Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CE39B7369C5611ED8BEB691DC4F9AE02.roa
File: CE39B7369C5611ED8BEB691DC4F9AE02.roa (raw, json)
Hash identifier: 1aQizN7awdsaJ/FvDxRWR7vlsiLDqczQVM2vIJ7f1yc=
Subject key identifier: 9C:73:06:42:36:0E:2A:42:93:8D:E4:05:46:5E:3C:09:C2:31:6F:BA
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 338E
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CE39B7369C5611ED8BEB691DC4F9AE02.roa
Signing time: Wed 25 Jan 2023 02:20:16 +0000
ROA not before: Wed 25 Jan 2023 02:20:16 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 9506
IP address blocks: 14.100.0.0/17 maxlen: 17
42.60.0.0/16 maxlen: 17
42.61.128.0/17 maxlen: 17
42.61.129.0/24 maxlen: 24
42.61.130.0/23 maxlen: 23
42.61.132.0/22 maxlen: 22
42.61.136.0/21 maxlen: 21
42.61.144.0/20 maxlen: 20
42.61.160.0/21 maxlen: 21
42.61.168.0/21 maxlen: 21
42.61.176.0/21 maxlen: 21
42.61.176.0/23 maxlen: 23
42.61.176.0/24 maxlen: 24
42.61.184.0/22 maxlen: 22
42.61.188.0/22 maxlen: 22
42.61.192.0/20 maxlen: 20
42.61.208.0/22 maxlen: 22
42.61.212.0/22 maxlen: 22
42.61.216.0/21 maxlen: 21
42.61.224.0/20 maxlen: 20
42.61.228.0/23 maxlen: 23
42.61.240.0/22 maxlen: 22
42.61.244.0/22 maxlen: 22
42.61.248.0/22 maxlen: 22
42.61.252.0/22 maxlen: 22
101.78.64.0/18 maxlen: 18
115.66.0.0/16 maxlen: 17
115.66.33.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 16
116.14.0.0/17 maxlen: 17
116.14.128.0/17 maxlen: 17
116.15.0.0/16 maxlen: 16
116.15.2.0/23 maxlen: 24
116.15.4.0/22 maxlen: 24
116.15.8.0/21 maxlen: 21
116.15.8.0/22 maxlen: 22
116.15.8.0/23 maxlen: 24
116.15.15.0/24 maxlen: 24
116.15.16.0/20 maxlen: 24
116.15.32.0/19 maxlen: 24
116.15.64.0/18 maxlen: 19
116.15.64.0/19 maxlen: 24
116.15.96.0/20 maxlen: 20
116.15.96.0/21 maxlen: 21
116.15.96.0/22 maxlen: 24
116.15.100.0/24 maxlen: 24
116.15.101.0/24 maxlen: 24
116.15.102.0/23 maxlen: 23
116.15.104.0/24 maxlen: 24
116.15.105.0/24 maxlen: 24
116.15.106.0/24 maxlen: 24
116.15.107.0/24 maxlen: 24
116.15.108.0/23 maxlen: 23
116.15.108.0/24 maxlen: 24
116.15.110.0/24 maxlen: 24
116.15.111.0/24 maxlen: 24
116.15.112.0/21 maxlen: 21
116.15.120.0/22 maxlen: 22
116.15.124.0/23 maxlen: 23
116.15.126.0/23 maxlen: 23
116.15.128.0/23 maxlen: 23
116.15.130.0/23 maxlen: 23
116.15.132.0/23 maxlen: 23
116.15.134.0/23 maxlen: 23
116.15.136.0/22 maxlen: 22
116.15.140.0/23 maxlen: 24
116.15.142.0/23 maxlen: 24
116.15.144.0/20 maxlen: 24
116.15.160.0/19 maxlen: 24
116.15.192.0/18 maxlen: 24
118.200.0.0/16 maxlen: 16
118.201.192.0/18 maxlen: 18
118.201.224.0/19 maxlen: 19
119.74.0.0/16 maxlen: 16
119.74.226.0/24 maxlen: 24
119.74.232.0/22 maxlen: 22
121.6.0.0/16 maxlen: 16
121.6.0.0/17 maxlen: 17
121.6.128.0/17 maxlen: 17
121.7.0.0/16 maxlen: 16
121.7.0.0/17 maxlen: 17
121.7.128.0/17 maxlen: 17
180.255.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 16
219.74.0.0/17 maxlen: 17
219.74.128.0/17 maxlen: 17
219.74.211.0/24 maxlen: 24
219.75.0.0/17 maxlen: 17
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 17
220.255.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13198 (0x338e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Jan 25 02:20:16 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63d091e0-044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:8a:a5:ed:5d:bd:ed:29:41:71:8d:a3:ca:b0:
f4:8b:9e:1e:b6:b4:28:5d:ae:f4:0b:28:00:c5:4f:
3e:35:58:5c:1d:31:97:fa:dc:bf:09:c2:c9:a4:ac:
1c:1a:1b:06:cb:f3:33:b9:a0:2a:57:ff:8c:e3:fd:
f3:16:e9:98:78:ce:d9:34:0f:84:fb:39:2c:5f:aa:
14:66:e7:07:71:ce:85:2d:9d:24:b3:3d:c0:7c:b3:
bd:c9:bb:1f:d1:e4:55:1e:06:05:76:5b:56:ea:31:
0b:07:b6:40:e9:b9:17:ad:f2:d5:47:8f:36:1e:34:
b2:21:88:6f:7e:30:53:2b:92:4b:ce:fc:05:37:94:
c6:17:89:a7:c0:81:3d:48:23:44:d1:55:ee:7d:c9:
36:69:e6:73:2d:3f:eb:34:27:05:37:76:23:0e:a4:
45:0a:8c:86:40:0b:03:76:61:b2:7e:82:74:a9:89:
42:13:9c:ef:76:dc:c6:3d:8e:11:90:0e:5c:ac:92:
7a:04:4c:31:e2:c7:ef:e5:58:94:6e:f7:37:c8:d5:
5f:cb:51:57:19:99:9b:a3:ba:3b:29:74:c4:f6:63:
5a:f6:48:e4:a7:66:3b:f3:09:cf:41:9d:76:d4:da:
59:2c:e0:b2:82:32:9c:c2:63:36:b5:1d:ad:67:62:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:06:42:36:0E:2A:42:93:8D:E4:05:46:5E:3C:09:C2:31:6F:BA
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CE39B7369C5611ED8BEB691DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/16
42.61.128.0/17
101.78.64.0/18
115.66.0.0/16
116.14.0.0/15
118.200.0.0/16
118.201.192.0/18
119.74.0.0/16
121.6.0.0/15
180.255.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/21
220.255.16.0-220.255.255.255
Signature Algorithm: sha256WithRSAEncryption
9c:6b:89:bb:bc:14:b8:2f:d2:b5:03:4e:ab:d8:1c:70:a7:40:
62:48:f9:84:76:51:26:2b:f8:60:88:f8:7b:8f:48:3b:9f:4c:
6b:14:80:b6:85:9f:b4:69:b2:92:38:64:b8:21:19:c5:68:54:
8c:a1:2d:f4:f1:31:e9:5d:5d:af:e9:40:41:f1:c7:25:de:e9:
c1:dd:1b:ce:f7:db:9f:d5:ef:3c:8c:a2:4e:a3:b4:39:ca:b7:
f3:1c:f8:a2:92:1c:5c:4c:34:69:4c:1a:4f:60:1e:ed:a2:4f:
c1:92:69:70:8b:37:e8:ff:c2:39:8c:b9:f4:7d:50:69:85:13:
e2:70:c9:4c:e2:5b:ff:b3:5b:76:4d:9d:7b:21:f4:79:ce:e0:
71:fa:f5:e8:25:a0:a8:e3:77:1f:ab:58:cb:ba:59:41:0f:87:
10:fe:db:57:ef:2a:26:10:58:d5:d8:40:c4:1a:2c:32:71:7d:
55:63:6d:51:d7:67:33:9a:55:8c:1d:ae:59:08:93:fc:2a:3f:
80:a5:28:99:6c:fe:4a:7c:62:8e:e7:a7:fe:c1:6d:11:e6:2e:
75:75:d9:e9:69:f3:1e:83:a9:02:53:59:90:f3:49:1f:5c:e1:
10:52:58:7b:a6:1f:79:02:d4:90:51:d2:fc:6d:93:70:ae:22:
a0:dc:85:8e
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgICM44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0
MkI1MDUxQ0UwHhcNMjMwMTI1MDIyMDE2WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2QwOTFlMC0wNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/oql7V297SlBcY2jyrD0i54etrQoXa70CygAxU8+NVhcHTGX+ty/CcLJpKwc
GhsGy/MzuaAqV/+M4/3zFumYeM7ZNA+E+zksX6oUZucHcc6FLZ0ksz3AfLO9ybsf
0eRVHgYFdltW6jELB7ZA6bkXrfLVR482HjSyIYhvfjBTK5JLzvwFN5TGF4mnwIE9
SCNE0VXufck2aeZzLT/rNCcFN3YjDqRFCoyGQAsDdmGyfoJ0qYlCE5zvdtzGPY4R
kA5crJJ6BEwx4sfv5ViUbvc3yNVfy1FXGZmbo7o7KXTE9mNa9kjkp2Y78wnPQZ12
1NpZLOCygjKcwmM2tR2tZ2JEOwIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFJxzBkI2
DipCk43kBUZePAnCMW+6MB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQ0UzOUI3MzY5
QzU2MTFFRDhCRUI2OTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdAYIKwYBBQUHAQcBAf8E
ZTBjMGEEAgABMFsDBAcOZAADAwAqPAMEByo9gAMEBmVOQAMDAHNCAwMBdA4DAwB2
yAMEBnbJwAMDAHdKAwMBeQYDBAa0/0AwCwMDAdtKAwQH20sAAwQD3P8AMAoDBATc
/xADAgDcMA0GCSqGSIb3DQEBCwUAA4IBAQCca4m7vBS4L9K1A06r2Bxwp0BiSPmE
dlEmK/hgiPh7j0g7n0xrFIC2hZ+0abKSOGS4IRnFaFSMoS308THpXV2v6UBB8ccl
3unB3RvO99uf1e88jKJOo7Q5yrfzHPiikhxcTDRpTBpPYB7tok/Bkmlwizfo/8I5
jLn0fVBphRPicMlM4lv/s1t2TZ17IfR5zuBx+vXoJaCo43cfq1jLullBD4cQ/ttX
7yomEFjV2EDEGiwycX1VY21R12czmlWMHa5ZCJP8Kj+ApSiZbP5KfGKO56f+wW0R
5i51ddnpafMeg6kCU1mQ80kfXOEQUlh7ph95AtSQUdL8bZNwriKg3IWO
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:27 2023 by rpki-client on console.sobornost.net