Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/9680820253BB11EFAF10E917C4F9AE02.roa
File: 9680820253BB11EFAF10E917C4F9AE02.roa (raw, json)
Hash identifier: ZvNbSGuu35pT0kNeSh/DoUtSptxpDU7ZAeJOeqHgddE=
Subject key identifier: 59:B7:B0:91:8F:6E:D2:D1:DF:21:A3:E1:9E:0D:67:04:1B:05:D5:25
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 021D
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/9680820253BB11EFAF10E917C4F9AE02.roa
Signing time: Tue 06 Aug 2024 06:39:33 +0000
ROA not before: Tue 06 Aug 2024 06:39:33 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9506
IP address blocks: 202.166.0.0/17 maxlen: 24
202.166.128.0/19 maxlen: 19
2400:d800::/30 maxlen: 30
2400:d800::/31 maxlen: 31
2400:d800::/32 maxlen: 32
2400:d800:10::/48 maxlen: 48
2400:d801::/32 maxlen: 32
2400:d801:3f00::/40 maxlen: 40
2400:d801:9000::/36 maxlen: 44
2400:d801:a000::/36 maxlen: 44
2400:d802::/31 maxlen: 31
2400:d802::/32 maxlen: 32
2400:d802:500::/40 maxlen: 44
2400:d802:800::/40 maxlen: 44
2400:d802:1010::/44 maxlen: 44
2400:d802:1080::/41 maxlen: 41
2400:d802:1110::/44 maxlen: 44
2400:d802:1180::/41 maxlen: 41
2400:d802:1210::/44 maxlen: 44
2400:d802:1280::/41 maxlen: 41
2400:d802:1310::/44 maxlen: 44
2400:d802:1380::/41 maxlen: 41
2400:d802:1410::/44 maxlen: 44
2400:d802:1480::/41 maxlen: 41
2400:d802:1510::/44 maxlen: 44
2400:d802:1580::/41 maxlen: 41
2400:d802:1610::/44 maxlen: 44
2400:d802:1680::/41 maxlen: 41
2400:d802:1710::/44 maxlen: 44
2400:d802:1780::/41 maxlen: 41
2400:d802:1810::/44 maxlen: 44
2400:d802:1880::/41 maxlen: 41
2400:d802:1910::/44 maxlen: 44
2400:d802:1980::/41 maxlen: 41
2400:d802:1a10::/44 maxlen: 44
2400:d802:1a80::/41 maxlen: 41
2400:d802:1b10::/44 maxlen: 44
2400:d802:1b80::/41 maxlen: 41
2400:d802:1c10::/44 maxlen: 44
2400:d802:1c80::/41 maxlen: 41
2400:d802:1d10::/44 maxlen: 44
2400:d802:1d80::/41 maxlen: 41
2400:d802:1e10::/44 maxlen: 44
2400:d802:1e80::/41 maxlen: 41
2400:d802:1f10::/44 maxlen: 44
2400:d802:1f80::/41 maxlen: 41
2400:d802:2100::/40 maxlen: 44
2400:d802:2300::/40 maxlen: 44
2400:d802:2410::/45 maxlen: 48
2400:d802:2418::/45 maxlen: 48
2400:d802:2480::/42 maxlen: 48
2400:d802:24c0::/42 maxlen: 48
2400:d802:2600::/40 maxlen: 44
2400:d802:2900::/40 maxlen: 44
2400:d802:2a00::/40 maxlen: 44
2400:d802:2d00::/40 maxlen: 44
2400:d802:3010::/44 maxlen: 44
2400:d802:3080::/41 maxlen: 41
2400:d802:3110::/44 maxlen: 44
2400:d802:3180::/41 maxlen: 41
2400:d802:3210::/44 maxlen: 44
2400:d802:3280::/41 maxlen: 41
2400:d802:3310::/44 maxlen: 44
2400:d802:3380::/41 maxlen: 41
2400:d802:3410::/44 maxlen: 44
2400:d802:3480::/41 maxlen: 41
2400:d802:3510::/44 maxlen: 44
2400:d802:3580::/41 maxlen: 41
2400:d802:3610::/44 maxlen: 44
2400:d802:3680::/41 maxlen: 41
2400:d802:3710::/44 maxlen: 44
2400:d802:3780::/41 maxlen: 41
2400:d802:3810::/44 maxlen: 44
2400:d802:3880::/41 maxlen: 41
2400:d802:3910::/44 maxlen: 44
2400:d802:3980::/41 maxlen: 41
2400:d802:3a10::/44 maxlen: 44
2400:d802:3a80::/41 maxlen: 41
2400:d802:3b10::/44 maxlen: 44
2400:d802:3b80::/41 maxlen: 41
2400:d802:3c10::/44 maxlen: 44
2400:d802:3c80::/41 maxlen: 41
2400:d802:3d10::/44 maxlen: 44
2400:d802:3d80::/41 maxlen: 41
2400:d802:3e10::/44 maxlen: 44
2400:d802:3e80::/41 maxlen: 41
