Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/AF007900AC2311EC998E1232C4F9AE02.roa
File: AF007900AC2311EC998E1232C4F9AE02.roa (raw, json)
Hash identifier: Brcl7DpX/XlbfvOHFqBZPtI/jYSUG1atBAnEwOWwgdI=
Subject key identifier: D9:5E:81:17:FF:BF:B5:45:07:0C:4F:8A:32:93:91:2F:7F:5D:36:4E
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 0516
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/AF007900AC2311EC998E1232C4F9AE02.roa
Signing time: Fri 25 Mar 2022 10:29:14 +0000
ROA not before: Fri 25 Mar 2022 10:29:14 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 17563
IP address blocks: 103.184.58.0/23 maxlen: 24
116.58.0.0/17 maxlen: 23
116.58.0.0/24 maxlen: 24
116.58.1.0/24 maxlen: 24
116.58.2.0/24 maxlen: 24
116.58.3.0/24 maxlen: 24
116.58.4.0/24 maxlen: 24
116.58.5.0/24 maxlen: 24
116.58.6.0/24 maxlen: 24
116.58.7.0/24 maxlen: 24
116.58.8.0/24 maxlen: 24
116.58.9.0/24 maxlen: 24
116.58.10.0/24 maxlen: 24
116.58.11.0/24 maxlen: 24
116.58.12.0/24 maxlen: 24
116.58.13.0/24 maxlen: 24
116.58.14.0/24 maxlen: 24
116.58.15.0/24 maxlen: 24
116.58.16.0/24 maxlen: 24
116.58.17.0/24 maxlen: 24
116.58.18.0/24 maxlen: 24
116.58.19.0/24 maxlen: 24
116.58.20.0/24 maxlen: 24
116.58.21.0/24 maxlen: 24
116.58.22.0/24 maxlen: 24
116.58.23.0/24 maxlen: 24
116.58.24.0/24 maxlen: 24
116.58.25.0/24 maxlen: 24
116.58.26.0/24 maxlen: 24
116.58.27.0/24 maxlen: 24
116.58.28.0/24 maxlen: 24
116.58.29.0/24 maxlen: 24
116.58.30.0/24 maxlen: 24
116.58.31.0/24 maxlen: 24
116.58.32.0/24 maxlen: 24
116.58.33.0/24 maxlen: 24
116.58.34.0/24 maxlen: 24
116.58.35.0/24 maxlen: 24
116.58.36.0/24 maxlen: 24
116.58.37.0/24 maxlen: 24
116.58.38.0/24 maxlen: 24
116.58.39.0/24 maxlen: 24
116.58.40.0/24 maxlen: 24
116.58.41.0/24 maxlen: 24
116.58.42.0/24 maxlen: 24
116.58.43.0/24 maxlen: 24
116.58.44.0/24 maxlen: 24
116.58.45.0/24 maxlen: 24
116.58.46.0/24 maxlen: 24
116.58.47.0/24 maxlen: 24
116.58.48.0/24 maxlen: 24
116.58.49.0/24 maxlen: 24
116.58.50.0/24 maxlen: 24
116.58.51.0/24 maxlen: 24
116.58.52.0/24 maxlen: 24
116.58.53.0/24 maxlen: 24
116.58.54.0/24 maxlen: 24
116.58.55.0/24 maxlen: 24
116.58.56.0/24 maxlen: 24
116.58.57.0/24 maxlen: 24
116.58.58.0/24 maxlen: 24
116.58.59.0/24 maxlen: 24
116.58.60.0/24 maxlen: 24
116.58.61.0/24 maxlen: 24
116.58.62.0/24 maxlen: 24
116.58.63.0/24 maxlen: 24
116.58.64.0/24 maxlen: 24
