Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2993C89489ED11EA8ADD3F1FC4F9AE02.roa
File: 2993C89489ED11EA8ADD3F1FC4F9AE02.roa (raw, json)
Hash identifier: c/WQuO+F8s3+dL5z8iM9g3V+CjZLEVKG1azvYUuJieo=
Subject key identifier: E4:2B:33:AF:21:95:33:DE:63:68:21:91:9D:3A:D5:CC:DA:91:B1:9B
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 07B7
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2993C89489ED11EA8ADD3F1FC4F9AE02.roa
Signing time: Tue 27 Sep 2022 14:58:47 +0000
ROA not before: Tue 27 Sep 2022 14:58:47 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
111.92.131.0/24 maxlen: 24
111.92.132.0/24 maxlen: 24
111.92.133.0/24 maxlen: 24
111.92.134.0/24 maxlen: 24
111.92.135.0/24 maxlen: 24
111.92.136.0/24 maxlen: 24
111.92.137.0/24 maxlen: 24
111.92.138.0/24 maxlen: 24
111.92.139.0/24 maxlen: 24
111.92.140.0/24 maxlen: 24
111.92.141.0/24 maxlen: 24
111.92.142.0/24 maxlen: 24
111.92.143.0/24 maxlen: 24
111.92.144.0/24 maxlen: 24
111.92.145.0/24 maxlen: 24
111.92.146.0/24 maxlen: 24
111.92.147.0/24 maxlen: 24
111.92.148.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.150.0/24 maxlen: 24
111.92.151.0/24 maxlen: 24
111.92.152.0/24 maxlen: 24
111.92.153.0/24 maxlen: 24
111.92.154.0/24 maxlen: 24
111.92.155.0/24 maxlen: 24
111.92.156.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Sep 27 14:58:47 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=63330fa6-f862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:ee:bf:90:23:e3:31:2f:ce:a0:33:0a:ea:
10:9a:50:2e:f9:4b:c7:2a:72:65:11:e2:c6:12:ce:
c1:96:33:2d:d7:d3:71:b6:5a:79:80:8c:8d:8e:08:
41:b5:b8:30:de:6f:cc:d6:e1:e9:7e:fe:d7:ca:24:
fc:f5:42:4b:01:3a:6a:73:c1:52:dd:7f:79:2b:e9:
1e:40:08:66:25:9c:0d:95:56:59:12:18:72:b9:cc:
12:e5:d7:45:41:70:03:94:55:95:9e:9d:7b:1f:d8:
29:af:13:f1:b4:a7:72:db:f1:0f:fe:b0:a2:5b:3e:
95:e6:d4:45:82:f8:5a:a4:ea:10:02:2e:8b:34:3f:
17:f0:7f:de:15:d3:9f:26:7b:61:24:d1:90:3f:dd:
3f:66:33:be:e4:6c:cc:9f:8d:b5:b1:41:6c:92:cc:
d0:70:fa:69:b5:fe:d6:a5:f5:5a:0a:f6:9f:ce:8f:
42:93:19:4e:b9:2c:34:18:72:bb:64:5d:72:52:68:
d4:28:33:6d:16:7d:f9:9a:9c:3a:a3:52:b5:7c:5b:
ed:30:59:30:43:16:2f:d2:11:02:c4:8d:5b:a3:96:
5a:59:46:7c:7a:13:e3:f6:5b:48:26:f2:ce:f3:40:
5f:62:44:73:9a:6c:84:fd:bf:36:ee:52:80:76:e1:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:33:AF:21:95:33:DE:63:68:21:91:9D:3A:D5:CC:DA:91:B1:9B
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/2993C89489ED11EA8ADD3F1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/19
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
60:ab:b1:19:bd:6e:09:a0:4c:81:3d:b3:13:42:6e:a3:a3:65:
60:a3:c6:fc:91:45:0c:59:e1:4a:f6:b7:c4:a7:ad:90:73:f7:
6c:16:bc:87:54:9b:58:52:02:72:f4:d7:ca:8d:f2:4f:90:f6:
37:86:c1:6d:69:ec:09:89:5b:b4:1d:0a:24:37:61:68:1c:32:
9f:a4:55:2e:7b:5a:4b:ad:05:bd:58:0c:dd:90:3e:92:9c:e3:
3a:ff:b8:62:9a:de:36:a6:fb:f8:96:90:ba:03:51:60:bb:65:
85:70:b5:d5:8c:ad:bd:b6:eb:d7:a7:31:34:0f:86:ed:43:d5:
2f:95:1f:59:fa:f3:15:98:c8:8d:c6:f0:89:5f:f5:24:37:39:
e4:ec:ae:bc:1b:82:9c:40:f3:b7:6f:41:63:b4:36:ed:92:04:
27:c7:04:d3:ee:71:54:15:d4:8a:45:77:f0:a7:98:54:31:d2:
f3:32:03:04:4c:2a:35:4c:61:30:80:50:17:04:6d:d5:33:d2:
d7:f0:19:3e:2e:9b:93:ee:92:b0:a2:96:20:d5:6f:e7:18:2f:
3f:1e:e2:68:5a:c9:6f:bd:93:e4:54:ff:e4:30:bf:92:50:d9:
89:4a:be:37:cc:d8:23:dc:51:72:2b:91:6b:ab:b6:0e:06:c6:
42:b5:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:09 2025 by rpki-client