Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6124CB0C7BB11ED9A3B7F64C4F9AE02.roa
File: A6124CB0C7BB11ED9A3B7F64C4F9AE02.roa (raw, json)
Hash identifier: hSBdD8+YNiuiDbDBgtt+m3UKRMYVu+XdbgDBLAaN2S0=
Subject key identifier: 4F:16:C6:26:72:AC:04:A8:D8:1B:A5:BC:45:5C:40:D2:E7:EA:23:BF
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 33F5
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6124CB0C7BB11ED9A3B7F64C4F9AE02.roa
Signing time: Tue 21 Mar 2023 07:40:28 +0000
ROA not before: Tue 21 Mar 2023 07:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/21 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 21
115.186.64.0/21 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/20 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13301 (0x33f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 21 07:40:28 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64195f6c-aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:9b:8d:ed:3b:e1:4a:3e:36:a4:4e:99:a0:
ed:20:85:59:72:66:4b:05:35:2d:4f:a8:ea:5b:25:
c6:19:74:4c:f0:85:bf:c6:2f:17:77:ae:de:df:1b:
c7:dc:73:90:96:e2:79:13:3a:e6:97:1c:e8:f9:bc:
5d:57:e0:16:e0:e3:c5:2b:3a:68:b2:02:85:2f:a4:
46:99:f8:b7:e6:f4:35:2b:99:be:71:10:3b:63:99:
68:b6:0c:00:35:38:74:ea:3d:68:46:98:39:62:99:
a2:01:1b:28:6f:b3:e3:c1:29:76:81:2e:eb:82:61:
70:f5:91:1d:09:54:40:22:fe:4c:aa:08:08:16:30:
e4:55:53:78:6f:a6:dc:52:0f:91:1d:b2:10:9c:e0:
0d:d0:8e:a5:ef:d2:9d:5c:73:4f:da:66:88:5d:0c:
2c:a7:14:9d:09:54:ea:d5:58:f0:e3:ec:7f:21:8e:
68:8d:b6:f6:5a:8e:2c:f7:74:32:ab:e2:88:8a:79:
e8:02:1f:10:db:eb:5f:30:6b:d9:25:27:67:4a:7d:
bf:cb:a6:7f:f3:ce:52:f9:6a:89:a0:cb:4c:2e:36:
84:fd:08:07:4a:e1:f4:88:35:c6:aa:82:ef:e6:6b:
30:fc:a1:ac:8b:a5:0e:22:1f:e8:d3:00:1d:33:2f:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:C6:26:72:AC:04:A8:D8:1B:A5:BC:45:5C:40:D2:E7:EA:23:BF
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6124CB0C7BB11ED9A3B7F64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0/21
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.13.0/24
117.102.29.0-117.102.31.255
203.81.216.0/24
203.81.219.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c7:16:f9:e0:d3:a0:c5:ab:0e:93:c4:d9:ad:c9:b5:09:c8:
c6:cb:b9:0c:58:71:ff:79:db:e5:33:c5:60:df:41:fc:4a:85:
95:24:a9:fc:b5:9d:65:d5:ff:51:21:6c:25:15:e9:ff:81:52:
fc:b3:bc:4b:4b:5e:b1:e4:8b:7a:a0:10:d7:d8:93:fe:2a:c5:
c2:70:23:43:7c:b9:e8:a6:c5:11:a0:a9:b4:9e:0e:ff:a4:df:
d3:e5:1a:1f:a2:88:1b:f8:a6:38:2a:71:d9:c8:4d:00:29:74:
7c:3a:4d:b7:4d:0e:6f:b3:85:37:d2:1a:f5:38:37:7d:28:73:
35:ee:be:b5:00:05:1e:12:24:59:33:af:0e:8d:dd:30:3b:28:
3e:8e:9f:3d:04:34:d0:76:cb:19:9a:2d:c3:e6:bc:c6:3c:e8:
11:7d:a6:b0:a4:1e:3e:d4:64:21:af:79:a2:b2:49:c5:d3:f2:
22:ec:28:f1:63:24:ba:90:01:06:4e:8d:20:13:4a:30:73:93:
c9:9a:ac:84:a6:50:f7:51:fb:7f:c5:b7:ad:db:5a:5c:c4:00:
20:f1:42:cb:38:1c:93:17:ba:5c:d8:ba:ea:4d:5f:b8:af:68:
65:37:06:c4:ab:32:be:85:8e:43:5f:b7:21:1e:c3:74:dd:be:
43:95:f4:50
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgICM/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjMwMzIxMDc0MDI4WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDE5NWY2Yy1hZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwOKbje074Uo+NqROmaDtIIVZcmZLBTUtT6jqWyXGGXRM8IW/xi8Xd67e3xvH
3HOQluJ5Ezrmlxzo+bxdV+AW4OPFKzposgKFL6RGmfi35vQ1K5m+cRA7Y5lotgwA
NTh06j1oRpg5YpmiARsob7PjwSl2gS7rgmFw9ZEdCVRAIv5MqggIFjDkVVN4b6bc
Ug+RHbIQnOAN0I6l79KdXHNP2maIXQwspxSdCVTq1Vjw4+x/IY5ojbb2Wo4s93Qy
q+KIinnoAh8Q2+tfMGvZJSdnSn2/y6Z/885S+WqJoMtMLjaE/QgHSuH0iDXGqoLv
5msw/KGsi6UOIh/o0wAdMy9u2wIDAQABo4IDODCCAzQwHQYDVR0OBBYEFE8WxiZy
rASo2BulvEVcQNLn6iO/MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQTYxMjRDQjBD
N0JCMTFFRDlBM0I3RjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcEGCCsGAQUFBwEHAQH/
BIGxMIGuMIGrBAIAATCBpAMEAW9YTAMEAG9YTwMEAW9YigMEBG9YkDAMAwQCb1ik
AwQCb1ioAwQDb1i4AwQDb1joAwQAc7oAAwQAc7oTAwQDc7owAwQFc7pAAwQAc7ph
MAwDBABzumMDBAFzumgDBABzunIDBAJzunQDBAFzunoDBAFzun4DBAB1Zg0wDAME
AHVmHQMEBXVmAAMEAMtR2DAMAwQAy1HbAwQBy1HkAwQAy1HnMA0GCSqGSIb3DQEB
CwUAA4IBAQCJxxb54NOgxasOk8TZrcm1CcjGy7kMWHH/edvlM8Vg30H8SoWVJKn8
tZ1l1f9RIWwlFen/gVL8s7xLS16x5It6oBDX2JP+KsXCcCNDfLnopsURoKm0ng7/
pN/T5Rofoogb+KY4KnHZyE0AKXR8Ok23TQ5vs4U30hr1ODd9KHM17r61AAUeEiRZ
M68Ojd0wOyg+jp89BDTQdssZmi3D5rzGPOgRfaawpB4+1GQhr3misknF0/Ii7Cjx
YyS6kAEGTo0gE0owc5PJmqyEplD3Uft/xbet21pcxAAg8ULLOByTF7pc2LrqTV+4
r2hlNwbEqzK+hY5DX7chHsN03b5DlfRQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:10 2025 by rpki-client