Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4A541E4ADB7D11EE8A692F68C4F9AE02.roa
File: 4A541E4ADB7D11EE8A692F68C4F9AE02.roa (raw, json)
Hash identifier: muEMphKTOkOym6QPpydhDxoRZcboRAECayvG4qQ8clw=
Subject key identifier: CC:84:F2:7B:64:50:67:35:45:03:0C:10:02:FA:A7:43:2C:F9:6E:FD
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3504
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4A541E4ADB7D11EE8A692F68C4F9AE02.roa
Signing time: Wed 06 Mar 2024 05:49:26 +0000
ROA not before: Wed 06 Mar 2024 05:49:26 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 17
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 18
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 16
115.66.0.0/17 maxlen: 17
115.66.128.0/17 maxlen: 17
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 16
116.14.0.0/17 maxlen: 17
116.14.64.0/21 maxlen: 21
116.14.128.0/17 maxlen: 17
116.15.0.0/16 maxlen: 16
116.15.40.0/21 maxlen: 21
116.15.96.0/22 maxlen: 22
116.15.108.0/23 maxlen: 23
116.15.112.0/21 maxlen: 21
116.15.136.0/22 maxlen: 22
118.200.0.0/16 maxlen: 16
118.200.48.0/21 maxlen: 21
118.200.69.0/24 maxlen: 24
118.200.84.0/24 maxlen: 24
118.200.141.0/24 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 19
118.201.193.0/24 maxlen: 24
118.201.201.0/24 maxlen: 24
118.201.207.0/24 maxlen: 24
118.201.212.0/24 maxlen: 24
118.201.217.0/24 maxlen: 24
118.201.218.0/24 maxlen: 24
118.201.219.0/24 maxlen: 24
118.201.224.0/19 maxlen: 19
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 16
119.74.16.0/22 maxlen: 22
119.74.74.0/23 maxlen: 23
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
121.6.0.0/16 maxlen: 16
121.7.0.0/16 maxlen: 16
121.7.0.0/17 maxlen: 17
121.7.128.0/17 maxlen: 17
121.7.185.0/24 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 18
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 16
219.74.211.0/24 maxlen: 24
219.75.0.0/17 maxlen: 17
219.75.24.0/24 maxlen: 24
219.75.32.0/24 maxlen: 24
219.75.94.0/23 maxlen: 23
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 17
220.255.175.0/24 maxlen: 24
220.255.206.0/23 maxlen: 23
220.255.221.0/24 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13572 (0x3504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Mar 6 05:49:26 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65e803e6-404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:c5:1b:87:a8:33:99:4c:4c:12:70:c9:75:
25:4b:9e:db:2a:77:57:b8:3c:69:aa:75:e0:11:29:
26:0f:b1:4a:81:13:bc:72:66:49:31:fd:61:cd:12:
e1:cc:8c:02:a8:b8:15:18:d7:d1:05:65:61:17:6c:
95:ed:43:2a:ea:b5:71:4f:a5:1e:22:56:80:06:cf:
60:3e:6a:20:96:86:9f:c7:ad:25:89:3f:f1:a3:6e:
48:db:32:0e:10:13:6a:df:e0:58:67:86:45:a2:cf:
e1:1b:af:d7:e1:26:10:f1:3e:14:d8:e8:64:b2:76:
77:f1:b1:fb:22:fe:4a:42:ac:71:07:d5:4c:55:f2:
47:9a:39:0d:b0:6b:5a:17:aa:60:46:b3:8a:a1:b9:
fc:fb:38:48:33:a7:15:fc:e0:03:d6:ce:5b:bc:f3:
ce:96:6d:36:94:5b:b1:04:8f:08:69:f5:f6:3a:14:
35:76:6b:9a:9f:af:cc:ac:23:cf:6f:22:b6:3a:04:
1a:d4:52:19:8e:90:85:1d:3c:3a:c9:ee:00:b3:72:
93:20:fb:f4:d7:e6:18:2e:6f:48:da:1e:82:3e:bd:
0b:64:e1:e8:51:16:2d:12:2d:7a:7e:d1:e2:f8:20:
fa:6b:84:11:9f:d0:52:ee:7a:1f:d0:22:46:2c:4c:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:F2:7B:64:50:67:35:45:03:0C:10:02:FA:A7:43:2C:F9:6E:FD
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/4A541E4ADB7D11EE8A692F68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
59:65:33:b6:af:8e:fc:cf:94:9f:f3:53:69:00:7c:e7:d0:18:
44:20:05:4a:59:83:22:e4:a1:d6:ff:f4:e3:71:7d:93:09:80:
3a:b0:2f:34:3b:bb:c5:61:3a:19:fc:d4:79:e1:ab:ff:e9:d2:
9c:e7:87:b4:70:ba:6c:5c:93:f5:ef:aa:8e:47:20:29:68:9c:
3b:e9:cc:dd:7c:ea:b6:ee:24:62:59:84:41:d8:f1:d4:90:f1:
ad:14:71:c6:f3:93:2a:54:d1:08:c4:b2:55:28:61:85:2e:4d:
14:77:7b:2e:e3:fd:12:ff:b8:96:c0:d1:4d:e6:67:1b:0a:5c:
29:bb:68:26:4a:28:15:33:c0:31:68:22:dd:6f:23:4d:ce:dc:
e8:ed:25:2e:7a:ea:57:5b:4c:30:42:88:a4:32:b0:91:90:59:
ca:ed:fb:82:97:c9:b5:77:fe:2d:81:ac:47:a5:aa:df:c3:1e:
f4:51:0b:b4:ef:00:10:ec:43:11:24:a3:86:34:24:bb:ae:88:
8b:9f:b9:31:f4:67:09:70:72:b1:91:e1:63:f6:43:5f:fd:bc:
92:9e:ba:6f:a8:bf:ba:64:17:bb:77:42:ff:b9:fe:82:30:0a:
76:a4:d8:a7:0a:35:62:30:09:37:fe:4e:9e:45:44:9e:08:d3:
5a:a2:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:37 2025 by rpki-client