Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1D2709287C911EB94D2573EC4F9AE02.roa
File: E1D2709287C911EB94D2573EC4F9AE02.roa (raw, json)
Hash identifier: SpCCyTiqquh6Q0MaW1zpgZ47RSuwgBT9QIsGDMMWZ2Q=
Subject key identifier: E2:4A:E3:78:36:AD:6A:B1:2B:5F:1B:B9:5B:33:BC:7E:DD:40:43:D4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5C85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1D2709287C911EB94D2573EC4F9AE02.roa
Signing time: Fri 02 Sep 2022 06:11:39 +0000
ROA not before: Fri 02 Sep 2022 06:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23860
IP address blocks: 43.252.248.0/22 maxlen: 24
45.64.220.0/22 maxlen: 24
45.64.224.0/22 maxlen: 24
45.64.236.0/22 maxlen: 24
45.112.68.0/22 maxlen: 24
45.112.240.0/22 maxlen: 24
45.249.68.0/22 maxlen: 24
45.249.72.0/22 maxlen: 24
45.249.80.0/22 maxlen: 24
45.249.164.0/22 maxlen: 24
45.250.244.0/22 maxlen: 24
103.2.132.0/22 maxlen: 24
103.18.168.0/22 maxlen: 24
103.24.84.0/22 maxlen: 24
103.50.80.0/22 maxlen: 24
103.51.148.0/22 maxlen: 24
103.55.96.0/22 maxlen: 24
103.66.8.0/24 maxlen: 24
103.66.9.0/24 maxlen: 24
103.66.10.0/24 maxlen: 24
103.66.11.0/24 maxlen: 24
103.70.46.0/24 maxlen: 24
103.75.42.0/24 maxlen: 24
103.77.44.0/22 maxlen: 24
103.77.136.0/22 maxlen: 24
103.78.16.0/22 maxlen: 24
103.87.140.0/22 maxlen: 24
103.88.216.0/22 maxlen: 24
103.89.37.0/24 maxlen: 24
103.94.136.0/22 maxlen: 24
103.101.212.0/23 maxlen: 24
103.102.116.0/23 maxlen: 24
103.119.56.0/22 maxlen: 24
103.141.246.0/24 maxlen: 24
103.175.138.0/23 maxlen: 24
103.184.78.0/23 maxlen: 24
103.187.58.0/23 maxlen: 24
103.191.164.0/24 maxlen: 24
103.215.52.0/22 maxlen: 24
103.217.228.0/22 maxlen: 24
103.217.232.0/22 maxlen: 24
103.217.240.0/22 maxlen: 24
103.218.168.0/22 maxlen: 24
103.218.236.0/22 maxlen: 24
103.240.96.0/22 maxlen: 24
103.242.188.0/22 maxlen: 24
103.242.196.0/22 maxlen: 24
103.249.4.0/22 maxlen: 24
103.249.36.0/22 maxlen: 24
103.252.164.0/22 maxlen: 24
115.187.32.0/19 maxlen: 19
115.187.32.0/22 maxlen: 24
115.187.36.0/22 maxlen: 24
115.187.40.0/22 maxlen: 24
115.187.44.0/22 maxlen: 24
115.187.48.0/22 maxlen: 24
115.187.52.0/22 maxlen: 24
115.187.56.0/22 maxlen: 24
115.187.60.0/22 maxlen: 24
116.193.128.0/22 maxlen: 24
116.193.132.0/22 maxlen: 24
116.193.136.0/22 maxlen: 24
116.193.140.0/22 maxlen: 24
116.206.200.0/22 maxlen: 24
116.206.220.0/22 maxlen: 24
144.48.224.0/22 maxlen: 24
150.107.176.0/22 maxlen: 24
150.107.212.0/22 maxlen: 24
150.129.64.0/22 maxlen: 24
150.129.100.0/22 maxlen: 24
150.242.148.0/22 maxlen: 24
202.8.112.0/22 maxlen: 24
202.8.116.0/22 maxlen: 24
202.78.232.0/21 maxlen: 24
203.171.240.0/21 maxlen: 24
2407:cb00::/32 maxlen: 37
2407:cb00:800::/38 maxlen: 44
2407:cb00:c00::/38 maxlen: 44
2407:cb00:1000::/38 maxlen: 44
2407:cb00:1400::/38 maxlen: 44
2407:cb00:1800::/38 maxlen: 44
2407:cb00:1c00::/38 maxlen: 44
2407:cb00:2000::/38 maxlen: 44
2407:cb00:2400::/38 maxlen: 44
