Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2130F3EC5A9811EDA14F453FC4F9AE02.roa
File: 2130F3EC5A9811EDA14F453FC4F9AE02.roa (raw, json)
Hash identifier: W2sLvtoofscBaB4J075rfBa4iIMK/RfUOpuLH7EYiFg=
Subject key identifier: 5D:93:72:B7:2E:B1:B3:C5:1C:D3:6E:F8:BE:B9:FF:49:20:FE:68:F0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2130F3EC5A9811EDA14F453FC4F9AE02.roa
Signing time: Wed 02 Nov 2022 10:21:36 +0000
ROA not before: Wed 02 Nov 2022 10:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.105.96.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.155.209.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.102.0/23 maxlen: 24
103.183.86.0/23 maxlen: 24
103.183.233.0/24 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2405:e100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24460 (0x5f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 2 10:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=636244b0-06a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:94:26:49:c1:b8:31:c4:58:16:72:c4:1f:
dd:bb:95:28:50:47:63:8d:f0:14:e7:65:cc:83:fb:
92:3d:94:a9:c5:e1:9e:9e:70:85:b0:62:3a:dc:b7:
50:82:11:d7:6f:1e:c4:77:ca:1b:7f:d2:68:f1:6f:
b3:dd:7e:2b:36:bf:01:33:88:75:d2:9e:60:1b:e1:
67:f0:00:37:0b:c2:6d:8d:36:2c:05:92:15:58:21:
02:9b:eb:3b:c5:4e:e7:ae:ac:c1:e8:76:c4:86:ac:
b6:c8:14:48:d0:57:80:2c:d9:94:aa:fe:fe:66:07:
d7:78:e7:d6:b7:36:d1:ff:72:8a:40:14:d7:18:5e:
4e:d3:60:76:79:ae:d7:4a:ac:b9:41:7a:4f:0f:51:
fe:8e:45:a2:80:4b:8e:ae:f2:84:ef:cb:e7:59:85:
03:ad:11:e0:65:93:9f:55:7a:3c:62:e0:bc:f6:94:
da:5b:3d:98:a2:9a:58:53:8e:91:99:67:fc:83:89:
09:e6:83:30:75:77:bf:4a:fe:12:01:2e:ed:42:b1:
55:d7:c8:54:92:33:5a:1d:6d:f3:7e:4f:f3:61:1c:
c0:78:2d:e0:ba:a9:b6:1b:18:07:ee:d9:e7:7f:23:
0e:ae:43:b8:d4:52:70:de:d0:7c:83:e3:2a:b7:b4:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:72:B7:2E:B1:B3:C5:1C:D3:6E:F8:BE:B9:FF:49:20:FE:68:F0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2130F3EC5A9811EDA14F453FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.69.24.0/22
103.70.80.0/22
103.94.83.0/24
103.100.4.0/22
103.105.96.0/23
103.153.12.0/24
103.155.209.0/24
103.164.141.0/24
103.165.102.0/23
103.183.86.0/23
103.183.233.0/24
103.190.8.0/23
103.198.172.0/22
103.217.132.0/22
103.224.144.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
8c:83:a6:e6:bb:64:46:53:dd:c0:9f:5f:4b:2c:4c:c4:b1:9c:
9f:d5:b3:3d:ac:ce:cb:4a:78:38:b5:2c:24:0f:f0:9a:ff:43:
0c:81:49:fb:17:71:29:ad:9f:f9:18:5b:3c:16:d4:bf:e9:0a:
31:d3:e2:d5:5a:d1:7a:e6:da:65:43:95:4b:5f:fd:55:a4:0d:
51:9a:2e:06:27:61:6a:4f:49:90:92:81:b6:c5:4f:77:20:b9:
26:35:8d:fc:86:97:c9:6c:a6:12:66:9d:b3:0d:a0:8e:ec:81:
9b:71:15:d9:a1:d8:e2:93:d8:f0:9a:87:44:26:12:01:76:f7:
b9:12:9d:04:05:45:75:6f:08:ce:47:a6:20:d0:b2:a2:23:22:
60:6a:ca:a5:31:29:c5:76:fa:ae:4b:6d:14:67:5b:a8:13:d8:
44:fb:e4:aa:8c:45:5f:10:f7:f6:a7:bd:13:08:50:35:c5:83:
13:9d:11:bc:a1:4e:5d:97:73:b1:07:3a:94:a5:1b:df:3f:9c:
7c:97:74:a7:08:4f:f1:52:0d:85:92:14:53:ae:48:a4:1d:f7:
f8:70:3c:57:8b:ee:b1:41:67:68:32:45:82:1f:d1:3f:91:a3:
55:1f:91:43:fc:18:a5:28:8f:c4:b3:1b:29:30:bc:3f:03:85:
99:9f:79:f2
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgICX4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMTAyMTAyMTM2WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzYyNDRiMC0wNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCiUJknBuDHEWBZyxB/du5UoUEdjjfAU52XMg/uSPZSpxeGennCFsGI63LdQ
ghHXbx7Ed8obf9Jo8W+z3X4rNr8BM4h10p5gG+Fn8AA3C8JtjTYsBZIVWCECm+s7
xU7nrqzB6HbEhqy2yBRI0FeALNmUqv7+ZgfXeOfWtzbR/3KKQBTXGF5O02B2ea7X
Sqy5QXpPD1H+jkWigEuOrvKE78vnWYUDrRHgZZOfVXo8YuC89pTaWz2YoppYU46R
mWf8g4kJ5oMwdXe/Sv4SAS7tQrFV18hUkjNaHW3zfk/zYRzAeC3guqm2GxgH7tnn
fyMOrkO41FJw3tB8g+Mqt7StgwIDAQABo4IDQzCCAz8wHQYDVR0OBBYEFF2Tcrcu
sbPFHNNu+L65/0kg/mjwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjEzMEYzRUM1
QTk4MTFFREExNEY0NTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcwGCCsGAQUFBwEHAQH/
BIG8MIG5MIGlBAIAATCBngMEAht78AMEAiv3KAMEAiv4mAMEAiv48AMEAi34rAME
AmcQHAMEAmcc/AMEAmcoyAMEAmdFGAMEAmdGUAMEAGdeUwMEAmdkBAMEAWdpYAME
AGeZDAMEAGeb0QMEAGekjQMEAWelZgMEAWe3VgMEAGe36QMEAWe+CAMEAmfGrAME
AmfZhAMEAmfgkAMEAqM1VDAMAwQAtJXhAwQCtJXgMA8EAgACMAkDBwAkBeEAAAAw
DQYJKoZIhvcNAQELBQADggEBAIyDpua7ZEZT3cCfX0ssTMSxnJ/Vsz2szstKeDi1
LCQP8Jr/QwyBSfsXcSmtn/kYWzwW1L/pCjHT4tVa0Xrm2mVDlUtf/VWkDVGaLgYn
YWpPSZCSgbbFT3cguSY1jfyGl8lsphJmnbMNoI7sgZtxFdmh2OKT2PCah0QmEgF2
97kSnQQFRXVvCM5HpiDQsqIjImBqyqUxKcV2+q5LbRRnW6gT2ET75KqMRV8Q9/an
vRMIUDXFgxOdEbyhTl2Xc7EHOpSlG98/nHyXdKcIT/FSDYWSFFOuSKQd9/hwPFeL
7rFBZ2gyRYIf0T+Ro1UfkUP8GKUoj8SzGykwvD8DhZmfefI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org