Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AE079AAF02E11EBBEFBA03FC4F9AE02.roa
File: 3AE079AAF02E11EBBEFBA03FC4F9AE02.roa (raw, json)
Hash identifier: aOrGOrOkTN4nbztDeTPuoMEmoaF4KT7IyWhx18S8K78=
Subject key identifier: 1A:1B:93:53:C7:B8:9F:40:80:19:FC:FF:19:52:30:2A:A3:4F:43:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5A63
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AE079AAF02E11EBBEFBA03FC4F9AE02.roa
Signing time: Fri 29 Jul 2022 11:21:32 +0000
ROA not before: Fri 29 Jul 2022 11:21:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133982
IP address blocks: 45.118.156.0/24 maxlen: 24
45.118.157.0/24 maxlen: 24
45.118.158.0/24 maxlen: 24
45.118.159.0/24 maxlen: 24
103.46.200.0/24 maxlen: 24
103.46.201.0/24 maxlen: 24
103.46.202.0/24 maxlen: 24
103.46.203.0/24 maxlen: 24
103.48.196.0/24 maxlen: 24
103.48.197.0/24 maxlen: 24
103.48.198.0/24 maxlen: 24
103.48.199.0/24 maxlen: 24
103.56.228.0/24 maxlen: 24
103.56.229.0/24 maxlen: 24
103.56.230.0/24 maxlen: 24
103.56.231.0/24 maxlen: 24
103.57.84.0/22 maxlen: 24
103.60.215.0/24 maxlen: 24
103.85.143.0/24 maxlen: 24
103.87.56.0/24 maxlen: 24
103.87.57.0/24 maxlen: 24
103.87.58.0/24 maxlen: 24
103.87.59.0/24 maxlen: 24
103.92.40.0/22 maxlen: 24
103.95.80.0/24 maxlen: 24
103.95.81.0/24 maxlen: 24
103.95.82.0/24 maxlen: 24
103.95.83.0/24 maxlen: 24
103.108.4.0/24 maxlen: 24
103.108.5.0/24 maxlen: 24
103.108.6.0/24 maxlen: 24
103.108.7.0/24 maxlen: 24
103.110.48.0/24 maxlen: 24
103.110.49.0/24 maxlen: 24
103.110.144.0/24 maxlen: 24
103.110.145.0/24 maxlen: 24
103.110.146.0/24 maxlen: 24
103.110.147.0/24 maxlen: 24
103.120.50.0/24 maxlen: 24
103.120.51.0/24 maxlen: 24
103.139.56.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
103.160.26.0/23 maxlen: 24
103.161.56.0/23 maxlen: 24
103.170.80.0/23 maxlen: 24
103.172.72.0/23 maxlen: 24
103.177.120.0/23 maxlen: 24
103.205.146.0/24 maxlen: 24
103.211.12.0/24 maxlen: 24
103.211.13.0/24 maxlen: 24
103.211.14.0/24 maxlen: 24
103.211.15.0/24 maxlen: 24
103.211.16.0/24 maxlen: 24
103.211.17.0/24 maxlen: 24
103.211.18.0/24 maxlen: 24
103.211.19.0/24 maxlen: 24
103.211.52.0/24 maxlen: 24
103.211.53.0/24 maxlen: 24
103.211.54.0/24 maxlen: 24
103.211.55.0/24 maxlen: 24
103.212.144.0/24 maxlen: 24
103.212.145.0/24 maxlen: 24
103.212.146.0/24 maxlen: 24
103.212.147.0/24 maxlen: 24
103.212.156.0/24 maxlen: 24
103.212.157.0/24 maxlen: 24
103.212.158.0/24 maxlen: 24
103.212.159.0/24 maxlen: 24
103.214.60.0/24 maxlen: 24
103.214.61.0/24 maxlen: 24
103.214.62.0/24 maxlen: 24
103.214.63.0/24 maxlen: 24
110.235.216.0/22 maxlen: 24
110.235.224.0/24 maxlen: 24
110.235.225.0/24 maxlen: 24
110.235.226.0/24 maxlen: 24
110.235.227.0/24 maxlen: 24
110.235.228.0/24 maxlen: 24
110.235.229.0/24 maxlen: 24
110.235.230.0/24 maxlen: 24
110.235.231.0/24 maxlen: 24
110.235.232.0/24 maxlen: 24
110.235.233.0/24 maxlen: 24
110.235.234.0/24 maxlen: 24
110.235.235.0/24 maxlen: 24
110.235.236.0/24 maxlen: 24
110.235.237.0/24 maxlen: 24
110.235.238.0/24 maxlen: 24
110.235.239.0/24 maxlen: 24
122.50.128.0/17 maxlen: 24
139.5.240.0/24 maxlen: 24
139.5.241.0/24 maxlen: 24
139.5.242.0/24 maxlen: 24
139.5.243.0/24 maxlen: 24
139.5.248.0/24 maxlen: 24
