Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
File: F879A552A6E111EDB4B73118C4F9AE02.roa (raw, json)
Hash identifier: xjLm2wOYvZe3byOlPj7p2J1mbfI8eG99emBGdaLqk+A=
Subject key identifier: 1D:DA:20:E8:1D:36:9E:8E:D2:2F:27:6C:85:4F:10:F6:46:D8:8B:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 647B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
Signing time: Tue 07 Feb 2023 12:21:38 +0000
ROA not before: Tue 07 Feb 2023 12:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55824
IP address blocks: 45.118.48.0/21 maxlen: 21
45.118.48.0/22 maxlen: 24
45.118.52.0/22 maxlen: 24
45.118.96.0/22 maxlen: 24
45.118.100.0/22 maxlen: 24
45.118.168.0/22 maxlen: 24
45.118.172.0/22 maxlen: 24
45.118.192.0/22 maxlen: 24
45.118.196.0/22 maxlen: 24
45.118.208.0/22 maxlen: 24
45.118.212.0/22 maxlen: 24
45.119.16.0/22 maxlen: 24
45.119.20.0/22 maxlen: 24
45.119.32.0/22 maxlen: 24
45.119.36.0/22 maxlen: 24
45.119.168.0/22 maxlen: 24
45.119.172.0/22 maxlen: 24
45.124.184.0/22 maxlen: 24
45.124.188.0/22 maxlen: 24
45.125.144.0/22 maxlen: 24
45.125.148.0/22 maxlen: 24
45.125.176.0/22 maxlen: 24
45.125.180.0/22 maxlen: 24
45.127.64.0/24 maxlen: 24
45.127.65.0/24 maxlen: 24
45.127.66.0/24 maxlen: 24
45.127.67.0/24 maxlen: 24
45.127.68.0/24 maxlen: 24
45.127.69.0/24 maxlen: 24
45.127.70.0/24 maxlen: 24
45.127.71.0/24 maxlen: 24
45.127.72.0/24 maxlen: 24
45.127.73.0/24 maxlen: 24
45.127.74.0/24 maxlen: 24
45.127.75.0/24 maxlen: 24
45.127.76.0/24 maxlen: 24
45.127.77.0/24 maxlen: 24
103.58.80.0/22 maxlen: 24
103.58.84.0/22 maxlen: 24
103.58.120.0/22 maxlen: 23
103.58.120.0/24 maxlen: 24
103.58.122.0/23 maxlen: 24
103.58.124.0/22 maxlen: 24
103.58.168.0/22 maxlen: 24
103.58.172.0/22 maxlen: 24
103.58.200.0/22 maxlen: 24
103.58.204.0/22 maxlen: 24
103.58.240.0/22 maxlen: 24
103.58.244.0/22 maxlen: 24
103.59.16.0/22 maxlen: 24
103.59.20.0/22 maxlen: 24
103.59.66.0/24 maxlen: 24
103.59.80.0/22 maxlen: 24
103.59.84.0/22 maxlen: 24
103.59.224.0/22 maxlen: 24
103.59.228.0/22 maxlen: 24
103.60.48.0/22 maxlen: 24
103.60.52.0/22 maxlen: 24
103.68.177.0/24 maxlen: 24
103.194.24.0/24 maxlen: 24
103.194.28.0/22 maxlen: 24
103.194.56.0/22 maxlen: 24
103.194.60.0/22 maxlen: 24
103.194.136.0/22 maxlen: 24
103.194.140.0/22 maxlen: 24
103.194.200.0/22 maxlen: 24
103.194.204.0/22 maxlen: 24
103.194.216.0/22 maxlen: 24
103.194.220.0/22 maxlen: 24
103.213.16.0/22 maxlen: 24
103.213.20.0/22 maxlen: 24
103.218.144.0/22 maxlen: 24
103.218.148.0/22 maxlen: 24
220.156.190.0/23 maxlen: 24
2001:df3:1e00::/48 maxlen: 48
