Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/8D02490E5ECE11EFA8CAB757C4F9AE02.roa
File: 8D02490E5ECE11EFA8CAB757C4F9AE02.roa (raw, json)
Hash identifier: MnushNzkJJzIBCxj7YDEFSiNEXyoLSDgQG8RGJZrj38=
Subject key identifier: D5:11:B5:97:FA:A9:C8:D1:48:0D:F1:3E:81:57:D6:E3:FD:4E:D0:4F
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 34A9
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/8D02490E5ECE11EFA8CAB757C4F9AE02.roa
Signing time: Tue 20 Aug 2024 08:31:09 +0000
ROA not before: Tue 20 Aug 2024 08:31:09 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 45960
IP address blocks: 14.1.128.0/17 maxlen: 18
14.1.178.0/24 maxlen: 24
14.1.179.0/24 maxlen: 24
14.1.180.0/24 maxlen: 24
14.1.181.0/24 maxlen: 24
14.1.182.0/24 maxlen: 24
14.1.183.0/24 maxlen: 24
14.1.184.0/24 maxlen: 24
14.1.185.0/24 maxlen: 24
14.1.186.0/24 maxlen: 24
14.1.187.0/24 maxlen: 24
14.1.188.0/24 maxlen: 24
14.1.189.0/24 maxlen: 24
14.1.190.0/24 maxlen: 24
14.1.191.0/24 maxlen: 24
14.1.192.0/23 maxlen: 23
14.1.194.0/24 maxlen: 24
14.1.195.0/24 maxlen: 24
14.1.196.0/23 maxlen: 23
14.1.197.0/24 maxlen: 24
14.1.198.0/24 maxlen: 24
14.1.199.0/24 maxlen: 24
14.1.200.0/24 maxlen: 24
14.1.201.0/24 maxlen: 24
14.1.202.0/24 maxlen: 24
14.1.203.0/24 maxlen: 24
14.1.204.0/24 maxlen: 24
14.1.205.0/24 maxlen: 24
14.1.206.0/24 maxlen: 24
14.1.207.0/24 maxlen: 24
14.1.208.0/24 maxlen: 24
14.1.209.0/24 maxlen: 24
14.1.210.0/24 maxlen: 24
14.1.211.0/24 maxlen: 24
14.1.212.0/24 maxlen: 24
14.1.213.0/24 maxlen: 24
14.1.214.0/24 maxlen: 24
14.1.215.0/24 maxlen: 24
14.1.216.0/24 maxlen: 24
14.1.217.0/24 maxlen: 24
14.1.218.0/24 maxlen: 24
14.1.219.0/24 maxlen: 24
14.1.220.0/24 maxlen: 24
14.1.221.0/24 maxlen: 24
14.1.222.0/24 maxlen: 24
14.1.223.0/24 maxlen: 24
14.1.224.0/24 maxlen: 24
14.1.225.0/24 maxlen: 24
14.1.226.0/24 maxlen: 24
14.1.227.0/24 maxlen: 24
14.1.240.0/24 maxlen: 24
14.1.241.0/24 maxlen: 24
14.1.242.0/24 maxlen: 24
14.1.243.0/24 maxlen: 24
14.1.244.0/24 maxlen: 24
14.1.245.0/24 maxlen: 24
14.1.246.0/24 maxlen: 24
14.1.247.0/24 maxlen: 24
14.1.248.0/24 maxlen: 24
14.1.249.0/24 maxlen: 24
14.1.250.0/24 maxlen: 24
14.1.251.0/24 maxlen: 24
14.1.252.0/24 maxlen: 24
14.1.253.0/24 maxlen: 24
14.1.254.0/24 maxlen: 24
14.1.255.0/24 maxlen: 24
103.1.68.0/22 maxlen: 22
103.1.68.0/24 maxlen: 24
103.1.69.0/24 maxlen: 24
103.1.70.0/24 maxlen: 24
103.1.71.0/24 maxlen: 24
103.229.56.0/24 maxlen: 24
103.229.57.0/24 maxlen: 24
103.229.58.0/24 maxlen: 24
103.229.59.0/24 maxlen: 24
124.195.132.0/24 maxlen: 24
124.195.137.0/24 maxlen: 24
163.47.192.0/22 maxlen: 24
183.78.0.0/17 maxlen: 17
183.78.0.0/18 maxlen: 18
183.78.0.0/24 maxlen: 24
183.78.1.0/24 maxlen: 24
183.78.2.0/24 maxlen: 24
183.78.3.0/24 maxlen: 24
183.78.4.0/24 maxlen: 24
183.78.9.0/24 maxlen: 24
183.78.10.0/23 maxlen: 23
183.78.10.0/24 maxlen: 24
183.78.12.0/24 maxlen: 24
183.78.14.0/24 maxlen: 24
183.78.44.0/24 maxlen: 24
183.78.45.0/24 maxlen: 24
183.78.46.0/24 maxlen: 24
183.78.47.0/24 maxlen: 24
183.78.51.0/24 maxlen: 24
183.78.52.0/24 maxlen: 24
