Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A8F7988AA9011EC85962A36C4F9AE02.roa
File: 4A8F7988AA9011EC85962A36C4F9AE02.roa (raw, json)
Hash identifier: X1ztGtOR2MWHjU87eFcPWHUtJ4sdTBufH/FBt0BgH0A=
Subject key identifier: 7B:36:C3:C3:8D:11:81:05:59:F5:DE:F8:61:ED:F2:BC:39:EB:DB:D1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4B04
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A8F7988AA9011EC85962A36C4F9AE02.roa
Signing time: Mon 28 Mar 2022 06:01:45 +0000
ROA not before: Mon 28 Mar 2022 06:01:45 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
45.125.116.0/22 maxlen: 22
45.125.116.0/24 maxlen: 24
45.125.117.0/24 maxlen: 24
45.125.118.0/24 maxlen: 24
45.125.119.0/24 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.16.44.0/23 maxlen: 24
103.16.46.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.43.200.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.231.216.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 22
157.119.208.0/24 maxlen: 24
157.119.209.0/24 maxlen: 24
157.119.210.0/24 maxlen: 24
157.119.211.0/24 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19204 (0x4b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 28 06:01:45 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=62414f49-0b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:3a:87:11:2c:4f:ed:22:70:57:22:75:1c:
1b:b2:3e:b3:a8:c8:c0:7d:5c:31:8c:dd:33:91:ac:
f3:04:80:9f:b4:c5:92:b8:31:c3:a8:f3:f8:20:ee:
44:ef:fb:44:8e:48:ab:bb:ab:70:ee:21:24:86:b8:
22:d7:b1:71:e0:9e:3b:58:3c:64:a8:a1:a2:f8:5b:
5c:1c:36:0a:1d:03:e1:59:30:6a:9a:a1:59:0a:4c:
49:7c:59:6e:65:68:03:4c:d3:29:41:68:b3:f8:3f:
c0:1b:98:35:2a:80:9d:67:ed:17:43:34:51:7c:ee:
c8:90:9a:81:e5:c3:d2:d6:86:f6:93:18:03:47:a1:
34:06:74:ff:d1:84:34:60:96:4c:80:cc:20:30:41:
f6:5a:1c:36:50:4a:fe:33:18:45:67:bc:e9:92:5b:
3d:a4:80:39:ed:7a:e8:21:86:ae:31:02:d7:fe:18:
2e:48:69:38:ad:c4:4b:e9:82:d8:f5:03:a0:f9:9f:
44:29:81:20:89:e0:74:08:f5:4f:23:2b:e6:9c:00:
59:67:ba:d9:3b:c2:96:0b:af:ed:de:b7:50:58:91:
48:3b:aa:09:88:d2:d5:4d:62:f6:04:28:71:89:fa:
58:59:71:f2:89:b4:c9:11:4e:0f:7b:0b:6c:f6:85:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:C3:C3:8D:11:81:05:59:F5:DE:F8:61:ED:F2:BC:39:EB:DB:D1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A8F7988AA9011EC85962A36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
45.125.116.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.16.44.0-103.16.46.255
103.38.240.0/22
103.43.200.0/22
103.109.108.0/22
103.199.144.0/22
103.231.216.0/22
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:75:6f:45:37:81:76:48:30:bd:de:ed:33:de:cf:66:92:7a:
eb:e2:5f:05:15:0f:69:b8:8a:4b:27:2e:f9:44:88:2d:be:f3:
aa:c8:df:57:4f:be:73:2d:a0:78:d6:6f:5d:e2:df:fc:f5:8c:
b3:a3:05:90:19:64:29:57:b3:38:2a:27:72:ee:37:b1:70:6a:
31:6e:50:4d:39:be:58:ec:bc:82:da:b5:d9:87:d2:c9:4f:fa:
ad:d9:aa:a3:b8:ef:31:a1:4e:04:96:17:73:c1:c2:ce:59:9f:
fe:46:1e:8a:41:ae:4b:77:ea:e9:70:0c:81:9b:69:0a:9d:47:
6a:82:a0:34:3a:aa:73:75:30:2d:8f:f9:35:2a:8a:c2:cf:e4:
71:82:93:2e:ce:0b:93:7a:ee:bb:a2:b2:53:82:09:3f:48:b3:
9e:1b:c2:c0:7d:21:ae:51:d7:c3:c4:c7:1c:ab:cc:a0:ba:81:
bb:c8:70:ab:39:50:00:5d:42:ea:51:bb:10:ce:0e:5b:25:a4:
95:70:e6:9f:78:d2:15:fa:74:ad:78:49:ed:51:cd:95:80:2b:
98:db:7b:3e:81:bc:aa:ec:fc:18:fa:94:08:bf:5f:85:0c:d4:
b4:b4:52:8a:27:df:5c:71:da:f4:4b:35:8c:ca:88:13:d8:6f:
96:39:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-fra.rpki-client.org