Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/562DDA1A839011EAB5B82263C4F9AE02.roa
File: 562DDA1A839011EAB5B82263C4F9AE02.roa (raw, json)
Hash identifier: iHHPBduuw4Qap6T4XqdbPlCkWmx2nvjkNkkj3Gpqe+E=
Subject key identifier: BB:48:74:78:78:E9:EF:54:32:8A:CD:C3:F4:FF:22:CC:A2:B5:6A:0A
Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial: 059F
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/562DDA1A839011EAB5B82263C4F9AE02.roa
Signing time: Thu 30 Dec 2021 10:18:33 +0000
ROA not before: Thu 30 Dec 2021 10:18:33 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 18106
IP address blocks: 45.121.84.0/22 maxlen: 22
45.121.84.0/24 maxlen: 24
45.121.85.0/24 maxlen: 24
45.121.86.0/24 maxlen: 24
45.121.87.0/24 maxlen: 24
103.4.196.0/22 maxlen: 22
103.4.196.0/24 maxlen: 24
103.4.197.0/24 maxlen: 24
103.4.198.0/24 maxlen: 24
103.4.199.0/24 maxlen: 24
103.26.220.0/22 maxlen: 22
103.60.60.0/22 maxlen: 22
103.60.60.0/24 maxlen: 24
103.60.61.0/24 maxlen: 24
103.60.62.0/24 maxlen: 24
103.60.63.0/24 maxlen: 24
103.247.108.0/22 maxlen: 22
103.247.108.0/24 maxlen: 24
103.247.109.0/24 maxlen: 24
103.247.110.0/24 maxlen: 24
103.247.111.0/24 maxlen: 24
202.55.64.0/19 maxlen: 20
202.55.64.0/24 maxlen: 24
202.55.65.0/24 maxlen: 24
202.55.66.0/24 maxlen: 24
202.55.67.0/24 maxlen: 24
202.55.68.0/24 maxlen: 24
202.55.69.0/24 maxlen: 24
202.55.70.0/24 maxlen: 24
202.55.71.0/24 maxlen: 24
202.55.72.0/24 maxlen: 24
202.55.73.0/24 maxlen: 24
202.55.74.0/24 maxlen: 24
202.55.75.0/24 maxlen: 24
202.55.76.0/24 maxlen: 24
202.55.77.0/24 maxlen: 24
202.55.78.0/23 maxlen: 24
202.55.80.0/24 maxlen: 24
202.55.81.0/24 maxlen: 24
202.55.82.0/23 maxlen: 24
202.55.84.0/23 maxlen: 24
202.55.86.0/24 maxlen: 24
202.55.87.0/24 maxlen: 24
202.55.88.0/24 maxlen: 24
202.55.89.0/24 maxlen: 24
202.55.90.0/24 maxlen: 24
202.55.91.0/24 maxlen: 24
202.55.92.0/24 maxlen: 24
202.55.93.0/24 maxlen: 24
202.55.94.0/24 maxlen: 24
202.55.95.0/24 maxlen: 24
202.73.32.0/20 maxlen: 20
202.73.32.0/24 maxlen: 24
202.73.33.0/24 maxlen: 24
202.73.34.0/24 maxlen: 24
202.73.35.0/24 maxlen: 24
202.73.36.0/24 maxlen: 24
202.73.37.0/24 maxlen: 24
202.73.38.0/24 maxlen: 24
202.73.39.0/24 maxlen: 24
202.73.40.0/24 maxlen: 24
202.73.41.0/24 maxlen: 24
202.73.42.0/24 maxlen: 24
202.73.43.0/24 maxlen: 24
202.73.44.0/24 maxlen: 24
202.73.45.0/24 maxlen: 24
