0/22
110.17.171.0/24
110.18.32.0/20
110.18.56.0/22
110.18.80.0/21
110.18.198.0/23
110.18.236.0/22
110.18.248.0/21
110.19.4.0/24
110.19.92.0/24
110.19.100.0/22
110.19.112.0/20
111.160.61.0-111.160.62.255
113.9.3.0-113.9.4.255
113.9.6.0/24
116.112.80.0/20
116.113.128.0-116.113.167.255
116.115.40.0-116.115.95.255
119.248.0.0/14
120.0.0.0/12
122.97.172.0-122.97.179.255
122.136.96.0/19
124.67.92.0-124.67.111.255
124.93.0.0/16
125.35.128.0/20
125.211.0.0/16
180.129.128.0/17
202.99.237.0/24
202.99.242.0/24
203.93.144.0-203.93.175.255
210.5.128.0/20
210.22.48.0/20
210.51.212.0/22
218.21.248.0-218.21.254.255
218.24.160.0/20
218.26.80.0/21
218.61.146.0/24
218.62.33.0/24
218.67.240.0-218.67.242.255
218.69.89.0/24
218.69.93.0/24
218.69.95.0-218.69.96.255
218.69.250.0/24
218.104.64.0/20
218.104.144.0/20
218.106.80.0/20
219.158.64.0/18
219.159.20.0/22
219.159.59.0-219.159.61.255
220.248.160.0/19
221.3.128.0/17
221.8.12.0/24
221.10.25.0/24
221.13.64.0/19
221.192.166.0/23
221.199.204.0/22
221.203.244.0-221.203.255.255
221.208.150.0/24
221.208.160.0/22
221.208.255.0/24
221.212.0.0/15
222.161.0.0/21
IPv6:
2408:8000:5004::/48
2408:822a:9200::-2408:822a:a7ff:ffff:ffff:ffff:ffff:ffff
2408:862a:9200::-2408:862a:a7ff:ffff:ffff:ffff:ffff:ffff
2408:872b:400::/40
Signature Algorithm: sha256WithRSAEncryption
db:c1:2c:0e:78:8d:ed:ac:a4:91:16:7f:85:b2:38:06:a5:04:
ac:3b:b1:67:b3:80:4f:41:14:1e:20:4b:4c:a9:35:83:5b:c1:
17:ae:c6:21:44:b4:d1:6f:91:bd:d2:a6:38:9c:be:e0:5d:80:
ad:6b:d6:ee:80:c5:75:97:bd:34:3f:c6:2c:8b:12:88:a0:60:
15:e6:48:27:34:b2:28:84:3c:6c:c2:a0:03:70:a2:47:fa:fc:
b0:63:48:4c:1c:77:7a:43:09:9e:8e:b9:f2:a9:3f:05:de:8c:
ee:9f:df:2a:8c:e5:d4:de:9d:56:f2:8a:f9:9b:08:0e:9d:8c:
dc:a5:90:45:f5:2e:17:04:0a:6e:b8:d9:6f:fc:16:68:c1:c2:
7e:55:12:e1:90:69:45:4c:1a:92:a7:1e:45:9f:7b:3f:73:b5:
f9:1c:09:cf:e0:b3:7b:71:39:be:5b:8e:00:05:2a:70:61:d1:
84:49:88:69:8f:b2:d7:66:4f:44:a1:10:57:74:fa:28:11:05:
12:2d:9e:0b:2e:d0:de:e4:1b:45:ca:ee:73:17:76:cc:fb:d5:
1d:f7:8d:9c:7a:dd:9e:f5:1f:70:f2:73:47:10:fc:49:cb:53:
8c:70:78:7b:56:cd:83:bb:5f:18:d0:58:a5:42:d5:53:3c:59:
1b:fc:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org