139.5.249.0/24 maxlen: 24
139.5.250.0/24 maxlen: 24
139.5.251.0/24 maxlen: 24
139.5.252.0/22 maxlen: 24
144.48.72.0/22 maxlen: 24
146.196.32.0/22 maxlen: 24
146.196.36.0/24 maxlen: 24
146.196.37.0/24 maxlen: 24
146.196.38.0/24 maxlen: 24
146.196.39.0/24 maxlen: 24
160.202.36.0/22 maxlen: 24
192.140.152.0/24 maxlen: 24
192.140.153.0/24 maxlen: 24
192.140.154.0/24 maxlen: 24
192.140.155.0/24 maxlen: 24
202.173.124.0/22 maxlen: 24
2401:9640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23139 (0x5a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 29 11:21:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e3c2bc-0525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:00:02:2c:b8:c7:50:fa:94:02:b4:ca:e8:
f2:3d:16:07:cb:c8:18:4c:a5:58:76:40:d4:3c:ff:
72:0a:26:e9:af:42:dd:95:8f:ac:5b:23:4a:fc:ce:
b2:cf:c5:40:8a:0b:30:7b:80:7e:2b:b8:c4:e5:73:
86:c6:e8:12:a1:62:01:fb:a3:5b:a0:d1:9b:d4:9d:
3a:ef:c3:92:f5:6c:ce:ac:ee:97:60:39:76:61:ac:
5e:63:d2:80:f8:4d:7b:05:16:df:61:70:60:18:5e:
01:a9:14:61:19:f2:e5:9b:6f:5d:62:a9:2c:96:a2:
b1:88:27:93:02:22:7d:69:25:c6:44:46:68:89:fd:
8c:61:c3:cd:dd:f8:0d:cf:49:cf:ce:ad:55:8e:66:
d8:79:54:f8:f6:5d:95:18:d0:5d:b9:e1:3d:4a:a7:
07:f2:dd:86:99:29:34:c7:22:9c:1d:88:f0:0e:28:
6b:c7:1b:64:b6:4a:a9:29:eb:2a:97:f8:5c:b4:dd:
93:33:b8:47:a9:37:8a:24:be:ad:da:fc:6a:68:6e:
61:34:57:5f:1c:0f:b3:8d:6a:c4:ab:c8:c5:b4:c0:
2e:b5:1c:73:e8:13:9c:13:e5:29:d2:c4:50:97:d7:
58:76:43:96:c4:09:e6:ef:5f:0c:73:fd:1f:50:23:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1B:93:53:C7:B8:9F:40:80:19:FC:FF:19:52:30:2A:A3:4F:43:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AE079AAF02E11EBBEFBA03FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.156.0/22
103.46.200.0/22
103.48.196.0/22
103.56.228.0/22
103.57.84.0/22
103.60.215.0/24
103.85.143.0/24
103.87.56.0/22
103.92.40.0/22
103.95.80.0/22
103.108.4.0/22
103.110.48.0/23
103.110.144.0/22
103.120.50.0/23
103.139.56.0/24
103.157.227.0/24
103.160.26.0/23
103.161.56.0/23
103.170.80.0/23
103.172.72.0/23
103.177.120.0/23
103.205.146.0/24
103.211.12.0-103.211.19.255
103.211.52.0/22
103.212.144.0/22
103.212.156.0/22
103.214.60.0/22
110.235.216.0/22
110.235.224.0/20
122.50.128.0/17
139.5.240.0/22
139.5.248.0/21
144.48.72.0/22
146.196.32.0/21
160.202.36.0/22
192.140.152.0/22
202.173.124.0/22
IPv6:
2401:9640::/32
Signature Algorithm: sha256WithRSAEncryption
47:35:c1:92:8a:5c:c2:cd:06:37:14:87:69:5a:f4:3e:96:c5:
ea:71:73:ef:b6:b8:75:70:6a:d9:75:2a:dd:d1:68:a0:69:c0:
58:48:21:73:74:23:93:f9:69:6c:eb:a4:7a:9a:d2:c0:a5:61:
5e:45:8e:42:bd:c9:67:8d:06:26:56:cd:52:e3:ab:cd:dc:5e:
99:5e:3e:fe:40:d3:1c:44:b6:ee:fd:d6:6e:fa:8a:a9:bb:03:
61:34:1b:d5:37:84:6f:7e:53:82:bf:c2:3b:0b:a9:ff:b0:52:
49:58:ba:e7:d4:ac:aa:e1:cd:84:1d:d9:ee:35:ff:99:1b:25:
e6:7b:13:3e:bb:67:ac:dc:41:fc:20:68:4c:a5:4c:9b:ad:74:
ae:88:b7:22:1e:fe:9f:b8:3e:b9:c5:14:26:69:85:7a:62:d8:
06:52:29:c2:5c:d2:05:33:76:41:5a:38:03:a4:00:b3:7b:c1:
77:c5:0d:8d:b2:42:3a:21:b4:33:ff:f2:9e:bb:ab:ff:56:df:
8f:72:f0:65:d7:59:1d:9b:fa:a0:8a:e4:b4:b1:c0:d7:9b:ca:
23:2b:2b:75:6f:35:e7:ea:36:05:b7:fa:66:70:72:4b:e1:80:
1b:43:52:04:64:4f:33:db:47:69:db:55:6e:64:32:6d:3b:56:
bd:27:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-ams.rpki-client.org