Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/55D6D12EC4FA11EA8D5ABD16C4F9AE02.roa
File: 55D6D12EC4FA11EA8D5ABD16C4F9AE02.roa (raw, json)
Hash identifier: 024EEd6ogPSr00buyaLtYJ/AgXnSqQ79B+O9wSEHECU=
Subject key identifier: 53:03:2E:79:A7:26:F7:1E:54:8F:12:38:2D:09:06:BC:B5:E7:A3:F0
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 034E
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/55D6D12EC4FA11EA8D5ABD16C4F9AE02.roa
Signing time: Fri 13 Aug 2021 10:59:54 +0000
ROA not before: Fri 13 Aug 2021 10:59:54 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 17563
IP address blocks: 116.58.0.0/17 maxlen: 23
116.58.0.0/24 maxlen: 24
116.58.1.0/24 maxlen: 24
116.58.2.0/24 maxlen: 24
116.58.3.0/24 maxlen: 24
116.58.4.0/24 maxlen: 24
116.58.5.0/24 maxlen: 24
116.58.6.0/24 maxlen: 24
116.58.7.0/24 maxlen: 24
116.58.8.0/24 maxlen: 24
116.58.9.0/24 maxlen: 24
116.58.10.0/24 maxlen: 24
116.58.11.0/24 maxlen: 24
116.58.12.0/24 maxlen: 24
116.58.13.0/24 maxlen: 24
116.58.14.0/24 maxlen: 24
116.58.15.0/24 maxlen: 24
116.58.16.0/24 maxlen: 24
116.58.17.0/24 maxlen: 24
116.58.18.0/24 maxlen: 24
116.58.19.0/24 maxlen: 24
116.58.20.0/24 maxlen: 24
116.58.21.0/24 maxlen: 24
116.58.22.0/24 maxlen: 24
116.58.23.0/24 maxlen: 24
116.58.24.0/24 maxlen: 24
116.58.25.0/24 maxlen: 24
116.58.26.0/24 maxlen: 24
116.58.27.0/24 maxlen: 24
116.58.28.0/24 maxlen: 24
116.58.29.0/24 maxlen: 24
116.58.30.0/24 maxlen: 24
116.58.31.0/24 maxlen: 24
116.58.32.0/24 maxlen: 24
116.58.33.0/24 maxlen: 24
116.58.34.0/24 maxlen: 24
116.58.35.0/24 maxlen: 24
116.58.36.0/24 maxlen: 24
116.58.37.0/24 maxlen: 24
116.58.38.0/24 maxlen: 24
116.58.39.0/24 maxlen: 24
116.58.40.0/24 maxlen: 24
116.58.41.0/24 maxlen: 24
116.58.42.0/24 maxlen: 24
116.58.43.0/24 maxlen: 24
116.58.44.0/24 maxlen: 24
116.58.45.0/24 maxlen: 24
116.58.46.0/24 maxlen: 24
116.58.47.0/24 maxlen: 24
116.58.48.0/24 maxlen: 24
116.58.49.0/24 maxlen: 24
116.58.50.0/24 maxlen: 24
116.58.51.0/24 maxlen: 24
116.58.52.0/24 maxlen: 24
116.58.53.0/24 maxlen: 24
116.58.54.0/24 maxlen: 24
116.58.55.0/24 maxlen: 24
116.58.56.0/24 maxlen: 24
116.58.57.0/24 maxlen: 24
116.58.58.0/24 maxlen: 24
116.58.59.0/24 maxlen: 24
116.58.60.0/24 maxlen: 24
116.58.61.0/24 maxlen: 24
116.58.62.0/24 maxlen: 24
116.58.63.0/24 maxlen: 24
116.58.64.0/24 maxlen: 24
116.58.65.0/24 maxlen: 24
116.58.66.0/24 maxlen: 24
116.58.67.0/24 maxlen: 24
116.58.68.0/24 maxlen: 24
116.58.69.0/24 maxlen: 24
116.58.70.0/24 maxlen: 24
116.58.71.0/24 maxlen: 24
116.58.72.0/24 maxlen: 24
116.58.73.0/24 maxlen: 24
116.58.74.0/24 maxlen: 24
116.58.75.0/24 maxlen: 24
116.58.76.0/24 maxlen: 24
116.58.77.0/24 maxlen: 24
116.58.78.0/24 maxlen: 24
116.58.79.0/24 maxlen: 24
116.58.80.0/24 maxlen: 24
116.58.81.0/24 maxlen: 24
116.58.82.0/24 maxlen: 24
116.58.83.0/24 maxlen: 24
116.58.84.0/24 maxlen: 24