202.73.46.0/23 maxlen: 24
202.73.48.0/20 maxlen: 20
202.73.48.0/24 maxlen: 24
202.73.49.0/24 maxlen: 24
202.73.50.0/24 maxlen: 24
202.73.51.0/24 maxlen: 24
202.73.52.0/24 maxlen: 24
202.73.53.0/24 maxlen: 24
202.73.54.0/24 maxlen: 24
202.73.55.0/24 maxlen: 24
202.73.56.0/24 maxlen: 24
202.73.57.0/24 maxlen: 24
202.73.58.0/24 maxlen: 24
202.73.59.0/24 maxlen: 24
202.73.60.0/24 maxlen: 24
202.73.61.0/24 maxlen: 24
202.73.62.0/24 maxlen: 24
202.73.63.0/24 maxlen: 24
202.83.96.0/20 maxlen: 24
2001:d98::/32 maxlen: 32
2001:d98::/36 maxlen: 36
2001:d98:1000::/36 maxlen: 36
2001:d98:2000::/36 maxlen: 36
2001:d98:3000::/36 maxlen: 36
2001:d98:4000::/36 maxlen: 36
2001:d98:5000::/36 maxlen: 36
2001:d98:6000::/36 maxlen: 36
2001:d98:7000::/36 maxlen: 36
2001:d98:8000::/36 maxlen: 36
2001:d98:9000::/36 maxlen: 36
2001:d98:a000::/36 maxlen: 36
2001:d98:b000::/36 maxlen: 36
2001:d98:c000::/36 maxlen: 36
2001:d98:d000::/36 maxlen: 36
2001:d98:e000::/36 maxlen: 36
2001:d98:f000::/36 maxlen: 36
2402:7480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Validity
Not Before: Dec 30 10:18:33 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61cd8778-e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:12:bf:a7:7e:32:7b:d6:6d:22:1e:d6:b0:
cf:2a:e1:5f:77:ff:1f:85:90:aa:01:33:7e:5b:a5:
c3:db:03:2e:67:fd:f0:f4:9f:f6:84:b0:df:c2:94:
a8:65:04:f5:2a:55:94:73:68:7e:d5:32:6b:2f:31:
df:26:1a:62:c3:83:91:5c:44:f5:d9:4f:98:9d:29:
e4:10:a9:b9:78:97:f1:ff:fd:3c:52:c2:b1:13:65:
d4:c1:e2:24:0d:ce:72:4b:28:bb:1d:6a:76:af:d7:
cf:63:65:a5:75:e0:94:e8:57:62:bf:a0:54:e8:82:
30:fd:3d:63:12:c1:fc:b2:a8:c5:de:c6:3f:8c:a6:
84:e7:70:46:4a:16:3f:12:8a:ee:9f:eb:b1:3f:b9:
0d:be:96:cd:f4:cb:91:cd:5e:66:9c:53:3c:53:40:
5e:2b:34:34:00:e4:3b:c5:60:de:55:9f:7a:c5:c8:
9d:89:53:43:ff:5b:0d:e4:a7:63:61:90:e5:4f:87:
9c:9d:27:d5:3f:c7:0f:16:63:94:4c:61:a2:65:af:
01:4b:99:af:da:05:bd:d1:59:0b:1e:f6:61:7a:94:
ef:74:1f:7c:d5:8f:4a:b7:09:a0:a1:0f:87:19:50:
48:c2:4f:7d:27:7d:16:7c:69:78:1b:8f:9b:b1:95:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:74:78:78:E9:EF:54:32:8A:CD:C3:F4:FF:22:CC:A2:B5:6A:0A
X509v3 Authority Key Identifier:
keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/562DDA1A839011EAB5B82263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.84.0/22
103.4.196.0/22
103.26.220.0/22
103.60.60.0/22
103.247.108.0/22
