Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BFC1C89A9C8011EDBB33893DC4F9AE02.roa
File: BFC1C89A9C8011EDBB33893DC4F9AE02.roa (raw, json)
Hash identifier: BA6Bs/Hiqj5BpP5/IkZpMPMY1AmlajHAEZZBrhaHLcU=
Subject key identifier: 2F:91:B3:7E:F0:E8:E1:3B:15:B7:41:7C:6E:72:F6:2F:1D:ED:6F:E7
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 33D1
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BFC1C89A9C8011EDBB33893DC4F9AE02.roa
Signing time: Wed 25 Jan 2023 07:20:31 +0000
ROA not before: Wed 25 Jan 2023 07:20:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.164.0/22 maxlen: 22
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 22
111.88.232.0/24 maxlen: 24
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.240.0/22 maxlen: 22
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.96.0/24 maxlen: 24
115.186.98.0/24 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/24 maxlen: 24
115.186.103.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/24 maxlen: 24
115.186.113.0/24 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
115.186.121.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 22
117.102.21.0/24 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/21 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13265 (0x33d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jan 25 07:20:31 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d0d83e-a28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:da:e5:10:a8:6a:8b:a6:bb:90:3d:fa:08:
75:a0:62:71:ab:b6:ae:49:bd:3a:3a:df:1d:bf:66:
d5:90:dc:de:d3:30:15:27:0c:c9:78:91:c3:6e:98:
f5:c9:3a:80:69:c4:3c:32:3e:98:3d:b2:38:46:65:
fe:ed:b5:2d:ae:90:14:87:a1:82:41:64:a8:d8:49:
fb:27:80:0a:b6:11:91:d0:6e:9e:ab:2f:31:15:4a:
35:09:ce:66:b8:af:be:74:85:e5:0b:ba:23:f6:8d:
33:fb:0b:75:46:ad:14:37:3e:c6:37:de:4a:f5:d4:
94:f8:37:72:51:84:65:95:d9:5f:80:88:01:65:1a:
f0:e5:af:1e:f8:d2:e0:4d:00:3f:a1:06:31:3f:35:
30:b6:7e:31:f1:72:9a:d2:a7:6e:ee:65:a8:97:41:
18:d4:a1:c6:7f:c0:29:a2:8b:a2:86:ec:97:1a:cc:
c8:f3:5d:56:a3:c6:6a:b3:91:b9:72:73:6f:fe:a4:
78:f7:5c:0d:49:f1:6f:8c:23:cf:37:0f:fa:f5:a2:
f7:19:2a:c1:05:fb:95:17:e4:3c:6a:15:43:23:00:
71:67:b7:81:30:44:aa:4d:7b:66:de:7c:8a:68:0a:
81:5c:b9:2e:0e:eb:e0:55:f1:89:bd:51:6c:ea:df:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:B3:7E:F0:E8:E1:3B:15:B7:41:7C:6E:72:F6:2F:1D:ED:6F:E7
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BFC1C89A9C8011EDBB33893DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.139.0/24
111.88.164.0-111.88.171.255
111.88.184.0/22
111.88.232.0-111.88.255.255
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0/21
115.186.88.0/24
115.186.90.0/23
115.186.93.0/24
115.186.96.0/24
115.186.98.0/24
