Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F7D4BFB8DA5511ED85BAFC0FC4F9AE02.roa
File: F7D4BFB8DA5511ED85BAFC0FC4F9AE02.roa (raw, json)
Hash identifier: LcloTP3wpP7eixIfjP1yizeFQrTYT7hGHyXQrRi+o7U=
Subject key identifier: A1:08:4D:6E:AE:E7:AB:3A:57:4D:DC:70:2B:28:EE:CB:32:CF:A5:83
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3409
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F7D4BFB8DA5511ED85BAFC0FC4F9AE02.roa
Signing time: Thu 13 Apr 2023 23:50:29 +0000
ROA not before: Thu 13 Apr 2023 23:50:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 23
111.88.144.0/23 maxlen: 24
111.88.146.0/24 maxlen: 24
111.88.149.0/24 maxlen: 24
111.88.150.0/23 maxlen: 24
111.88.152.0/23 maxlen: 24
111.88.156.0/22 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/21 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 21
115.186.64.0/21 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/20 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13321 (0x3409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 13 23:50:29 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64389544-1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f5:9c:60:a7:2f:5e:b3:c8:00:36:33:e0:9a:
ea:ad:0b:93:99:74:f3:22:1c:d0:6b:b1:62:cd:a5:
3f:da:68:33:81:d7:3e:24:3c:3b:dd:fd:3b:84:e9:
63:30:40:ec:fe:b3:c5:02:94:ce:28:72:21:11:44:
c6:15:e5:06:89:7a:df:d1:26:30:09:14:9e:80:5a:
b9:ea:e2:6d:9a:1c:67:a1:10:ac:d5:a5:06:00:61:
77:f3:41:56:64:31:45:e6:0c:12:90:1b:f4:79:08:
23:a7:95:70:b6:c3:a4:c3:41:e7:ac:f0:aa:b7:14:
89:8f:2f:c7:36:56:03:91:51:e4:5a:67:46:7a:68:
ea:70:da:f2:30:05:30:a1:80:67:84:91:45:26:ff:
7a:ef:3f:db:b8:97:ce:32:84:da:72:04:85:b1:25:
9a:e0:76:78:0e:dc:b4:26:05:5b:de:ca:8d:47:93:
41:e8:5a:38:94:13:e8:e9:62:ac:4a:e4:8d:4e:95:
a8:92:ac:ff:29:d5:f5:c2:98:24:df:c1:b4:59:44:
41:28:2a:4f:e8:93:29:39:50:b7:8b:62:08:9d:35:
76:36:5c:c8:be:64:58:0f:11:a0:05:1f:d3:01:97:
ce:bd:af:7d:cc:e7:c5:44:ff:4e:32:d4:64:91:58:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:4D:6E:AE:E7:AB:3A:57:4D:DC:70:2B:28:EE:CB:32:CF:A5:83
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F7D4BFB8DA5511ED85BAFC0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0/21
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.13.0/24
117.102.29.0-117.102.31.255
203.81.216.0/24
203.81.219.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:dc:fc:09:23:aa:ab:46:0b:13:fc:b7:29:c6:09:6f:76:c8:
4c:7b:22:25:a9:10:e2:fc:51:9d:09:60:a9:88:85:1a:88:61:
10:6a:af:0e:06:b5:03:8c:a1:d7:0d:54:4e:5b:80:52:cf:69:
8d:df:ce:4a:4b:68:bb:84:06:5f:68:f0:94:7e:5e:5a:c9:df:
5b:ca:52:50:a1:71:a3:ff:fd:63:78:6f:4c:a1:32:2c:9c:59:
31:d5:9c:be:6c:8d:e1:73:e0:26:11:56:18:11:e2:1f:97:93:
53:5b:d2:83:89:60:88:a0:de:cb:5b:7e:43:6a:d4:b8:1f:5c:
8f:8a:74:99:c2:0a:0d:05:39:f5:4f:5d:48:90:69:61:0b:e0:
de:85:5f:8b:e8:44:08:17:a6:27:6e:7a:30:5c:23:78:d9:90:
04:16:6a:02:3c:f0:b9:79:56:d9:11:07:6e:c3:4e:72:e5:77:
29:b2:1f:25:e9:99:a5:0c:00:f0:0f:86:6f:7c:be:08:24:c5:
fe:20:ab:c0:02:bb:d2:76:c2:70:de:1d:0a:61:67:03:9b:80:
2d:85:74:7f:4d:4f:5d:5f:66:b6:00:8a:2a:e2:35:a0:83:05:
3a:7e:2e:ba:71:3a:db:14:6f:34:68:db:9b:1d:80:c9:35:97:
f6:0e:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:37:18 2025 by rpki-client