2406:f00:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25723 (0x647b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 7 12:21:38 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e24252-83ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:79:1b:76:ad:a7:1e:52:c0:61:cf:fc:80:
6f:6e:a7:62:a0:68:ca:2f:0b:d0:28:30:95:c5:ec:
15:70:59:d8:6e:99:95:95:b2:3b:6a:be:96:2a:af:
30:aa:53:94:d5:87:54:03:55:f9:92:a5:8c:1d:3f:
c8:ce:b5:f6:82:6e:39:9e:b4:10:ca:0e:b6:19:0e:
13:7b:d1:8f:1a:8c:a9:36:a3:a3:9c:74:56:72:17:
0f:62:a1:c6:5b:91:11:54:fd:ff:7e:14:d9:83:d9:
fb:60:17:68:b7:91:6d:8d:04:8b:23:a8:16:32:ad:
dd:4a:49:4f:00:a4:c0:a5:5d:ea:65:1d:06:86:00:
78:09:45:ab:81:42:31:67:84:2c:69:92:63:fd:a6:
41:c0:fe:a2:e7:12:6b:42:47:ef:9e:a5:a3:50:84:
f5:af:b2:b8:1b:57:c8:1f:87:32:da:a5:ed:e0:ac:
11:ee:96:66:d5:aa:09:66:00:45:4b:84:e3:58:c1:
af:68:d2:02:41:e4:15:5b:f5:43:e2:55:77:0e:da:
8e:91:2b:0f:e1:92:5b:0c:ac:f1:1a:da:31:34:96:
62:a3:0b:d1:6e:6d:cf:0b:97:ad:c4:74:bc:e8:20:
a5:29:2f:ce:ed:9d:58:11:ea:4f:d7:8c:52:49:60:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:20:E8:1D:36:9E:8E:D2:2F:27:6C:85:4F:10:F6:46:D8:8B:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F879A552A6E111EDB4B73118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.48.0/21
45.118.96.0/21
45.118.168.0/21
45.118.192.0/21
45.118.208.0/21
45.119.16.0/21
45.119.32.0/21
45.119.168.0/21
45.124.184.0/21
45.125.144.0/21
45.125.176.0/21
45.127.64.0-45.127.77.255
103.58.80.0/21
103.58.120.0/21
103.58.168.0/21
103.58.200.0/21
103.58.240.0/21
103.59.16.0/21
103.59.66.0/24
103.59.80.0/21
103.59.224.0/21
103.60.48.0/21
103.68.177.0/24
103.194.24.0/24
103.194.28.0/22
103.194.56.0/21
103.194.136.0/21
103.194.200.0/21
103.194.216.0/21
103.213.16.0/21
103.218.144.0/21
220.156.190.0/23
IPv6:
2001:df3:1e00::/48
2406:f00:3::/48
Signature Algorithm: sha256WithRSAEncryption
4b:68:7e:14:7e:1d:5c:e7:28:d0:98:4c:c9:eb:18:59:f0:50:
26:f2:17:91:76:74:25:57:52:a3:f2:cb:42:24:34:8b:8d:7c:
0a:4a:e2:b4:b6:03:df:f0:17:13:c8:3e:a4:f0:bc:d9:81:ed:
03:19:85:b7:b9:0a:43:11:8b:bd:c1:cd:c7:bc:4e:3e:b7:05:
10:0a:ce:ae:88:18:11:69:99:3c:91:72:da:e2:48:9c:76:3a:
14:ef:2a:8f:e7:2c:63:e2:fe:e9:9c:16:62:4e:2e:c1:ab:cd:
dc:c6:bf:7b:cb:0e:4d:a8:06:0e:ba:89:1f:64:a0:1c:5b:4d:
f2:9f:55:72:e9:59:b3:5b:49:41:b6:5c:04:1b:54:00:8f:6b:
4f:1f:3d:16:29:ab:d4:31:5e:8a:4f:16:d2:4e:3a:04:aa:22:
9f:7a:4d:ec:3f:a2:e7:3d:a6:e6:54:5f:b3:95:c8:c9:12:2d:
f7:4c:53:c8:41:d6:55:98:97:40:1b:00:66:49:db:b9:ed:71:
d0:46:60:de:de:8b:3a:c3:a0:53:f5:fe:0c:82:47:85:ef:12:
9d:ed:ab:c4:f2:97:36:08:62:11:08:e6:aa:8a:f9:9a:c0:05:
82:3e:1b:d9:19:d9:a0:88:e8:47:bf:a9:2e:d0:e0:9b:b6:ed:
69:15:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:34:39 2025 by rpki-client