2407:cb00:2800::/38 maxlen: 44
2407:cb00:2c00::/38 maxlen: 44
2407:cb00:3000::/38 maxlen: 44
2407:cb00:a000::/38 maxlen: 38
2407:cb00:a000::/40 maxlen: 44
2407:cb00:a100::/40 maxlen: 44
2407:cb00:a200::/39 maxlen: 44
2407:cb00:a800::/38 maxlen: 44
2407:cb00:ac00::/38 maxlen: 44
2407:cb00:b000::/38 maxlen: 44
2407:cb00:b400::/38 maxlen: 44
2407:cb00:b800::/38 maxlen: 38
2407:cb00:bc00::/38 maxlen: 44
2407:cb00:c000::/38 maxlen: 44
2407:cb00:c400::/38 maxlen: 44
2407:cb00:d800::/38 maxlen: 44
2407:cb00:dc00::/38 maxlen: 38
2407:cb00:dc00::/40 maxlen: 40
2407:cb00:dc00::/44 maxlen: 44
2407:cb00:dc10::/44 maxlen: 44
2407:cb00:dc20::/43 maxlen: 44
2407:cb00:dc40::/44 maxlen: 44
2407:cb00:dc50::/44 maxlen: 44
2407:cb00:dc60::/44 maxlen: 44
2407:cb00:dc70::/44 maxlen: 44
2407:cb00:dc80::/44 maxlen: 44
2407:cb00:dc90::/44 maxlen: 44
2407:cb00:dca0::/44 maxlen: 44
2407:cb00:dcb0::/44 maxlen: 44
2407:cb00:dcc0::/44 maxlen: 44
2407:cb00:dcd0::/44 maxlen: 44
2407:cb00:dce0::/44 maxlen: 44
2407:cb00:dcf0::/44 maxlen: 44
2407:cb00:dd00::/40 maxlen: 40
2407:cb00:dd00::/44 maxlen: 44
2407:cb00:dd10::/44 maxlen: 44
2407:cb00:dd20::/44 maxlen: 44
2407:cb00:dd30::/44 maxlen: 44
2407:cb00:dd40::/44 maxlen: 44
2407:cb00:dd50::/44 maxlen: 44
2407:cb00:dd60::/44 maxlen: 44
2407:cb00:dd70::/44 maxlen: 44
2407:cb00:dd80::/44 maxlen: 44
2407:cb00:dd90::/44 maxlen: 44
2407:cb00:dda0::/44 maxlen: 44
2407:cb00:ddb0::/44 maxlen: 44
2407:cb00:ddc0::/44 maxlen: 44
2407:cb00:ddd0::/44 maxlen: 44
2407:cb00:dde0::/44 maxlen: 44
2407:cb00:ddf0::/44 maxlen: 44
2407:cb00:de00::/40 maxlen: 40
2407:cb00:de00::/44 maxlen: 44
2407:cb00:de10::/44 maxlen: 44
2407:cb00:de20::/44 maxlen: 44
2407:cb00:de30::/44 maxlen: 44
2407:cb00:de40::/44 maxlen: 44
2407:cb00:de50::/44 maxlen: 44
2407:cb00:de60::/44 maxlen: 44
2407:cb00:de70::/44 maxlen: 44
2407:cb00:de80::/44 maxlen: 44
2407:cb00:de90::/44 maxlen: 44
2407:cb00:dea0::/44 maxlen: 44
2407:cb00:deb0::/44 maxlen: 44
2407:cb00:dec0::/44 maxlen: 44
2407:cb00:ded0::/44 maxlen: 44
2407:cb00:dee0::/44 maxlen: 44
2407:cb00:def0::/44 maxlen: 44
2407:cb00:df00::/40 maxlen: 40
2407:cb00:df00::/44 maxlen: 44
2407:cb00:df10::/44 maxlen: 44
2407:cb00:df20::/44 maxlen: 44
2407:cb00:df30::/44 maxlen: 44
2407:cb00:df40::/44 maxlen: 44
2407:cb00:df50::/44 maxlen: 44
2407:cb00:df60::/44 maxlen: 44
2407:cb00:df70::/44 maxlen: 44
2407:cb00:df80::/44 maxlen: 44
2407:cb00:df90::/44 maxlen: 44
2407:cb00:dfa0::/44 maxlen: 44
2407:cb00:dfb0::/44 maxlen: 44
2407:cb00:dfc0::/44 maxlen: 44
2407:cb00:dfd0::/44 maxlen: 44
2407:cb00:dfe0::/44 maxlen: 44
2407:cb00:dff0::/44 maxlen: 44
2407:cb00:e000::/38 maxlen: 40
2407:cb00:e400::/38 maxlen: 44
2407:cb00:e800::/38 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23685 (0x5c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 2 06:11:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63119e9b-f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:45:b2:35:f9:01:4f:0d:2b:22:44:23:84:
8f:f3:21:f2:77:9b:6f:24:88:8a:33:8f:c4:ed:e0:
cf:38:43:3e:bd:6e:9a:b5:d7:e0:01:94:3a:3d:b8:
8a:e5:5e:1f:b2:81:14:a9:8c:7b:5e:d6:f8:50:79:
09:88:2b:9d:96:22:07:9e:64:e5:77:af:61:59:4d:
3f:85:58:8b:0a:da:77:2f:2c:23:cd:35:f6:d0:51:
1f:31:f8:c5:59:5c:00:62:1a:7e:80:71:61:38:ac:
01:f8:4a:a6:13:33:c2:b6:71:bf:c5:e1:09:e2:5e:
48:40:68:4a:04:69:fb:7f:f8:69:03:50:7f:07:c8:
c7:68:75:b5:31:27:f6:86:09:0f:36:98:52:d4:54:
1a:f7:5e:77:ea:5a:48:4b:de:de:ad:26:0d:18:8d:
5b:11:2b:30:ab:d3:9f:c7:ba:2b:d2:b1:0e:09:d0:
8b:ef:7b:5b:85:b4:27:6e:0a:05:11:49:b1:27:74:
f2:31:fc:71:ec:47:f7:7b:eb:f2:b6:4b:bb:27:a1:
b2:0e:ff:83:3b:53:4a:bf:a8:77:88:b2:c1:c9:5e:
dd:34:22:09:a1:83:d2:9c:b7:10:c2:a1:bf:6d:e8:
d1:9b:73:da:3d:11:35:0b:c4:cc:8f:7d:ff:cb:50:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:E3:78:36:AD:6A:B1:2B:5F:1B:B9:5B:33:BC:7E:DD:40:43:D4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1D2709287C911EB94D2573EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.248.0/22
45.64.220.0-45.64.227.255
45.64.236.0/22
45.112.68.0/22
45.112.240.0/22
45.249.68.0-45.249.75.255
45.249.80.0/22
45.249.164.0/22
45.250.244.0/22
103.2.132.0/22
103.18.168.0/22
103.24.84.0/22
103.50.80.0/22
103.51.148.0/22
103.55.96.0/22
103.66.8.0/22
103.70.46.0/24
103.75.42.0/24
103.77.44.0/22
103.77.136.0/22
103.78.16.0/22
103.87.140.0/22
103.88.216.0/22
103.89.37.0/24
103.94.136.0/22
103.101.212.0/23
103.102.116.0/23
103.119.56.0/22
103.141.246.0/24
103.175.138.0/23
103.184.78.0/23
103.187.58.0/23
103.191.164.0/24
103.215.52.0/22
103.217.228.0-103.217.235.255
103.217.240.0/22
103.218.168.0/22
103.218.236.0/22
103.240.96.0/22
103.242.188.0/22
103.242.196.0/22
103.249.4.0/22
103.249.36.0/22
103.252.164.0/22
115.187.32.0/19
116.193.128.0/20
116.206.200.0/22
116.206.220.0/22
144.48.224.0/22
150.107.176.0/22
150.107.212.0/22
150.129.64.0/22
150.129.100.0/22
150.242.148.0/22
202.8.112.0/21
202.78.232.0/21
203.171.240.0/21
IPv6:
2407:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
b6:77:50:c3:c3:61:23:bc:7b:f5:54:e5:d8:7d:36:f9:a8:be:
88:21:ef:60:5f:bb:a9:74:b0:18:9a:8f:d1:5f:16:4e:8d:54:
38:ea:4a:21:af:e5:56:31:47:95:3d:c8:8c:56:a3:99:ce:8c:
ac:8d:2b:50:6e:7d:95:29:06:f3:14:7a:07:1a:be:42:fe:28:
a8:a5:d3:5e:e2:0a:a6:3a:47:7a:0a:a3:ec:2c:17:fa:55:15:
74:71:47:f9:e7:8b:b8:23:00:b5:27:81:1c:09:72:45:94:fa:
a7:bf:e7:cf:a6:c9:a0:0a:45:23:c6:38:0f:74:a5:6a:a4:41:
91:fa:ca:d7:71:a0:ce:33:bc:73:1f:53:d7:b1:a8:0c:b3:ea:
16:21:fd:c6:84:27:3c:67:cf:43:47:ae:d7:46:a3:92:62:73:
f0:a1:7c:b3:1f:af:f4:bc:71:a9:30:a9:35:f3:23:a2:be:59:
49:1d:4f:2c:74:d5:12:e4:f6:4e:17:c7:77:60:10:2b:23:78:
97:21:ba:96:6b:ff:54:ab:bb:6d:ef:30:b6:4b:be:f0:bf:6c:
d6:40:e5:8c:a5:15:6d:ac:9b:a4:a2:5b:b3:eb:a0:20:64:82:
e7:fd:12:9d:e8:24:20:8b:77:77:9c:4c:5a:f9:90:6e:4e:13:
d0:95:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org