Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
File: 705761A8F1DC11EAA5889B0CC4F9AE02.roa (raw, json)
Hash identifier: PHbhw7SMS5hd5ItKGiZXWVyRmbScEnVZ1S4zSshhndU=
Subject key identifier: 95:37:11:69:09:57:0F:B6:D7:9A:DB:C6:04:8D:F5:5A:3C:C7:9C:AA
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 06C6
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
Signing time: Fri 03 Nov 2023 05:13:07 +0000
ROA not before: Fri 03 Nov 2023 05:13:07 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 3 05:13:07 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65448163-a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:39:b9:75:04:81:9c:39:e6:fe:9e:4f:08:
22:2a:5d:d9:2f:21:81:5e:e7:22:7e:d0:0b:91:bd:
b1:b8:28:10:e3:f8:18:ca:a6:f7:a1:33:13:b7:83:
3a:ad:4f:37:5d:b3:ce:70:d2:a1:15:0b:fd:95:d6:
49:77:49:70:73:71:01:53:ce:e3:48:fa:41:47:3c:
81:d9:c9:ba:89:db:51:8d:c0:d5:07:b7:0a:c9:cd:
f0:a7:42:6f:cb:5d:4b:40:d1:ac:47:21:d5:c0:5b:
0a:f1:a0:10:3e:37:f2:1c:9a:8e:09:7e:18:4f:47:
53:3b:07:b5:5f:83:13:34:69:b6:61:ae:e0:af:2d:
c3:87:0c:eb:91:a5:39:dd:a8:80:da:2e:7a:53:15:
56:89:82:27:cf:40:24:60:ca:ad:b3:0b:d0:b3:73:
5d:77:91:33:0c:47:82:5b:6b:69:a9:e4:f7:ef:a6:
47:dd:49:bf:b2:f0:21:19:1f:ae:92:b5:92:aa:de:
ca:ba:c3:a9:9c:67:df:4b:70:7a:59:cc:14:1a:d8:
f7:b3:4e:b7:41:b6:1c:b1:ae:29:14:17:45:04:1f:
1d:83:ac:2a:6b:a3:44:7f:f2:30:de:a6:68:d2:39:
8c:1c:93:3c:d0:3b:30:84:8c:3d:6b:7c:98:0d:7e:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:11:69:09:57:0F:B6:D7:9A:DB:C6:04:8D:F5:5A:3C:C7:9C:AA
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/705761A8F1DC11EAA5889B0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.129.124.0/22
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
34:9a:ab:01:b5:e6:86:50:88:2a:c1:9c:a8:43:bf:d7:9d:23:
e6:a1:03:a5:21:0e:25:e5:57:c7:ff:f6:44:78:9a:e6:b0:13:
ba:3c:e5:a1:76:c1:d4:39:06:07:c8:a1:a4:63:e6:8e:cc:62:
f6:91:25:dc:67:f6:55:0f:5f:d9:42:b4:ca:87:c4:1c:7f:0a:
5f:39:3b:b8:8e:25:c6:a6:0a:81:e4:5b:93:70:ea:5b:e2:54:
18:02:ce:ca:3c:07:a2:ea:7d:21:54:b2:b3:c3:fb:bd:6c:dd:
85:b0:6b:69:d5:41:a1:cc:c6:a5:d8:0c:5f:41:0b:5b:3e:bd:
0e:0a:54:70:d9:36:fa:a1:fb:5b:24:d3:ff:d6:45:f4:d9:9e:
0f:6a:63:d0:41:fb:c5:3a:4b:5a:08:c1:d3:eb:d2:80:fe:2e:
25:1e:17:82:ce:a9:bd:c2:eb:98:a8:f4:2f:e6:8c:68:c9:52:
91:0b:a8:3c:b9:31:a5:3f:c0:b0:2b:94:a4:ed:8a:78:67:1a:
e3:fb:91:3a:4f:fa:8a:16:c9:47:c9:dd:f7:8b:d1:92:5f:29:
90:2e:73:a3:96:0e:39:c7:cf:fa:56:33:8c:0a:f8:e7:c2:a0:
b6:11:52:7e:19:e6:22:12:74:46:83:1c:70:10:44:59:d8:0d:
cc:a5:cd:25
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjMxMTAzMDUxMzA3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ0ODE2My1hOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4w5uXUEgZw55v6eTwgiKl3ZLyGBXuciftALkb2xuCgQ4/gYyqb3oTMTt4M6
rU83XbPOcNKhFQv9ldZJd0lwc3EBU87jSPpBRzyB2cm6idtRjcDVB7cKyc3wp0Jv
y11LQNGsRyHVwFsK8aAQPjfyHJqOCX4YT0dTOwe1X4MTNGm2Ya7gry3DhwzrkaU5
3aiA2i56UxVWiYInz0AkYMqtswvQs3Ndd5EzDEeCW2tpqeT376ZH3Um/svAhGR+u
krWSqt7KusOpnGffS3B6WcwUGtj3s063QbYcsa4pFBdFBB8dg6wqa6NEf/Iw3qZo
0jmMHJM80DswhIw9a3yYDX4wqwIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFJU3EWkJ
Vw+215rbxgSN9Vo8x5yqMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvNzA1NzYxQThG
MURDMTFFQUE1ODg5QjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdAYIKwYBBQUHAQcBAf8E
ZTBjMD4EAgABMDgDBAMtdcgDBAItfqADBAJnGLwwDAMEAmc57AMEA2c58AMEAmdG
0AMEAmfhsAMEAmf0BAMEApaBfDAhBAIAAjAbMBADBQckBjyAAwcAJAY8gAAIAwcC
JAY8gAQAMA0GCSqGSIb3DQEBCwUAA4IBAQA0mqsBteaGUIgqwZyoQ7/XnSPmoQOl
IQ4l5VfH//ZEeJrmsBO6POWhdsHUOQYHyKGkY+aOzGL2kSXcZ/ZVD1/ZQrTKh8Qc
fwpfOTu4jiXGpgqB5FuTcOpb4lQYAs7KPAei6n0hVLKzw/u9bN2FsGtp1UGhzMal
2AxfQQtbPr0OClRw2Tb6oftbJNP/1kX02Z4PamPQQfvFOktaCMHT69KA/i4lHheC
zqm9wuuYqPQv5oxoyVKRC6g8uTGlP8CwK5Sk7Yp4Zxrj+5E6T/qKFslHyd33i9GS
XymQLnOjlg45x8/6VjOMCvjnwqC2EVJ+GeYiEnRGgxxwEERZ2A3Mpc0l
-----END CERTIFICATE-----
Generated at Mon May 12 16:02:51 2025 by rpki-client