Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BDE82D27C5811EBA16B9B5BC4F9AE02.roa
File: 4BDE82D27C5811EBA16B9B5BC4F9AE02.roa (raw, json)
Hash identifier: 3ZYr6vkbTOuUbQOmQw8ZcRwBwx1c181WBy28m3pzI3w=
Subject key identifier: 94:55:27:72:F5:55:01:5C:EF:5C:57:88:C4:F1:A5:98:BF:95:EE:49
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 340C
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BDE82D27C5811EBA16B9B5BC4F9AE02.roa
Signing time: Fri 03 Mar 2023 03:40:27 +0000
ROA not before: Fri 03 Mar 2023 03:40:27 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 17639
IP address blocks: 103.93.220.0/22 maxlen: 22
111.125.64.0/18 maxlen: 18
111.125.64.0/22 maxlen: 22
111.125.68.0/22 maxlen: 22
111.125.72.0/22 maxlen: 22
111.125.76.0/22 maxlen: 22
111.125.80.0/22 maxlen: 24
111.125.84.0/22 maxlen: 22
111.125.88.0/22 maxlen: 22
111.125.92.0/22 maxlen: 22
111.125.96.0/22 maxlen: 22
111.125.97.0/24 maxlen: 24
111.125.100.0/22 maxlen: 22
111.125.102.0/24 maxlen: 24
111.125.104.0/22 maxlen: 24
111.125.112.0/22 maxlen: 22
111.125.116.0/22 maxlen: 24
111.125.124.0/22 maxlen: 22
111.125.124.0/23 maxlen: 23
111.125.126.0/24 maxlen: 24
120.29.64.0/18 maxlen: 18
120.29.64.0/22 maxlen: 23
120.29.64.0/23 maxlen: 24
120.29.66.0/24 maxlen: 24
120.29.68.0/22 maxlen: 23
120.29.68.0/23 maxlen: 24
120.29.72.0/22 maxlen: 22
120.29.72.0/23 maxlen: 24
120.29.74.0/24 maxlen: 24
120.29.75.0/24 maxlen: 24
120.29.76.0/22 maxlen: 22
120.29.76.0/24 maxlen: 24
120.29.77.0/24 maxlen: 24
120.29.78.0/24 maxlen: 24
120.29.79.0/24 maxlen: 24
120.29.80.0/22 maxlen: 23
120.29.80.0/24 maxlen: 24
120.29.82.0/24 maxlen: 24
120.29.84.0/22 maxlen: 22
120.29.84.0/24 maxlen: 24
120.29.85.0/24 maxlen: 24
120.29.86.0/24 maxlen: 24
120.29.87.0/24 maxlen: 24
120.29.88.0/22 maxlen: 22
120.29.88.0/24 maxlen: 24
120.29.89.0/24 maxlen: 24
120.29.90.0/24 maxlen: 24
120.29.91.0/24 maxlen: 24
120.29.92.0/22 maxlen: 22
120.29.92.0/23 maxlen: 23
120.29.92.0/24 maxlen: 24
120.29.94.0/24 maxlen: 24
120.29.95.0/24 maxlen: 24
120.29.96.0/22 maxlen: 22
120.29.96.0/23 maxlen: 24
120.29.98.0/24 maxlen: 24
120.29.99.0/24 maxlen: 24
120.29.100.0/22 maxlen: 22
120.29.100.0/24 maxlen: 24
120.29.101.0/24 maxlen: 24
120.29.102.0/24 maxlen: 24
120.29.103.0/24 maxlen: 24
120.29.108.0/22 maxlen: 22
120.29.108.0/23 maxlen: 23
120.29.110.0/24 maxlen: 24
120.29.111.0/24 maxlen: 24
120.29.112.0/22 maxlen: 22
120.29.113.0/24 maxlen: 24
120.29.116.0/22 maxlen: 22
