Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF36584E970011ED969E847EC4F9AE02.roa
File: BF36584E970011ED969E847EC4F9AE02.roa (raw, json)
Hash identifier: fEus1+mmv01sCXtfNPNOaQyeTQim3U/MTWK4kiLC8lo=
Subject key identifier: 35:58:D7:C8:AB:AA:F1:45:F8:24:03:13:BF:7E:02:69:CF:7E:E9:81
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 635F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF36584E970011ED969E847EC4F9AE02.roa
Signing time: Wed 18 Jan 2023 07:21:38 +0000
ROA not before: Wed 18 Jan 2023 07:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.59.188.0/22 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.177.180.0/24 maxlen: 24
103.177.181.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25439 (0x635f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 18 07:21:38 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c79e02-5212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:a4:dd:30:59:ed:c0:54:b1:81:dc:50:1b:
42:41:55:f6:47:5a:47:6b:04:f6:c7:e7:d0:9b:5c:
f0:16:9e:7f:08:96:e1:25:6f:34:be:43:7f:73:b8:
44:25:c0:fe:e6:75:06:f0:d5:7d:38:1e:37:76:6e:
55:af:5d:20:33:fb:75:f0:70:02:2c:1a:85:af:08:
86:c3:40:d5:98:e2:c1:8e:a5:73:1d:9a:ab:5e:e9:
85:ff:5b:e6:ac:bf:99:28:59:56:37:90:c8:de:b7:
05:51:f9:3c:7d:af:8d:51:48:69:74:37:ac:a0:07:
e6:e0:bc:7a:c4:3d:ea:2e:a0:99:34:17:1c:00:5c:
31:2a:89:72:95:f9:56:20:d6:28:e7:f9:8c:84:0a:
ed:bc:50:f2:30:ff:07:09:77:51:d6:57:28:b1:d7:
5e:03:ca:f8:1a:f7:60:f4:d7:3d:eb:07:cd:21:76:
5b:e1:c0:21:af:18:31:f8:4a:b5:7a:4e:3c:0e:45:
18:9a:e1:17:66:69:f7:f6:ef:3c:54:ef:48:57:0a:
d8:0d:f2:17:62:10:52:fa:a4:8a:53:02:2d:31:5a:
0c:75:3f:f2:dd:d5:41:7e:32:2f:cf:78:3e:85:54:
64:6f:fd:0c:6a:3a:db:79:58:f1:37:12:66:66:1b:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:D7:C8:AB:AA:F1:45:F8:24:03:13:BF:7E:02:69:CF:7E:E9:81
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF36584E970011ED969E847EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.59.188.0/22
103.59.212.0/22
103.66.80.0/22
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.137.152.0/22
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.174.38.0/24
103.177.180.0/23
103.178.212.0/23
103.181.209.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:cb:94:1b:15:53:90:12:1e:83:9e:7d:c3:e3:f0:5d:42:8a:
2f:c4:c0:ce:53:17:b9:36:4d:bc:ad:fe:61:a4:30:13:ba:63:
01:6a:3e:23:10:82:90:ae:be:6d:bc:7c:28:ba:c6:18:69:d9:
a8:11:14:b4:b4:ac:43:ad:e5:d2:53:44:34:f9:2f:da:c8:41:
e4:b6:d8:02:6b:98:d2:1e:d5:7b:0f:73:40:c4:9e:06:45:f2:
cf:ce:7c:2f:f8:29:10:e2:d9:63:9c:db:8a:09:37:3a:e8:74:
39:83:d4:d1:a9:12:16:36:98:a7:00:18:8b:89:ca:d6:7c:1c:
41:61:dc:da:e4:79:43:21:c6:09:1e:9a:c3:19:39:9d:e5:0b:
f9:b9:31:af:8d:55:7a:35:49:f2:74:07:32:3f:cf:fb:9f:a0:
4b:52:96:13:aa:ac:9f:fb:d5:ce:a7:7a:71:f2:50:cb:bc:88:
a1:4f:b1:10:35:70:c5:15:34:7f:de:7b:a1:b8:e2:25:ce:2b:
e3:ae:b9:a9:01:3f:b2:e1:5f:74:82:b0:4a:fe:bf:a9:e4:84:
53:28:57:4c:2e:f2:7f:65:71:1f:81:ae:bf:eb:3c:99:1a:d2:
f2:d5:4f:09:c9:4a:36:c2:4c:36:e4:82:c5:c3:c1:11:b5:8a:
1b:60:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org