115.186.101.0-115.186.104.255
115.186.106.0-115.186.113.255
115.186.115.0/24
115.186.117.0-115.186.123.255
115.186.125.0-115.186.126.255
117.102.0.0-117.102.10.255
117.102.12.0/23
117.102.16.0-117.102.28.255
117.102.30.0-117.102.47.255
203.81.192.0/21
203.81.208.0/21
203.81.230.0/24
203.81.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:62:f2:24:fd:b5:71:e6:76:58:ea:7a:da:61:72:6c:9f:cf:
11:41:40:d1:f7:ad:cf:fd:83:c6:b0:71:7c:7b:54:c1:69:98:
0d:e9:ca:75:16:ca:07:d5:9f:b2:4e:ab:19:19:b1:ac:8e:09:
3a:64:fe:f5:6f:6d:38:40:c6:6f:00:28:9d:86:df:a9:91:03:
26:03:da:7f:bd:a2:34:0e:e8:54:01:d7:24:43:af:87:76:7f:
05:6a:6d:4c:a8:82:83:e3:1e:8e:06:e5:49:49:64:5e:0c:96:
72:ee:b6:f0:a1:7b:22:53:79:b0:f3:52:72:8b:5c:04:15:10:
a2:a4:78:51:33:96:94:e3:70:73:93:a9:43:db:36:8f:de:46:
cd:45:d4:7c:07:f7:2f:e9:db:df:f5:33:4e:dc:bf:86:20:c0:
77:5c:06:7f:c1:53:e7:98:6d:b2:df:3b:66:b6:06:5f:1c:3a:
7a:64:87:a4:99:44:b1:71:37:5a:c2:8e:05:2c:89:db:88:2b:
ce:a2:11:2b:96:ab:38:f5:a7:af:02:5f:36:6e:0e:a6:a7:36:
55:c9:f4:d5:98:92:f8:19:90:5f:7b:14:75:39:5a:82:c4:3c:
ef:57:75:d9:ef:0a:4e:30:66:27:35:4a:18:71:34:19:a3:06:
ed:cf:fc:86
-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjMwMTI1MDcyMDMxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2QwZDgzZS1hMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNXa5RCoaoumu5A9+gh1oGJxq7auSb06Ot8dv2bVkNze0zAVJwzJeJHDbpj1
yTqAacQ8Mj6YPbI4RmX+7bUtrpAUh6GCQWSo2En7J4AKthGR0G6eqy8xFUo1Cc5m
uK++dIXlC7oj9o0z+wt1Rq0UNz7GN95K9dSU+DdyUYRlldlfgIgBZRrw5a8e+NLg
TQA/oQYxPzUwtn4x8XKa0qdu7mWol0EY1KHGf8ApoouihuyXGszI811Wo8Zqs5G5
cnNv/qR491wNSfFvjCPPNw/69aL3GSrBBfuVF+Q8ahVDIwBxZ7eBMESqTXtm3nyK
aAqBXLkuDuvgVfGJvVFs6t87wQIDAQABo4IDsTCCA60wHQYDVR0OBBYEFC+Rs37w
6OE7FbdBfG5y9i8d7W/nMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQkZDMUM4OUE5
QzgwMTFFREJCMzM4OTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggE5BggrBgEFBQcBBwEB
/wSCASgwggEkMIIBIAQCAAEwggEYAwQBb1hMAwQAb1hPAwQAb1iLMAwDBAJvWKQD
BAJvWKgDBAJvWLgwCwMEA29Y6AMDAG9YAwQAc7oBMAwDBAFzugoDBABzug4DBAFz
uhADBABzuhUwDAMEAHO6FwMEAXO6GDAMAwQBc7oeAwQEc7ogAwQDc7o4AwQAc7pY
AwQBc7paAwQAc7pdAwQAc7pgAwQAc7piMAwDBABzumUDBABzumgwDAMEAXO6agME
AXO6cAMEAHO6czAMAwQAc7p1AwQCc7p4MAwDBABzun0DBABzun4wCwMDAXVmAwQA
dWYKAwQBdWYMMAwDBAR1ZhADBAB1ZhwwDAMEAXVmHgMEBHVmIAMEA8tRwAMEA8tR
0AMEAMtR5gMEA8tR6DANBgkqhkiG9w0BAQsFAAOCAQEAnGLyJP21ceZ2WOp62mFy
bJ/PEUFA0fetz/2DxrBxfHtUwWmYDenKdRbKB9Wfsk6rGRmxrI4JOmT+9W9tOEDG
bwAonYbfqZEDJgPaf72iNA7oVAHXJEOvh3Z/BWptTKiCg+MejgblSUlkXgyWcu62
8KF7IlN5sPNScotcBBUQoqR4UTOWlONwc5OpQ9s2j95GzUXUfAf3L+nb3/UzTty/
hiDAd1wGf8FT55htst87ZrYGXxw6emSHpJlEsXE3WsKOBSyJ24grzqIRK5arOPWn
rwJfNm4Opqc2Vcn01ZiS+BmQX3sUdTlagsQ871d12e8KTjBmJzVKGHE0GaMG7c/8
hg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org