Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7215704CFBF711EE8140050EC4F9AE02.roa
File:                     7215704CFBF711EE8140050EC4F9AE02.roa (raw, json)
Hash identifier:          sIisD77kI5lsjGc4hC1L4acvw2vH5/eWH8Q9pNN8iUI=
Subject key identifier:   48:28:96:69:26:14:3D:DA:80:9A:A6:4F:31:90:EC:02:5E:02:E4:F0
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       35C3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7215704CFBF711EE8140050EC4F9AE02.roa
Signing time:             Tue 16 Apr 2024 13:44:29 +0000
ROA not before:           Tue 16 Apr 2024 13:44:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132165
IP address blocks:        103.246.108.0/22 maxlen: 22
                          103.246.108.0/24 maxlen: 24
                          103.246.109.0/24 maxlen: 24
                          103.246.110.0/24 maxlen: 24
                          103.246.111.0/24 maxlen: 24
                          111.88.0.0/20 maxlen: 24
                          111.88.16.0/20 maxlen: 24
                          111.88.32.0/20 maxlen: 24
                          111.88.48.0/20 maxlen: 24
                          111.88.72.0/22 maxlen: 22
                          111.88.72.0/24 maxlen: 24
                          111.88.73.0/24 maxlen: 24
                          111.88.74.0/24 maxlen: 24
                          111.88.75.0/24 maxlen: 24
                          111.88.78.0/24 maxlen: 24
                          111.88.80.0/20 maxlen: 20
                          111.88.80.0/22 maxlen: 22
                          111.88.80.0/24 maxlen: 24
                          111.88.81.0/24 maxlen: 24
                          111.88.82.0/24 maxlen: 24
                          111.88.83.0/24 maxlen: 24
                          111.88.84.0/22 maxlen: 22
                          111.88.84.0/24 maxlen: 24
                          111.88.85.0/24 maxlen: 24
                          111.88.86.0/24 maxlen: 24
                          111.88.87.0/24 maxlen: 24
                          111.88.88.0/21 maxlen: 21
                          111.88.88.0/24 maxlen: 24
                          111.88.89.0/24 maxlen: 24
                          111.88.90.0/24 maxlen: 24
                          111.88.91.0/24 maxlen: 24
                          111.88.92.0/24 maxlen: 24
                          111.88.93.0/24 maxlen: 24
                          111.88.94.0/24 maxlen: 24
                          111.88.95.0/24 maxlen: 24
                          111.88.96.0/19 maxlen: 19
                          111.88.96.0/20 maxlen: 20
                          111.88.96.0/24 maxlen: 24
                          111.88.97.0/24 maxlen: 24
                          111.88.98.0/24 maxlen: 24
                          111.88.99.0/24 maxlen: 24
                          111.88.100.0/24 maxlen: 24
                          111.88.101.0/24 maxlen: 24
                          111.88.102.0/24 maxlen: 24
                          111.88.103.0/24 maxlen: 24
                          111.88.104.0/24 maxlen: 24
                          111.88.105.0/24 maxlen: 24
                          111.88.106.0/24 maxlen: 24
                          111.88.107.0/24 maxlen: 24
                          111.88.108.0/24 maxlen: 24
                          111.88.109.0/24 maxlen: 24
                          111.88.110.0/24 maxlen: 24
                          111.88.111.0/24 maxlen: 24
                          111.88.112.0/20 maxlen: 20
                          111.88.112.0/24 maxlen: 24
                          111.88.113.0/24 maxlen: 24
                          111.88.114.0/24 maxlen: 24
                          111.88.115.0/24 maxlen: 24
                          111.88.116.0/24 maxlen: 24
                          111.88.117.0/24 maxlen: 24
                          111.88.118.0/24 maxlen: 24
                          111.88.119.0/24 maxlen: 24
                          111.88.120.0/24 maxlen: 24
                          111.88.121.0/24 maxlen: 24
                          111.88.122.0/24 maxlen: 24
                          111.88.123.0/24 maxlen: 24
                          111.88.124.0/24 maxlen: 24
                          111.88.125.0/24 maxlen: 24
                          111.88.126.0/24 maxlen: 24
                          111.88.127.0/24 maxlen: 24
                          111.88.128.0/21 maxlen: 21
                          111.88.128.0/24 maxlen: 24
                          111.88.129.0/24 maxlen: 24
