Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33C956CA4EAF11ECA708A867C4F9AE02.roa
File: 33C956CA4EAF11ECA708A867C4F9AE02.roa (raw, json)
Hash identifier: hR7Zn+EejvRPhDEkH3du+RFhx5v6+ZOAPFvigIYHFPk=
Subject key identifier: C5:91:3F:E1:69:62:1D:62:26:04:D1:27:79:B9:B3:56:5B:FD:29:88
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 698F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33C956CA4EAF11ECA708A867C4F9AE02.roa
Signing time: Wed 03 May 2023 08:31:52 +0000
ROA not before: Wed 03 May 2023 08:31:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.66.76.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.163.177.0/24 maxlen: 24
103.182.164.0/23 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
218.185.252.0/22 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27023 (0x698f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 3 08:31:52 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64521bf7-776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:c4:be:d5:0c:ea:1c:12:60:59:95:84:63:
64:69:5e:62:45:b6:15:13:89:0e:0b:41:3d:8e:d8:
af:f9:a0:a2:98:e7:8d:81:61:6d:d1:2f:92:bb:49:
48:28:d5:2f:11:8d:da:5b:e6:67:5f:54:47:87:be:
64:d4:dc:28:d7:2a:83:f9:14:0d:96:95:de:bf:c0:
c4:83:3c:40:c9:a3:56:dc:f6:b6:49:a0:33:0b:1a:
a5:e8:7c:90:30:a8:8d:83:a2:8c:33:33:cd:8e:09:
5d:89:bb:75:ca:60:b1:b1:e5:38:1c:83:b0:30:47:
d1:7f:99:fa:fe:67:e6:d8:3a:3b:b7:9c:24:85:88:
d6:a7:7e:21:f1:ce:79:3f:2c:81:9c:3b:3e:6e:f1:
33:4f:8d:2d:c5:ab:3d:4e:85:ab:84:ab:48:4b:11:
6d:a1:e7:21:ef:c4:54:84:44:f2:db:59:32:f6:44:
db:80:f8:71:0b:94:a9:5e:24:93:bf:c9:f9:e0:77:
e3:07:a4:56:b7:e4:aa:f2:0a:f1:06:3b:5e:64:e1:
b9:7b:ac:03:99:9f:73:eb:80:b9:70:1e:9b:7b:dc:
08:31:e3:17:a5:e7:ca:9f:66:84:e7:8b:6c:a4:09:
2c:ac:de:3e:a7:4c:17:4b:2a:36:9d:1c:2a:7a:ae:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:3F:E1:69:62:1D:62:26:04:D1:27:79:B9:B3:56:5B:FD:29:88
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33C956CA4EAF11ECA708A867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.19.255
45.115.88.0/22
45.121.0.0/22
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/21
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.163.177.0/24
103.182.164.0/23
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
218.185.252.0/22
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
58:b1:de:59:3c:0c:d3:5d:3c:6f:91:3c:65:92:d7:48:2e:aa:
a9:92:ab:00:c1:a4:f6:40:c1:15:92:9d:35:25:35:e1:a6:82:
f0:8d:8f:76:f2:ba:21:a7:8f:67:75:ef:26:97:3c:85:74:6e:
24:5f:4e:ac:40:9d:9c:13:bc:9a:3a:3f:79:62:aa:00:68:a4:
8d:57:53:69:68:6e:ca:91:d7:aa:32:69:1e:14:a3:95:4d:09:
ee:c5:fd:c2:d2:42:32:ab:b3:b4:b1:d6:dd:36:e6:83:84:14:
c9:eb:cb:40:ca:f1:1d:66:cb:ea:07:d8:26:a1:c0:f4:7b:63:
4f:b8:80:34:dc:31:46:00:19:68:9b:7a:b8:05:db:7d:e7:82:
13:ef:c3:9d:96:9c:5c:26:cd:84:c0:23:85:a6:c9:17:39:5a:
5c:de:15:e6:b0:5d:ad:8b:af:4d:76:46:c2:17:62:eb:d5:58:
da:f9:e6:19:89:d2:71:6d:8c:15:a8:98:72:20:e4:85:2b:e5:
ad:da:a9:79:94:87:1f:e6:45:1f:f4:b8:8f:83:d4:4e:0e:06:
3e:c3:ec:4c:d6:13:58:e3:88:a4:4d:7a:68:5b:99:f5:ab:27:
15:23:01:b4:7c:63:63:68:84:9c:ae:d1:43:c6:70:1a:f4:46:
57:a4:51:4c
-----BEGIN CERTIFICATE-----
MIIG5DCCBcygAwIBAgICaY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTAzMDgzMTUyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUyMWJmNy03NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+/EvtUM6hwSYFmVhGNkaV5iRbYVE4kOC0E9jtiv+aCimOeNgWFt0S+Su0lI
KNUvEY3aW+ZnX1RHh75k1Nwo1yqD+RQNlpXev8DEgzxAyaNW3Pa2SaAzCxql6HyQ
MKiNg6KMMzPNjgldibt1ymCxseU4HIOwMEfRf5n6/mfm2Do7t5wkhYjWp34h8c55
PyyBnDs+bvEzT40txas9ToWrhKtISxFtoech78RUhETy21ky9kTbgPhxC5SpXiST
v8n54HfjB6RWt+Sq8grxBjteZOG5e6wDmZ9z64C5cB6be9wIMeMXpefKn2aE54ts
pAksrN4+p0wXSyo2nRwqeq6tAwIDAQABo4IECDCCBAQwHQYDVR0OBBYEFMWRP+Fp
Yh1iJgTRJ3m5s1Zb/SmIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzNDOTU2Q0E0
RUFGMTFFQ0E3MDhBODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGQBggrBgEFBQcBBwEB
/wSCAX8wggF7MIIBXwQCAAEwggFXAwQCG29IAwQCG3B4AwQCG3QoAwQCG3o8MAwD
BAIk/wwDBAIk/xADBAItc1gDBAIteQADBAJnD/wDBAJnHPQDBAJnHkADBAJnHnQD
BAJnHrADBAJnN0gDBAJnPUgDBANnQkgDBAJnSmwDBAJnTNADBAJnUlADBAJnUpAD
BABno7EDBAFntqQDBAJnxXADBAJnx7QDBAJnx7wwDAMEA2fHyAMEA2fH0AMEAmfI
VAMEAWfJhgMEAmfLSDAMAwQCZ9DkAwQCZ9DoAwQDZ9JYAwQCZ9JkAwQAZ+UAAwQC
Z/YoAwQCZ/bAAwQCZ/cEAwQCZ/c0AwQGcIXAAwQCeIoMAwQFevzgAwQCiTtcMAsD
AwCLBQMEAosFCAMEArReIAMEA8oVKAMEAsoreAMEAsqMgAMEAsqUOAMEAsqoVAME
A8qqyAMEAsqwAAMEBMuZIAMEAtq5/AMEAtyenDAWBAIAAjAQAwUAJAGyAAMHACQG
DwAABzANBgkqhkiG9w0BAQsFAAOCAQEAWLHeWTwM0108b5E8ZZLXSC6qqZKrAMGk
9kDBFZKdNSU14aaC8I2PdvK6IaePZ3XvJpc8hXRuJF9OrECdnBO8mjo/eWKqAGik
jVdTaWhuypHXqjJpHhSjlU0J7sX9wtJCMquztLHW3Tbmg4QUyevLQMrxHWbL6gfY
JqHA9HtjT7iANNwxRgAZaJt6uAXbfeeCE+/DnZacXCbNhMAjhabJFzlaXN4V5rBd
rYuvTXZGwhdi69VY2vnmGYnScW2MFaiYciDkhSvlrdqpeZSHH+ZFH/S4j4PUTg4G
PsPsTNYTWOOIpE16aFuZ9asnFSMBtHxjY2iEnK7RQ8ZwGvRGV6RRTA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org