116.58.65.0/24 maxlen: 24
116.58.66.0/24 maxlen: 24
116.58.67.0/24 maxlen: 24
116.58.68.0/24 maxlen: 24
116.58.69.0/24 maxlen: 24
116.58.70.0/24 maxlen: 24
116.58.71.0/24 maxlen: 24
116.58.72.0/24 maxlen: 24
116.58.73.0/24 maxlen: 24
116.58.74.0/24 maxlen: 24
116.58.75.0/24 maxlen: 24
116.58.76.0/24 maxlen: 24
116.58.77.0/24 maxlen: 24
116.58.78.0/24 maxlen: 24
116.58.79.0/24 maxlen: 24
116.58.80.0/24 maxlen: 24
116.58.81.0/24 maxlen: 24
116.58.82.0/24 maxlen: 24
116.58.83.0/24 maxlen: 24
116.58.84.0/24 maxlen: 24
116.58.85.0/24 maxlen: 24
116.58.86.0/24 maxlen: 24
116.58.87.0/24 maxlen: 24
116.58.88.0/24 maxlen: 24
116.58.89.0/24 maxlen: 24
116.58.90.0/24 maxlen: 24
116.58.91.0/24 maxlen: 24
116.58.92.0/24 maxlen: 24
116.58.93.0/24 maxlen: 24
116.58.94.0/24 maxlen: 24
116.58.95.0/24 maxlen: 24
116.58.96.0/24 maxlen: 24
116.58.97.0/24 maxlen: 24
116.58.98.0/24 maxlen: 24
116.58.99.0/24 maxlen: 24
116.58.100.0/24 maxlen: 24
116.58.101.0/24 maxlen: 24
116.58.102.0/24 maxlen: 24
116.58.103.0/24 maxlen: 24
116.58.104.0/24 maxlen: 24
116.58.105.0/24 maxlen: 24
116.58.106.0/24 maxlen: 24
116.58.107.0/24 maxlen: 24
116.58.108.0/24 maxlen: 24
116.58.109.0/24 maxlen: 24
116.58.110.0/24 maxlen: 24
116.58.111.0/24 maxlen: 24
116.58.112.0/24 maxlen: 24
116.58.113.0/24 maxlen: 24
116.58.114.0/24 maxlen: 24
116.58.115.0/24 maxlen: 24
116.58.116.0/24 maxlen: 24
116.58.117.0/24 maxlen: 24
116.58.118.0/24 maxlen: 24
116.58.119.0/24 maxlen: 24
116.58.120.0/24 maxlen: 24
116.58.121.0/24 maxlen: 24
116.58.122.0/24 maxlen: 24
116.58.123.0/24 maxlen: 24
116.58.124.0/24 maxlen: 24
116.58.125.0/24 maxlen: 24
116.58.126.0/24 maxlen: 24
116.58.127.0/24 maxlen: 24
202.59.64.0/19 maxlen: 23
202.59.64.0/24 maxlen: 24
202.59.65.0/24 maxlen: 24
202.59.66.0/24 maxlen: 24
202.59.67.0/24 maxlen: 24
202.59.68.0/24 maxlen: 24
202.59.69.0/24 maxlen: 24
202.59.70.0/24 maxlen: 24
202.59.71.0/24 maxlen: 24
202.59.72.0/24 maxlen: 24
202.59.73.0/24 maxlen: 24
202.59.74.0/24 maxlen: 24
202.59.75.0/24 maxlen: 24
202.59.76.0/24 maxlen: 24
202.59.77.0/24 maxlen: 24
202.59.78.0/24 maxlen: 24
202.59.79.0/24 maxlen: 24
202.59.80.0/24 maxlen: 24
202.59.81.0/24 maxlen: 24
202.59.82.0/24 maxlen: 24
202.59.83.0/24 maxlen: 24
202.59.84.0/24 maxlen: 24
202.59.85.0/24 maxlen: 24
202.59.86.0/24 maxlen: 24
202.59.87.0/24 maxlen: 24
202.59.88.0/24 maxlen: 24