183.78.53.0/24 maxlen: 24
183.78.54.0/24 maxlen: 24
183.78.55.0/24 maxlen: 24
183.78.56.0/24 maxlen: 24
183.78.57.0/24 maxlen: 24
183.78.58.0/24 maxlen: 24
183.78.59.0/24 maxlen: 24
183.78.60.0/24 maxlen: 24
183.78.61.0/24 maxlen: 24
183.78.62.0/24 maxlen: 24
183.78.63.0/24 maxlen: 24
183.78.64.0/19 maxlen: 19
183.78.80.0/24 maxlen: 24
183.78.81.0/24 maxlen: 24
183.78.82.0/24 maxlen: 24
183.78.83.0/24 maxlen: 24
183.78.84.0/24 maxlen: 24
183.78.85.0/24 maxlen: 24
183.78.86.0/24 maxlen: 24
183.78.87.0/24 maxlen: 24
183.78.88.0/24 maxlen: 24
183.78.89.0/24 maxlen: 24
183.78.90.0/24 maxlen: 24
183.78.91.0/24 maxlen: 24
183.78.92.0/24 maxlen: 24
183.78.93.0/24 maxlen: 24
183.78.94.0/24 maxlen: 24
183.78.95.0/24 maxlen: 24
183.78.96.0/19 maxlen: 19
183.78.112.0/24 maxlen: 24
183.78.113.0/24 maxlen: 24
183.78.114.0/24 maxlen: 24
183.78.115.0/24 maxlen: 24
183.78.116.0/24 maxlen: 24
183.78.117.0/24 maxlen: 24
183.78.118.0/24 maxlen: 24
183.78.119.0/24 maxlen: 24
183.78.120.0/24 maxlen: 24
183.78.121.0/24 maxlen: 24
183.78.122.0/24 maxlen: 24
183.78.123.0/24 maxlen: 24
183.78.124.0/24 maxlen: 24
183.78.125.0/24 maxlen: 24
183.78.126.0/24 maxlen: 24
183.78.127.0/24 maxlen: 24
202.56.80.0/20 maxlen: 22
202.56.80.0/21 maxlen: 24
202.56.88.0/22 maxlen: 24
202.56.92.0/23 maxlen: 24
202.56.94.0/24 maxlen: 24
202.56.95.0/24 maxlen: 24
203.158.25.0/24 maxlen: 24
203.158.26.0/24 maxlen: 24
203.158.27.0/24 maxlen: 24
203.158.29.0/24 maxlen: 24
203.158.30.0/24 maxlen: 24
203.158.31.0/24 maxlen: 24
2402:b400::/32 maxlen: 32
2402:b400:1000::/44 maxlen: 44
2402:b400:1010::/44 maxlen: 44
2402:b400:1020::/44 maxlen: 44
2402:b400:1030::/44 maxlen: 44
2402:b400:4080::/44 maxlen: 44
2402:b400:4088::/48 maxlen: 48
2402:b400:4089::/48 maxlen: 48
2402:b400:408a::/48 maxlen: 48
2402:b400:408b::/48 maxlen: 48
2402:b400:408c::/48 maxlen: 48
2402:b400:408d::/48 maxlen: 48
2402:b400:408e::/48 maxlen: 48
2402:b400:408f::/48 maxlen: 48
2402:b400:4090::/44 maxlen: 44
2402:b400:40c0::/44 maxlen: 44
2402:b400:40c8::/48 maxlen: 48
2402:b400:40c9::/48 maxlen: 48
2402:b400:40ca::/48 maxlen: 48
2402:b400:40cb::/48 maxlen: 48
2402:b400:40cc::/48 maxlen: 48
2402:b400:40cd::/48 maxlen: 48
2402:b400:40ce::/48 maxlen: 48
2402:b400:40cf::/48 maxlen: 48
2402:b400:40d0::/44 maxlen: 44
2402:b400:4100::/44 maxlen: 44
2402:b400:4110::/44 maxlen: 44
2402:b400:4120::/44 maxlen: 44
2402:b400:4140::/44 maxlen: 44
2402:b400:4150::/44 maxlen: 44
2402:b400:4160::/44 maxlen: 44
2402:b400:4180::/44 maxlen: 44
2402:b400:4180::/45 maxlen: 45
2402:b400:4190::/44 maxlen: 44
2402:b400:41a0::/44 maxlen: 44
2402:b400:41a2::/48 maxlen: 48
2402:b400:41c0::/44 maxlen: 44
2402:b400:41c0::/45 maxlen: 45
2402:b400:41d0::/44 maxlen: 44
2402:b400:41e0::/44 maxlen: 44
2402:b400:41e2::/48 maxlen: 48
2402:b400:41e3::/48 maxlen: 48
2402:b400:4400::/45 maxlen: 45
2402:b400:4420::/45 maxlen: 45
2402:b400:4440::/46 maxlen: 46
2402:b400:4444::/46 maxlen: 46
2402:b400:4448::/46 maxlen: 46
2402:b400:444c::/46 maxlen: 46
2402:b400:4460::/46 maxlen: 46
2402:b400:4464::/46 maxlen: 46