120.29.116.0/23 maxlen: 23
120.29.116.0/24 maxlen: 24
120.29.118.0/24 maxlen: 24
120.29.119.0/24 maxlen: 24
120.29.120.0/22 maxlen: 22
120.29.124.0/22 maxlen: 22
121.58.192.0/18 maxlen: 18
121.58.192.0/22 maxlen: 24
121.58.196.0/22 maxlen: 22
121.58.200.0/22 maxlen: 22
121.58.204.0/22 maxlen: 24
121.58.208.0/22 maxlen: 24
121.58.212.0/22 maxlen: 24
121.58.216.0/22 maxlen: 22
121.58.220.0/22 maxlen: 22
121.58.224.0/22 maxlen: 22
121.58.228.0/22 maxlen: 24
121.58.232.0/22 maxlen: 22
121.58.232.0/24 maxlen: 24
121.58.233.0/24 maxlen: 24
121.58.234.0/23 maxlen: 24
121.58.236.0/22 maxlen: 22
121.58.236.0/23 maxlen: 24
121.58.238.0/24 maxlen: 24
121.58.239.0/24 maxlen: 24
121.58.240.0/22 maxlen: 23
121.58.240.0/24 maxlen: 24
121.58.242.0/23 maxlen: 24
121.58.244.0/22 maxlen: 24
121.58.248.0/22 maxlen: 24
121.58.252.0/22 maxlen: 22
123.253.136.0/22 maxlen: 22
123.253.136.0/24 maxlen: 24
123.253.137.0/24 maxlen: 24
123.253.139.0/24 maxlen: 24
202.69.160.0/19 maxlen: 19
202.69.160.0/24 maxlen: 24
202.69.161.0/24 maxlen: 24
202.69.162.0/24 maxlen: 24
202.69.164.0/22 maxlen: 24
202.69.168.0/22 maxlen: 24
202.69.172.0/22 maxlen: 24
202.69.176.0/22 maxlen: 24
202.69.180.0/22 maxlen: 24
202.69.184.0/22 maxlen: 24
202.69.188.0/22 maxlen: 24
210.4.96.0/19 maxlen: 19
210.4.96.0/22 maxlen: 22
210.4.96.0/24 maxlen: 24
210.4.97.0/24 maxlen: 24
210.4.98.0/24 maxlen: 24
210.4.99.0/24 maxlen: 24
210.4.100.0/22 maxlen: 22
210.4.101.0/24 maxlen: 24
210.4.102.0/24 maxlen: 24
210.4.104.0/22 maxlen: 22
210.4.105.0/24 maxlen: 24
210.4.106.0/24 maxlen: 24
210.4.107.0/24 maxlen: 24
210.4.108.0/22 maxlen: 22
210.4.108.0/24 maxlen: 24
210.4.109.0/24 maxlen: 24
210.4.112.0/22 maxlen: 22
210.4.112.0/24 maxlen: 24
210.4.113.0/24 maxlen: 24
210.4.114.0/24 maxlen: 24
210.4.115.0/24 maxlen: 24
210.4.116.0/22 maxlen: 22
210.4.117.0/24 maxlen: 24
210.4.118.0/24 maxlen: 24
210.4.119.0/24 maxlen: 24
210.4.120.0/22 maxlen: 22
210.4.120.0/24 maxlen: 24
210.4.121.0/24 maxlen: 24
210.4.122.0/24 maxlen: 24
210.4.123.0/24 maxlen: 24
210.4.124.0/22 maxlen: 22
210.4.124.0/24 maxlen: 24
210.4.125.0/24 maxlen: 24
210.4.126.0/24 maxlen: 24
210.4.127.0/24 maxlen: 24
2405:3200::/32 maxlen: 32
2405:3200::/36 maxlen: 36
2405:3200:101::/48 maxlen: 48
2405:3200:107::/48 maxlen: 48
2405:3200:501::/48 maxlen: 48
2405:3200:600::/40 maxlen: 40
2405:3200:700::/48 maxlen: 48
2405:3200:710::/48 maxlen: 48
2405:3200:cff:1::/64 maxlen: 64
2405:3200:cff:eeee::/64 maxlen: 64