                          111.88.130.0/24 maxlen: 24
                          111.88.131.0/24 maxlen: 24
                          111.88.132.0/24 maxlen: 24
                          111.88.133.0/24 maxlen: 24
                          111.88.134.0/24 maxlen: 24
                          111.88.135.0/24 maxlen: 24
                          111.88.136.0/23 maxlen: 24
                          111.88.140.0/22 maxlen: 22
                          111.88.140.0/24 maxlen: 24
                          111.88.141.0/24 maxlen: 24
                          111.88.142.0/24 maxlen: 24
                          111.88.143.0/24 maxlen: 24
                          111.88.160.0/22 maxlen: 22
                          111.88.160.0/24 maxlen: 24
                          111.88.161.0/24 maxlen: 24
                          111.88.162.0/24 maxlen: 24
                          111.88.163.0/24 maxlen: 24
                          111.88.172.0/22 maxlen: 22
                          111.88.172.0/24 maxlen: 24
                          111.88.173.0/24 maxlen: 24
                          111.88.174.0/24 maxlen: 24
                          111.88.175.0/24 maxlen: 24
                          111.88.176.0/21 maxlen: 21
                          111.88.176.0/24 maxlen: 24
                          111.88.177.0/24 maxlen: 24
                          111.88.178.0/24 maxlen: 24
                          111.88.179.0/24 maxlen: 24
                          111.88.180.0/24 maxlen: 24
                          111.88.181.0/24 maxlen: 24
                          111.88.182.0/24 maxlen: 24
                          111.88.183.0/24 maxlen: 24
                          111.88.192.0/19 maxlen: 19
                          111.88.192.0/24 maxlen: 24
                          111.88.193.0/24 maxlen: 24
                          111.88.194.0/24 maxlen: 24
                          111.88.195.0/24 maxlen: 24
                          111.88.196.0/24 maxlen: 24
                          111.88.197.0/24 maxlen: 24
                          111.88.198.0/24 maxlen: 24
                          111.88.199.0/24 maxlen: 24
                          111.88.200.0/24 maxlen: 24
                          111.88.201.0/24 maxlen: 24
                          111.88.202.0/24 maxlen: 24
                          111.88.203.0/24 maxlen: 24
                          111.88.204.0/24 maxlen: 24
                          111.88.205.0/24 maxlen: 24
                          111.88.206.0/24 maxlen: 24
                          111.88.207.0/24 maxlen: 24
                          111.88.208.0/24 maxlen: 24
                          111.88.209.0/24 maxlen: 24
                          111.88.210.0/24 maxlen: 24
                          111.88.211.0/24 maxlen: 24
                          111.88.212.0/24 maxlen: 24
                          111.88.213.0/24 maxlen: 24
                          111.88.214.0/24 maxlen: 24
                          111.88.215.0/24 maxlen: 24
                          111.88.216.0/24 maxlen: 24
                          111.88.217.0/24 maxlen: 24
                          111.88.218.0/24 maxlen: 24
                          111.88.219.0/24 maxlen: 24
                          111.88.220.0/24 maxlen: 24
                          111.88.221.0/24 maxlen: 24
                          111.88.222.0/24 maxlen: 24
                          111.88.223.0/24 maxlen: 24
                          111.88.224.0/21 maxlen: 21
                          111.88.224.0/24 maxlen: 24
                          111.88.225.0/24 maxlen: 24
                          111.88.226.0/24 maxlen: 24
                          111.88.227.0/24 maxlen: 24
                          111.88.228.0/24 maxlen: 24
                          111.88.229.0/24 maxlen: 24
                          111.88.230.0/24 maxlen: 24
                          111.88.231.0/24 maxlen: 24
                          115.186.2.0/23 maxlen: 24
                          115.186.4.0/22 maxlen: 22
                          115.186.4.0/24 maxlen: 24
                          115.186.5.0/24 maxlen: 24
                          115.186.6.0/24 maxlen: 24
                          115.186.7.0/24 maxlen: 24
                          115.186.8.0/23 maxlen: 24
                          115.186.76.0/22 maxlen: 22
                          115.186.76.0/24 maxlen: 24
                          115.186.77.0/24 maxlen: 24
                          115.186.78.0/24 maxlen: 24
                          115.186.79.0/24 maxlen: 24