2402:b400:4468::/46 maxlen: 46
2402:b400:446c::/46 maxlen: 46
2402:b400:4500::/48 maxlen: 48
2402:b400:4501::/48 maxlen: 48
2402:b400:4502::/48 maxlen: 48
2402:b400:4503::/48 maxlen: 48
2402:b400:4600::/45 maxlen: 45
2402:b400:4620::/45 maxlen: 45
2402:b400:4640::/46 maxlen: 46
2402:b400:4644::/46 maxlen: 46
2402:b400:4648::/46 maxlen: 46
2402:b400:464c::/46 maxlen: 46
2402:b400:4660::/46 maxlen: 46
2402:b400:4664::/46 maxlen: 46
2402:b400:4668::/46 maxlen: 46
2402:b400:466c::/46 maxlen: 46
2402:b400:4700::/48 maxlen: 48
2402:b400:4701::/48 maxlen: 48
2402:b400:4702::/48 maxlen: 48
2402:b400:4703::/48 maxlen: 48
2406:6000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13481 (0x34a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Validity
Not Before: Aug 20 08:31:09 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66c4544d-fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:d6:0d:25:a5:0a:d0:30:21:b3:9f:f6:9b:
c7:2c:f8:8d:f3:03:6b:3d:a3:6b:2d:06:ef:a8:e1:
18:14:cf:44:75:e7:29:3a:bf:cb:cc:f4:8a:9f:21:
a0:a9:00:8b:a5:a0:e0:fa:6f:3f:97:ae:81:8b:a4:
14:4b:a2:3d:ab:ec:79:1b:17:01:9e:fc:96:31:96:
36:08:76:d9:fc:f2:86:01:f5:df:80:1a:2b:a9:71:
30:6b:11:b1:8d:7d:f6:52:63:e7:54:f1:27:a2:be:
2b:3e:fb:d5:ac:fd:0e:4d:98:e3:9d:7e:e3:1a:d4:
41:97:81:76:ca:c7:0b:a3:54:a8:ba:a3:78:d8:01:
61:ec:25:d0:39:8e:fe:84:f5:8c:91:ad:ff:e6:df:
43:d9:1d:03:9b:de:b2:e6:8c:0f:86:e1:ce:86:5d:
b3:b8:98:25:45:3b:4a:79:a4:d2:29:bf:e5:f6:85:
5a:78:a5:44:82:17:5a:53:cf:93:8c:fe:31:3d:0d:
81:a3:80:22:38:9b:1f:80:85:1e:af:49:77:91:97:
fa:aa:11:45:2c:0d:a6:74:af:e0:1c:78:32:72:a0:
08:32:33:16:f9:6b:37:1f:9d:d0:38:fe:4c:37:52:
b3:f6:f5:25:8a:98:a6:52:14:8a:c7:4d:7a:69:fd:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:B5:97:FA:A9:C8:D1:48:0D:F1:3E:81:57:D6:E3:FD:4E:D0:4F
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/8D02490E5ECE11EFA8CAB757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.128.0/17
103.1.68.0/22
103.229.56.0/22
124.195.132.0/24
124.195.137.0/24
163.47.192.0/22
183.78.0.0/17
202.56.80.0/20
203.158.25.0-203.158.27.255
203.158.29.0-203.158.31.255
IPv6:
2402:b400::/32
2406:6000::/32
Signature Algorithm: sha256WithRSAEncryption
59:c3:19:1d:47:99:aa:aa:de:68:9b:d1:21:3e:11:b1:55:02:
3f:a5:cd:8a:da:89:8b:39:1e:00:2b:58:a8:a1:16:c8:58:22:
ab:1c:f6:c4:83:77:e8:21:86:84:38:6a:00:a6:45:a2:9b:dd:
0f:6b:ae:cf:aa:d6:3a:c5:41:af:c3:91:6d:e8:a2:ca:29:6d:
3b:8b:d7:7a:77:af:9d:20:c5:43:07:73:ff:3b:a5:7c:13:4e:
de:90:28:b2:4f:75:30:2f:c1:c1:e3:c8:45:a3:87:4b:46:c6:
76:e5:9e:9f:e7:67:81:2d:57:5b:a1:a1:43:f8:5e:cf:2c:75:
b0:c8:a8:63:ef:36:a4:54:38:99:7d:53:ed:05:17:8d:6d:9e:
db:09:d0:7d:0e:9f:a9:58:58:57:34:6b:57:59:96:ee:7e:90:
26:8d:22:81:ee:33:f2:bc:03:86:18:68:f3:34:5d:db:70:ea:
b2:10:c0:b4:e0:a5:c9:50:f9:48:0f:f6:26:ca:2c:02:71:e9:
8b:7f:4a:e9:b8:36:64:e7:89:13:2a:bf:d5:a4:18:f5:1b:c5:
eb:63:cf:fb:0c:f9:2f:52:a5:90:4e:6a:36:43:a9:99:b8:e5:
4d:98:c6:97:38:7b:b5:10:06:c5:cd:91:8d:ab:55:e7:a7:f3:
59:cc:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:00:42 2025 by rpki-client