2405:3200:cff:ffff::/64 maxlen: 64
2405:3200:1000::/36 maxlen: 36
2405:3200:3200:3200::/64 maxlen: 64
2405:3200:cfff:1::/64 maxlen: 64
2405:3200:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13324 (0x340c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454
Validity
Not Before: Mar 3 03:40:27 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64016c2a-aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:91:f5:da:65:ce:08:0f:b9:25:8e:12:d6:
52:7c:36:0c:a9:de:a0:1a:6e:5c:69:4e:28:b7:a1:
51:bc:61:d2:29:d4:87:03:f6:04:6d:2d:a7:dc:0e:
43:fb:0e:0a:7c:69:82:79:88:84:5a:7d:0e:49:b0:
d3:08:b9:f5:fc:d0:66:50:b3:be:d3:95:b0:b5:08:
3b:fb:19:69:ad:54:7f:7c:7a:db:2c:01:cb:4a:dd:
c3:3b:a1:34:49:05:f2:08:9e:a9:c7:6a:3b:3d:a8:
71:8d:cd:c9:68:b7:ec:8a:6b:40:62:94:27:21:a0:
9a:7a:3a:f8:57:5d:64:e8:49:88:71:9d:0d:74:8f:
97:bd:6e:97:83:4b:21:47:57:fb:f8:85:c0:2f:5b:
c7:33:25:0d:33:5b:a3:56:7e:19:50:3d:34:7c:ce:
c9:eb:eb:2f:d9:6e:b1:0b:72:c4:ed:a5:62:ba:86:
1a:ac:3a:ac:8d:59:c1:0a:8a:fc:05:f7:52:ca:47:
64:e0:b4:2b:88:77:d6:0c:dd:0f:5b:24:6a:d2:55:
5d:3e:d9:9f:95:7d:92:e5:b0:35:b7:0a:2b:54:0a:
8d:10:b4:55:52:ad:af:de:d8:65:e5:c5:ea:23:f3:
5d:13:ee:1e:d9:a6:b7:3c:69:50:f2:d1:fb:70:f2:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:27:72:F5:55:01:5C:EF:5C:57:88:C4:F1:A5:98:BF:95:EE:49
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BDE82D27C5811EBA16B9B5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.220.0/22
111.125.64.0/18
120.29.64.0/18
121.58.192.0/18
123.253.136.0/22
202.69.160.0/19
210.4.96.0/19
IPv6:
2405:3200::/32
Signature Algorithm: sha256WithRSAEncryption
20:c2:4e:7b:47:a4:4f:7b:28:f5:3f:60:a1:c6:08:24:26:8a:
5a:01:07:1c:85:43:1c:67:4c:07:ea:a9:f5:8e:ff:c5:d8:65:
53:68:85:2e:cd:9b:73:26:2a:03:cf:bf:53:5b:8e:05:bf:f8:
81:6c:1f:0a:78:98:5b:0c:18:5e:1a:b3:a3:7d:12:a3:11:8e:
6f:09:1d:4b:df:a9:47:2a:cc:ee:09:3d:82:48:c9:1f:b7:74:
b6:21:ec:73:8b:42:dc:cc:bd:df:b6:df:0e:0d:89:a8:64:74:
1c:47:9c:cf:8b:f6:cf:e0:53:3f:02:1e:94:03:f1:de:d5:85:
8c:46:31:24:93:a6:58:05:ec:b6:88:b2:32:38:d5:5b:2e:1c:
cb:2b:2a:26:26:cc:e4:57:4f:4d:d9:3d:6a:14:c9:c1:22:69:
85:72:64:7c:52:83:6b:f2:a8:d0:75:7e:f6:7c:7f:6b:88:a6:
22:ae:97:88:3a:d6:6f:75:44:0f:61:7d:d3:04:92:8f:53:d1:
1b:21:e8:0e:1d:dd:64:07:5d:f0:54:47:83:c0:37:b0:05:f6:
79:20:ac:ea:68:04:ea:d5:c8:0d:b6:72:2f:78:00:52:05:a2:
39:6f:a7:b0:67:19:ac:ad:13:05:d1:58:56:d1:85:9a:31:ce:
fd:44:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:03 2025 by rpki-client