202.59.89.0/24 maxlen: 24
202.59.90.0/24 maxlen: 24
202.59.91.0/24 maxlen: 24
202.59.92.0/24 maxlen: 24
202.59.93.0/24 maxlen: 24
202.59.94.0/24 maxlen: 24
202.59.95.0/24 maxlen: 24
2400:68a0::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Validity
Not Before: Mar 25 10:29:14 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=623d9979-dd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:b2:57:24:c0:b1:ab:cf:79:f7:d0:74:32:
9a:31:f0:b0:a4:58:c9:4a:16:46:f0:5e:af:77:42:
66:56:e8:87:77:a2:1f:72:8e:18:69:81:d1:01:38:
15:63:ce:ab:f4:50:4e:95:ba:5d:8e:2b:c4:1d:aa:
ed:c7:d8:75:f2:df:bc:1a:76:25:35:f9:70:b7:ad:
de:89:68:81:3f:dc:36:8e:43:62:18:36:10:0d:b7:
6f:11:bf:bd:f3:76:a0:02:cb:91:a1:9f:25:66:71:
9e:19:18:f4:63:c8:2b:82:b4:97:fe:62:05:92:da:
97:fe:5f:d2:89:d8:96:f0:54:e3:2d:ac:fa:1b:ce:
b4:3f:58:51:cc:c6:13:ef:2c:68:21:d5:ce:02:23:
d8:fd:a2:48:e6:c8:d8:bc:e6:79:92:03:24:99:2c:
6c:c5:32:7b:13:23:cd:28:3f:2c:c9:1e:d9:4b:91:
45:e5:26:92:0c:33:6c:4c:54:73:55:6e:ec:9e:e0:
ab:9e:5e:55:e6:0b:8b:83:bf:c8:1a:90:e1:e1:93:
55:fc:de:d8:09:fd:4c:1d:2b:70:fd:1a:a3:6f:eb:
c2:8e:c8:54:32:fd:92:2a:1f:73:e6:b9:79:62:72:
d3:62:17:3a:ed:1c:fd:e1:3b:08:f1:e4:2c:7f:91:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:81:17:FF:BF:B5:45:07:0C:4F:8A:32:93:91:2F:7F:5D:36:4E
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/AF007900AC2311EC998E1232C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.58.0/23
116.58.0.0/17
202.59.64.0/19
IPv6:
2400:68a0::/32
Signature Algorithm: sha256WithRSAEncryption
01:16:54:9d:78:de:8e:15:70:e8:f9:cf:cb:30:f1:de:88:d3:
b1:4d:4b:9c:43:db:ab:0d:e8:08:d8:d7:43:1e:49:bc:6d:a3:
52:57:5c:bb:d6:bd:92:0b:27:21:fe:f0:15:37:d9:9e:04:d5:
40:b6:fc:42:3a:cd:4e:c8:1e:02:d9:73:19:79:6b:46:ad:cd:
f6:29:67:6f:4e:bc:49:d7:77:21:b4:6f:7b:fe:9a:d2:c2:f4:
5e:0d:2f:1e:ec:51:8a:35:d5:32:e2:e0:2a:c4:2a:dd:07:82:
1a:3b:fb:62:0b:fa:94:07:a2:c7:db:16:f6:e5:56:26:f2:0c:
a7:c3:7b:5f:83:d6:cc:a4:41:c9:09:cf:24:5d:5d:35:d1:29:
a7:9b:d8:94:d7:a2:cd:e9:05:eb:22:84:5f:7d:7e:2f:af:94:
ab:b5:3f:57:3c:98:94:93:e0:e5:ec:ac:ac:1c:de:ed:82:54:
72:5b:49:cd:2a:4b:a7:89:4f:df:7d:76:0e:03:6c:ce:27:34:
b4:28:f9:ce:25:1c:1d:e4:48:90:5e:75:83:f5:ed:aa:a4:29:
a0:48:78:5d:7e:dd:56:40:47:c1:24:28:65:34:13:a4:98:84:
54:eb:00:e2:2f:c2:52:50:27:40:83:b1:19:44:c2:99:39:fe:
97:85:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org