                          115.186.80.0/22 maxlen: 22
                          115.186.80.0/24 maxlen: 24
                          115.186.81.0/24 maxlen: 24
                          115.186.82.0/24 maxlen: 24
                          115.186.83.0/24 maxlen: 24
                          115.186.84.0/22 maxlen: 22
                          115.186.84.0/24 maxlen: 24
                          115.186.85.0/24 maxlen: 24
                          115.186.86.0/24 maxlen: 24
                          115.186.87.0/24 maxlen: 24
                          117.102.48.0/20 maxlen: 20
                          117.102.48.0/24 maxlen: 24
                          117.102.49.0/24 maxlen: 24
                          117.102.50.0/24 maxlen: 24
                          117.102.51.0/24 maxlen: 24
                          117.102.52.0/24 maxlen: 24
                          117.102.53.0/24 maxlen: 24
                          117.102.54.0/24 maxlen: 24
                          117.102.55.0/24 maxlen: 24
                          117.102.56.0/24 maxlen: 24
                          117.102.57.0/24 maxlen: 24
                          117.102.58.0/24 maxlen: 24
                          117.102.59.0/24 maxlen: 24
                          117.102.60.0/24 maxlen: 24
                          117.102.61.0/24 maxlen: 24
                          117.102.62.0/24 maxlen: 24
                          117.102.63.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13763 (0x35c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 16 13:44:29 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=661e80bc-897d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:b0:3c:8a:60:dc:5d:a9:38:c3:00:d3:df:
                    be:40:62:5c:f0:62:4d:45:b4:82:3a:26:27:7d:9a:
                    ab:74:55:49:61:c7:ec:dc:16:e3:db:91:60:93:cb:
                    26:9b:9c:ca:26:f4:c4:83:85:55:4f:75:66:1f:81:
                    0f:dc:1d:28:ce:74:7c:0b:71:05:44:44:9e:e0:08:
                    1f:0f:8e:17:af:2b:a5:db:14:54:43:fb:73:b2:97:
                    36:58:ab:98:0c:0e:a3:73:80:8d:32:55:8c:e5:93:
                    aa:a8:94:e8:9d:c3:3f:7d:5a:fc:d6:b9:0e:d8:bd:
                    09:80:06:2a:17:c3:9e:38:af:29:72:96:6a:a3:9e:
                    ce:21:31:ba:24:b2:ea:fb:16:3a:c6:c2:3e:b8:03:
                    14:25:9a:02:64:78:22:cd:31:0f:ef:68:99:ad:08:
                    a7:c0:2d:0b:80:9e:c1:67:92:fe:1d:ca:51:52:7c:
                    b7:ee:40:34:12:17:8f:9e:34:24:f3:db:e7:16:1e:
                    c9:8f:ee:56:f4:36:9d:aa:6a:ac:af:0b:6e:00:7c:
                    2c:c2:8a:13:f9:42:ff:be:a6:50:24:f7:e1:df:01:
                    b3:c6:9e:13:e8:da:48:ed:d5:c8:91:d0:a9:30:bb:
                    59:e1:5a:70:08:b3:17:63:6b:18:69:0a:7c:cc:83:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:28:96:69:26:14:3D:DA:80:9A:A6:4F:31:90:EC:02:5E:02:E4:F0
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7215704CFBF711EE8140050EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.108.0/22
                  111.88.0.0/18
                  111.88.72.0/22
                  111.88.78.0/24
                  111.88.80.0-111.88.137.255
                  111.88.140.0/22
                  111.88.160.0/22
                  111.88.172.0-111.88.183.255
                  111.88.192.0-111.88.231.255
                  115.186.2.0-115.186.9.255
                  115.186.76.0-115.186.87.255
                  117.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:56:d9:db:f2:1e:be:dc:00:f2:0a:ad:a6:37:a4:e6:14:f0:
         b8:2f:6a:03:47:8f:06:92:2e:ba:40:89:2e:aa:e4:df:b6:eb:
         8a:17:77:e8:b3:3e:9a:bb:5a:3e:73:2c:9b:7e:7e:59:97:e9:
         b6:c2:58:fc:ab:11:ba:0e:84:1e:f4:be:0a:2d:87:30:5b:d2:
         d0:4b:54:2e:b7:4e:ce:e8:62:e9:8c:a8:18:ff:11:b7:52:54:
         9b:cd:9f:ee:be:4e:99:42:f2:24:38:10:a4:05:83:86:5d:a8:
         e6:78:27:39:ee:05:ed:50:70:1c:2f:3c:e2:9e:e3:67:81:b4:
         58:af:b1:d0:fb:86:bc:1c:28:3f:32:d9:03:5e:8f:18:7e:8d:
         71:54:e7:64:01:a5:4e:1b:80:7c:6e:7d:ac:d9:7b:d0:5b:c2:
         56:7a:16:58:21:db:24:8d:91:7b:b6:ef:ed:14:67:fe:9a:36:
         ba:24:e1:c0:bc:03:29:7e:8c:2d:df:50:5e:e5:ac:21:06:ee:
         45:15:b3:87:7d:01:b8:ad:26:4c:0d:5a:39:c7:a5:ed:23:6d:
         1d:b0:6f:23:ee:e1:36:1d:b7:74:f7:63:d2:9d:26:40:53:91:
         16:c4:bb:b2:66:f1:53:33:3d:b2:cc:2d:65:5b:5d:2d:4b:74:
         f6:6b:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:51 2025 by rpki-client