116.58.85.0/24 maxlen: 24
116.58.86.0/24 maxlen: 24
116.58.87.0/24 maxlen: 24
116.58.88.0/24 maxlen: 24
116.58.89.0/24 maxlen: 24
116.58.90.0/24 maxlen: 24
116.58.91.0/24 maxlen: 24
116.58.92.0/24 maxlen: 24
116.58.93.0/24 maxlen: 24
116.58.94.0/24 maxlen: 24
116.58.95.0/24 maxlen: 24
116.58.96.0/24 maxlen: 24
116.58.97.0/24 maxlen: 24
116.58.98.0/24 maxlen: 24
116.58.99.0/24 maxlen: 24
116.58.100.0/24 maxlen: 24
116.58.101.0/24 maxlen: 24
116.58.102.0/24 maxlen: 24
116.58.103.0/24 maxlen: 24
116.58.104.0/24 maxlen: 24
116.58.105.0/24 maxlen: 24
116.58.106.0/24 maxlen: 24
116.58.107.0/24 maxlen: 24
116.58.108.0/24 maxlen: 24
116.58.109.0/24 maxlen: 24
116.58.110.0/24 maxlen: 24
116.58.111.0/24 maxlen: 24
116.58.112.0/24 maxlen: 24
116.58.113.0/24 maxlen: 24
116.58.114.0/24 maxlen: 24
116.58.115.0/24 maxlen: 24
116.58.116.0/24 maxlen: 24
116.58.117.0/24 maxlen: 24
116.58.118.0/24 maxlen: 24
116.58.119.0/24 maxlen: 24
116.58.120.0/24 maxlen: 24
116.58.121.0/24 maxlen: 24
116.58.122.0/24 maxlen: 24
116.58.123.0/24 maxlen: 24
116.58.124.0/24 maxlen: 24
116.58.125.0/24 maxlen: 24
116.58.126.0/24 maxlen: 24
116.58.127.0/24 maxlen: 24
202.59.64.0/19 maxlen: 23
202.59.64.0/24 maxlen: 24
202.59.65.0/24 maxlen: 24
202.59.66.0/24 maxlen: 24
202.59.67.0/24 maxlen: 24
202.59.68.0/24 maxlen: 24
202.59.69.0/24 maxlen: 24
202.59.70.0/24 maxlen: 24
202.59.71.0/24 maxlen: 24
202.59.72.0/24 maxlen: 24
202.59.73.0/24 maxlen: 24
202.59.74.0/24 maxlen: 24
202.59.75.0/24 maxlen: 24
202.59.76.0/24 maxlen: 24
202.59.77.0/24 maxlen: 24
202.59.78.0/24 maxlen: 24
202.59.79.0/24 maxlen: 24
202.59.80.0/24 maxlen: 24
202.59.81.0/24 maxlen: 24
202.59.82.0/24 maxlen: 24
202.59.83.0/24 maxlen: 24
202.59.84.0/24 maxlen: 24
202.59.85.0/24 maxlen: 24
202.59.86.0/24 maxlen: 24
202.59.87.0/24 maxlen: 24
202.59.88.0/24 maxlen: 24
202.59.89.0/24 maxlen: 24
202.59.90.0/24 maxlen: 24
202.59.91.0/24 maxlen: 24
202.59.92.0/24 maxlen: 24
202.59.93.0/24 maxlen: 24
202.59.94.0/24 maxlen: 24
202.59.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Validity
Not Before: Aug 13 10:59:54 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=611650a9-8b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:f7:51:c3:07:ad:df:b8:d0:5f:0a:fd:57:
07:d9:8d:65:f2:45:14:7a:7e:4c:b9:e0:47:6b:f3:
28:96:ec:70:81:37:24:cd:b7:cf:9a:a8:39:89:d0:
ad:2d:e5:f5:c9:01:b2:b8:b8:71:76:18:88:5c:12:
18:f2:37:9d:2d:31:37:9a:b0:20:12:5e:5b:c6:1b:
39:0e:70:c3:10:ca:ac:b0:41:49:a3:38:3c:3a:47:
ff:37:91:05:64:55:08:1a:dd:b5:0e:e5:8d:92:f4:
ed:78:c9:c3:b4:e2:7b:1d:dd:11:0c:13:4e:a5:37:
e1:a4:2d:d8:90:3f:f9:e5:18:3c:a5:e0:ad:5e:93:
63:a3:09:7b:c4:2c:2c:a8:a9:26:cf:7c:4f:90:10:
e3:cc:41:1a:9d:7d:92:aa:09:cd:e6:ba:b0:ae:52:
78:f6:7c:f5:69:77:23:83:00:bd:94:65:79:48:33:
32:0f:0c:eb:e4:53:94:43:5c:ab:69:af:b6:86:ce:
4a:a6:bd:7a:5e:d0:4a:f4:99:76:32:07:94:08:a9:
9d:34:34:49:46:eb:66:da:ce:e1:4b:b1:17:a3:06:
96:5b:a8:36:cc:61:77:42:f8:91:e7:d0:a6:ad:54:
e6:5d:05:04:ca:97:b8:87:47:cf:12:6b:b4:d1:6f:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:2E:79:A7:26:F7:1E:54:8F:12:38:2D:09:06:BC:B5:E7:A3:F0
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/55D6D12EC4FA11EA8D5ABD16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.58.0.0/17
202.59.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:9e:6d:89:ec:c0:48:8a:1a:06:82:5d:7f:c5:8c:a3:a7:f6:
de:21:ed:dd:be:a6:cc:9d:3e:60:b9:39:ef:38:43:5f:41:2c:
e2:d2:ca:a5:a5:a1:9f:6d:22:1f:70:96:91:e7:12:45:f3:ee:
a2:d6:67:ed:c0:88:f6:58:86:aa:75:7d:4b:13:3e:fd:a6:92:
6e:bf:2d:aa:78:3b:ca:ac:25:9a:64:ff:46:85:71:78:d3:fd:
35:78:3b:13:69:e3:cc:9a:12:bd:c4:75:29:bf:8e:91:8b:9b:
aa:71:74:b7:fc:ca:d7:8a:fe:3a:5f:09:af:41:70:7d:67:8a:
97:58:b0:93:98:4b:74:c8:7d:bd:50:2e:9c:37:6b:7c:b7:0a:
6b:c6:bf:53:7d:99:d7:55:3a:16:5b:31:77:3a:f9:d5:36:93:
64:25:e3:32:fc:fc:8f:4b:1b:45:5b:a2:a5:6e:e3:8e:43:fe:
01:eb:ef:a2:ee:3a:b3:b9:a8:b2:da:d6:de:07:ae:8e:57:76:
8c:c0:66:be:db:2a:61:05:e9:c4:e5:17:80:a1:e9:88:d3:48:
06:90:a0:ba:da:c4:39:57:1b:ba:70:b0:5c:51:b3:ee:73:a0:
57:ec:8d:a0:4a:b4:d0:2a:36:1e:65:e3:ac:f5:ad:d9:6c:8d:
8a:3f:81:45
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBMEIxMTAvBgNVBAUTKDcxQUE1OENERjFCNkJEN0MyNkU2MUE3NTE4QTREMEFE
MkM5RjFBMTQwHhcNMjEwODEzMTA1OTU0WhcNMjIxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTE2NTBhOS04YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv273UcMHrd+40F8K/VcH2Y1l8kUUen5MueBHa/MoluxwgTckzbfPmqg5idCt
LeX1yQGyuLhxdhiIXBIY8jedLTE3mrAgEl5bxhs5DnDDEMqssEFJozg8Okf/N5EF
ZFUIGt21DuWNkvTteMnDtOJ7Hd0RDBNOpTfhpC3YkD/55Rg8peCtXpNjowl7xCws
qKkmz3xPkBDjzEEanX2SqgnN5rqwrlJ49nz1aXcjgwC9lGV5SDMyDwzr5FOUQ1yr
aa+2hs5Kpr16XtBK9Jl2MgeUCKmdNDRJRutm2s7hS7EXowaWW6g2zGF3QviR59Cm
rVTmXQUEype4h0fPEmu00W+MNwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFMDLnmn
JvceVI8SOC0JBry156PwMB8GA1UdIwQYMBaAFHGqWM3xtr18JuYadRik0K0snxoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUEwQi8xNTU4NkY0MkM0
RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZYd201aHAxR0tUUXJTeWZH
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NhcFl6Zkcydlh3bTVocDFHS1RRclN5ZkdoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVBMEIvMTU1ODZGNDJDNEY4MTFFQThCOUI0QzEzQzRGOUFFMDIvNTVENkQxMkVD
NEZBMTFFQThENUFCRDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAd0OgADBAXKO0AwDQYJKoZIhvcNAQELBQADggEBAKmebYns
wEiKGgaCXX/FjKOn9t4h7d2+psydPmC5Oe84Q19BLOLSyqWloZ9tIh9wlpHnEkXz
7qLWZ+3AiPZYhqp1fUsTPv2mkm6/Lap4O8qsJZpk/0aFcXjT/TV4OxNp48yaEr3E
dSm/jpGLm6pxdLf8yteK/jpfCa9BcH1nipdYsJOYS3TIfb1QLpw3a3y3CmvGv1N9
mddVOhZbMXc6+dU2k2Ql4zL8/I9LG0VboqVu445D/gHr76LuOrO5qLLa1t4Hro5X
dozAZr7bKmEF6cTlF4Ch6YjTSAaQoLraxDlXG7pwsFxRs+5zoFfsjaBKtNAqNh5l
46z1rdlsjYo/gUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-ams.rpki-client.org