2400:d802:3f10::/44 maxlen: 44
2400:d802:3f80::/41 maxlen: 41
2400:d802:4110::/44 maxlen: 44
2400:d802:4180::/41 maxlen: 41
2400:d802:4210::/44 maxlen: 44
2400:d802:4280::/41 maxlen: 41
2400:d802:4310::/44 maxlen: 44
2400:d802:4380::/41 maxlen: 41
2400:d802:4410::/44 maxlen: 44
2400:d802:4480::/41 maxlen: 41
2400:d802:4510::/44 maxlen: 44
2400:d802:4610::/44 maxlen: 44
2400:d802:4680::/41 maxlen: 41
2400:d802:4710::/44 maxlen: 44
2400:d802:4780::/41 maxlen: 41
2400:d802:4810::/44 maxlen: 44
2400:d802:4880::/41 maxlen: 41
2400:d802:4910::/44 maxlen: 44
2400:d802:4980::/41 maxlen: 41
2400:d802:4a10::/44 maxlen: 44
2400:d802:4a80::/41 maxlen: 41
2400:d802:4b10::/44 maxlen: 44
2400:d802:4b80::/41 maxlen: 41
2400:d802:4c10::/44 maxlen: 44
2400:d802:4c80::/41 maxlen: 41
2400:d802:4d10::/44 maxlen: 44
2400:d802:4d80::/41 maxlen: 41
2400:d802:4e10::/44 maxlen: 44
2400:d802:4e80::/41 maxlen: 41
2400:d802:4f10::/44 maxlen: 44
2400:d802:4f80::/41 maxlen: 41
2400:d802:9d00::/40 maxlen: 44
2400:d802:9f00::/40 maxlen: 44
2400:d802:a000::/36 maxlen: 44
2400:d803::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Aug 6 06:39:33 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66b1c525-72d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:d0:b1:7c:8e:cc:bc:ff:78:ee:b2:03:c7:
d5:ee:e6:d2:88:24:e1:5e:9f:83:78:b6:ac:8b:c7:
f7:d6:af:42:06:b3:c2:3f:ae:e9:7b:e7:1f:5d:4d:
25:88:ea:65:eb:8c:4d:44:7b:29:13:22:b9:e8:8f:
9b:fc:b9:a4:c4:ad:3b:9b:5b:1d:6d:5c:70:cf:02:
8c:cd:79:a7:d6:5c:8d:c2:96:5d:2a:ef:91:f5:b0:
83:8c:38:c1:a2:dc:04:e8:39:2d:bc:d1:f6:99:38:
0b:b7:4e:80:a4:40:70:cb:dc:14:82:3c:62:c9:1f:
75:e8:08:12:2f:b0:25:40:64:38:5d:c7:de:49:23:
31:ba:a2:74:fa:83:b9:59:ba:7d:6e:24:92:cc:68:
4f:2a:54:e3:81:73:2d:51:d5:f6:b5:d4:1f:31:f2:
e3:3b:a4:a9:11:b7:37:de:0d:0b:64:43:2c:5b:9e:
9e:88:a7:11:cb:ab:41:c4:72:89:10:28:c3:b2:b8:
3c:4a:db:47:55:a6:7f:29:d2:1c:9d:b8:d5:35:f0:
0b:a2:26:b5:27:0f:9d:80:56:d0:e6:9f:e3:52:0f:
a0:80:d6:a3:7f:f5:85:2a:84:1d:1a:4e:57:f8:16:
11:47:6c:4c:1a:47:6c:00:6f:73:53:45:e6:06:72:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:B0:91:8F:6E:D2:D1:DF:21:A3:E1:9E:0D:67:04:1B:05:D5:25
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/9680820253BB11EFAF10E917C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.166.0.0-202.166.159.255
IPv6:
2400:d800::/30
Signature Algorithm: sha256WithRSAEncryption
1b:45:d4:89:28:da:43:67:b9:04:62:dc:b8:b7:ac:e6:83:bf:
1a:98:9d:4f:45:80:98:a1:33:5e:13:ab:62:c3:23:db:45:b8:
7b:ee:8c:46:a1:56:35:57:7e:e9:20:21:df:d0:6f:b2:a6:1b:
ec:bc:ea:43:c5:66:1e:ae:76:c0:87:06:13:b2:60:99:f5:cc:
0f:9a:86:2f:0a:aa:45:48:ed:ee:a8:68:5b:ad:0e:31:93:53:
66:8f:20:59:88:85:df:2a:0f:4c:a6:4c:5c:e5:db:8e:d9:ad:
bd:e0:0c:1d:84:bc:a9:dc:09:03:db:22:f2:23:f2:bc:00:a3:
4b:39:55:3f:84:90:72:93:9d:37:99:9c:82:83:b7:e7:c6:08:
71:a6:de:d1:db:6d:46:61:13:27:e0:6f:28:ae:46:89:80:fd:
1c:90:bb:89:e8:e7:aa:82:cd:4b:23:a6:27:1e:78:a8:74:b1:
46:ae:47:f4:c3:c8:ef:f7:5f:7b:41:c9:3b:34:7c:b3:d1:1d:
bc:7e:cc:31:37:e2:c1:de:1c:28:2c:91:33:46:84:35:b4:03:
34:34:57:b2:4b:00:24:fd:64:94:f0:94:99:43:a2:dd:52:84:
b8:2c:3c:17:74:99:89:15:cc:44:24:d6:76:f5:91:2a:34:d6:
20:12:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:42 2025 by rpki-client