202.55.64.0/19
202.73.32.0/19
202.83.96.0/20
IPv6:
2001:d98::/32
2402:7480::/32
Signature Algorithm: sha256WithRSAEncryption
b7:6b:f8:94:f3:07:d0:ff:6c:2c:00:97:d1:1f:59:1d:02:42:
ef:37:2f:95:c5:0d:fc:4c:90:e9:eb:a0:5f:96:42:73:18:ea:
df:09:fe:2a:ac:3e:87:9c:b2:15:db:81:d3:7c:cc:16:c6:13:
ad:7f:28:86:4d:f0:f0:b8:5e:2a:5c:9b:c7:6f:89:00:07:dc:
90:e4:5d:55:24:1f:5f:09:0a:c2:db:af:1e:8d:f5:4e:34:e7:
a2:b6:30:07:74:53:78:f9:33:6c:2e:3e:32:45:a7:57:f8:72:
2e:33:2f:17:8e:d3:0d:d7:0f:c1:0a:f0:c0:6b:77:87:0c:1d:
7f:ba:2e:9b:35:c1:c0:d1:81:a7:81:70:3f:e2:ac:74:61:f2:
6c:c6:83:65:05:80:e7:c7:34:25:b5:c8:c5:a9:3f:4b:d1:42:
23:ce:20:8d:a1:fb:b6:89:b6:27:84:db:1c:bc:43:93:b5:d8:
70:03:86:43:83:a7:3a:05:ca:95:57:db:41:18:13:60:94:2a:
bf:b2:a7:49:8c:c8:3b:18:1d:05:e2:15:58:e6:69:2e:b7:4e:
6d:78:b8:a1:3b:d7:1a:8f:6f:93:d6:98:ae:62:42:f4:65:95:
f8:8b:81:a9:35:d3:0d:05:8f:89:a9:db:d1:a8:97:dc:28:18:
10:e9:6c:28
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4
MzgwQzA4NTkwHhcNMjExMjMwMTAxODMzWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWNkODc3OC1lNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOUSv6d+MnvWbSIe1rDPKuFfd/8fhZCqATN+W6XD2wMuZ/3w9J/2hLDfwpSo
ZQT1KlWUc2h+1TJrLzHfJhpiw4ORXET12U+YnSnkEKm5eJfx//08UsKxE2XUweIk
Dc5ySyi7HWp2r9fPY2WldeCU6Fdiv6BU6IIw/T1jEsH8sqjF3sY/jKaE53BGShY/
Eorun+uxP7kNvpbN9MuRzV5mnFM8U0BeKzQ0AOQ7xWDeVZ96xcidiVND/1sN5Kdj
YZDlT4ecnSfVP8cPFmOUTGGiZa8BS5mv2gW90VkLHvZhepTvdB981Y9KtwmgoQ+H
GVBIwk99J30WfGl4G4+bsZWZtwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFLtIdHh4
6e9UMorNw/T/IsyitWoKMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz
OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTVCQTkvREY3QTdGMTQ4MzhFMTFFQThDRUEwOTYwQzRGOUFFMDIvNTYyRERBMUE4
MzkwMTFFQUI1QjgyMjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E
UDBOMDYEAgABMDADBAIteVQDBAJnBMQDBAJnGtwDBAJnPDwDBAJn92wDBAXKN0AD
BAXKSSADBATKU2AwFAQCAAIwDgMFACABDZgDBQAkAnSAMA0GCSqGSIb3DQEBCwUA
A4IBAQC3a/iU8wfQ/2wsAJfRH1kdAkLvNy+VxQ38TJDp66BflkJzGOrfCf4qrD6H
nLIV24HTfMwWxhOtfyiGTfDwuF4qXJvHb4kAB9yQ5F1VJB9fCQrC268ejfVONOei
tjAHdFN4+TNsLj4yRadX+HIuMy8XjtMN1w/BCvDAa3eHDB1/ui6bNcHA0YGngXA/
4qx0YfJsxoNlBYDnxzQltcjFqT9L0UIjziCNofu2ibYnhNscvEOTtdhwA4ZDg6c6
BcqVV9tBGBNglCq/sqdJjMg7GB0F4hVY5mkut05teLihO9caj2+T1piuYkL0ZZX4
i4GpNdMNBY+JqdvRqJfcKBgQ6Wwo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org