Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E27F25B07D1011ED97597945C4F9AE02.roa
File: E27F25B07D1011ED97597945C4F9AE02.roa (raw, json)
Hash identifier: ZEZPlfjrXTfWo2HF6UPKP2AOoPpKO6cPYYERbpuHnBo=
Subject key identifier: DF:D7:E4:97:5A:EE:96:74:02:C2:32:17:5A:C0:36:56:BF:6D:BF:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6181
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E27F25B07D1011ED97597945C4F9AE02.roa
Signing time: Fri 16 Dec 2022 07:11:39 +0000
ROA not before: Fri 16 Dec 2022 07:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.46.192.0/23 maxlen: 23
103.46.192.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.174.159.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.177.174.0/23 maxlen: 24
103.181.140.0/24 maxlen: 24
103.181.141.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
2404:ba00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24961 (0x6181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 16 07:11:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=639c1a2b-05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:ed:96:4f:1f:07:12:17:ea:45:87:0d:3c:
74:e7:28:c0:db:08:a6:73:cb:a0:c2:1f:9e:6a:ef:
fc:80:d7:c0:77:7e:64:b0:9b:14:53:d2:13:8c:ae:
ea:78:e5:11:34:35:3f:03:9c:c3:14:1d:b4:62:fd:
ea:b2:34:bb:1f:07:c7:94:0d:d7:9a:27:d6:1d:99:
b9:94:48:6c:a5:e7:c7:47:24:7d:72:1d:70:86:58:
f9:4b:88:f4:01:fe:6f:47:d4:25:a1:df:84:cb:34:
5e:08:33:af:9a:7b:65:bb:1b:ec:e8:14:9a:0a:5b:
eb:3b:68:67:b3:e7:64:26:b3:4f:bc:3c:b6:97:ef:
48:27:4f:92:35:bc:a7:7d:86:8a:36:eb:f4:c1:e4:
cb:5f:e6:2f:2a:46:2e:8a:d5:4f:3a:8f:de:db:e8:
a6:c9:25:c1:6f:ea:b8:2f:e8:31:f7:44:11:ae:26:
61:02:b1:88:a3:3a:3c:6b:20:fa:c8:c0:1e:42:9e:
55:5e:49:7c:d2:77:69:f4:15:a2:62:17:e0:88:8d:
76:33:b0:1b:2b:25:7a:f5:a3:11:2a:e1:74:79:17:
64:62:03:bb:73:d9:ac:15:83:38:5d:90:c8:e9:56:
1d:72:87:2b:46:66:d0:6c:b5:2c:50:35:30:21:e1:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:E4:97:5A:EE:96:74:02:C2:32:17:5A:C0:36:56:BF:6D:BF:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E27F25B07D1011ED97597945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
59.152.120.0/22
103.10.224.0/22
103.38.68.0/23
103.38.128.0/22
103.46.192.0/23
103.88.56.0/22
103.99.196.0/22
103.147.1.0/24
103.159.212.0/24
103.164.46.0/23
103.165.28.0/23
103.169.156.0/23
103.174.159.0/24
103.175.30.0/23
103.177.174.0/23
103.181.140.0/23
103.183.54.0/23
103.189.146.0/24
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.251.52.0/22
203.192.192.0-203.192.211.255
203.192.220.0-203.192.226.255
203.192.228.0-203.192.235.255
203.192.237.0-203.192.255.255
203.194.96.0-203.194.110.255
IPv6:
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
14:db:98:93:62:49:44:14:ed:43:14:b0:1c:67:74:d6:f6:08:
0e:3b:25:dc:9b:78:69:0a:96:06:64:38:06:77:df:a4:41:dc:
f4:7c:8f:10:c2:cc:fb:57:c9:0a:db:75:3b:93:15:ca:e4:8d:
34:7f:7c:6b:52:8c:a1:7c:5c:c8:40:b5:7e:8e:48:33:e8:6f:
1b:2a:c2:6c:be:80:5d:6a:62:6d:08:99:07:fe:fb:f8:a4:ce:
8e:30:28:cf:d0:5d:5f:08:c9:3d:15:ef:e6:21:3e:f1:3c:bb:
07:95:76:56:8c:37:82:d1:17:0f:ad:64:f5:6c:cf:81:ad:dd:
3e:ab:c2:29:22:e3:8c:27:16:9c:d8:0c:06:03:a5:26:87:aa:
74:ca:27:27:5a:5d:e0:cb:22:42:18:09:7c:f8:a6:c6:11:a1:
c1:08:d5:e1:68:73:37:1f:03:1e:9f:2d:4c:c8:9d:0a:be:5b:
64:19:c3:84:34:46:23:af:dc:e9:92:b8:71:35:dc:19:8e:91:
f2:46:81:04:d4:dc:6e:da:fe:2f:88:c5:b0:0d:ed:c4:d0:ad:
c7:52:51:15:20:a5:bc:ab:e5:b1:1e:3e:d7:b4:a6:a9:6f:1a:
28:b3:b6:cd:b1:d5:08:66:59:f6:09:74:10:e0:63:d1:3e:d6:
ba:ba:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org