Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/8D7B467A09C211EB8B759828C4F9AE02.roa
File: 8D7B467A09C211EB8B759828C4F9AE02.roa (raw, json)
Hash identifier: QVriqoD2qjw2rMECeREJ4WsqIRTkpJUqR7hdD0m8lcE=
Subject key identifier: 33:4A:6A:3A:2E:1C:B6:C9:DA:55:D9:58:43:A3:21:EB:64:14:76:75
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 26F6
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/8D7B467A09C211EB8B759828C4F9AE02.roa
Signing time: Wed 26 Mar 2025 08:26:11 +0000
ROA not before: Wed 26 Mar 2025 08:26:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 17970
IP address blocks: 43.255.216.0/22 maxlen: 22
61.9.0.0/17 maxlen: 17
61.9.0.0/19 maxlen: 19
61.9.32.0/19 maxlen: 19
61.9.80.0/21 maxlen: 21
61.9.96.0/19 maxlen: 19
61.9.96.0/22 maxlen: 22
61.9.111.0/24 maxlen: 24
61.14.192.0/21 maxlen: 24
103.239.200.0/22 maxlen: 22
202.81.160.0/20 maxlen: 20
202.81.160.0/22 maxlen: 22
202.81.164.0/22 maxlen: 22
202.81.168.0/22 maxlen: 22
202.81.172.0/22 maxlen: 22
202.81.173.0/24 maxlen: 24
202.81.174.0/24 maxlen: 24
203.76.192.0/20 maxlen: 20
203.76.192.0/22 maxlen: 22
203.76.195.0/24 maxlen: 24
203.76.196.0/22 maxlen: 22
203.76.196.0/24 maxlen: 24
203.76.200.0/22 maxlen: 22
203.76.204.0/22 maxlen: 22
219.90.80.0/20 maxlen: 20
219.90.80.0/22 maxlen: 22
219.90.84.0/22 maxlen: 22
219.90.84.0/24 maxlen: 24
219.90.86.0/24 maxlen: 24
219.90.87.0/24 maxlen: 24
219.90.88.0/22 maxlen: 22
219.90.90.0/24 maxlen: 24
219.90.91.0/24 maxlen: 24
219.90.92.0/22 maxlen: 22
219.90.92.0/24 maxlen: 24
2405:f400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9974 (0x26f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD
Validity
Not Before: Mar 26 08:26:11 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67e3ba22-a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:41:4b:79:5b:75:04:7b:ec:db:fc:ab:0c:
f9:4f:0e:d0:ad:c4:8b:52:d7:42:0b:ce:3d:03:80:
a2:7a:b6:78:de:db:e2:3a:4c:f4:6d:4d:f4:52:40:
7b:44:74:43:61:a3:9b:96:91:84:4c:b4:6a:bc:1b:
4c:9b:5a:66:d0:6b:c8:db:55:df:61:10:ce:56:3c:
d1:68:99:0c:65:f5:7f:36:32:b1:79:d0:97:3f:a4:
90:0c:6b:a8:d2:14:3f:70:f5:cb:c3:01:ca:d4:59:
28:df:04:5f:42:79:2e:35:e4:d1:3c:9b:f1:a6:a7:
96:20:6b:02:06:28:04:cf:73:3a:10:3a:f7:ad:68:
c1:50:c9:4f:53:a2:17:ac:39:d2:b2:5d:0d:51:6f:
51:33:f1:b8:da:71:41:e7:9e:53:b6:b2:4b:3f:b5:
21:f3:d8:2d:e2:10:af:b7:39:4e:fe:89:0e:68:d6:
de:33:4c:9b:35:f7:d4:0e:78:d8:5a:44:29:41:f5:
b4:e6:50:91:8a:e1:82:33:47:70:3a:e2:64:8c:cd:
66:a8:23:03:45:1b:bd:8d:d9:61:1a:9e:52:83:72:
a8:8e:8c:74:fc:82:8f:84:c1:d1:1a:26:2f:64:2c:
f9:e6:0c:5e:a7:3f:3b:64:1e:a9:d0:fb:9e:1a:19:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:6A:3A:2E:1C:B6:C9:DA:55:D9:58:43:A3:21:EB:64:14:76:75
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/8D7B467A09C211EB8B759828C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.216.0/22
61.9.0.0/17
61.14.192.0/21
103.239.200.0/22
202.81.160.0/20
203.76.192.0/20
219.90.80.0/20
IPv6:
2405:f400::/32
Signature Algorithm: sha256WithRSAEncryption
82:3c:59:f3:3b:1d:33:ac:73:c9:8e:b9:b3:d5:92:d4:28:43:
c0:47:c4:05:6e:d5:68:09:99:2a:1a:fb:07:44:b4:b5:10:54:
c8:6e:48:d0:a4:e8:c7:0b:8a:e3:7d:35:72:7f:c8:94:ba:8b:
07:f2:3b:37:f9:90:89:fc:27:e9:02:a5:9c:a6:76:c5:82:ed:
c7:08:e8:46:07:b0:40:c0:67:9a:2f:c9:b5:e0:79:37:34:31:
35:1c:49:3b:7a:ce:83:36:e4:9a:d8:68:8d:dd:30:63:ab:5b:
47:3d:5f:a4:63:e4:b5:6e:77:52:b8:34:8a:2c:37:51:7a:6e:
b3:c9:07:2a:99:f2:d3:60:c0:f4:b2:d4:31:98:5c:1b:67:dd:
f8:6a:e9:b8:44:d3:2f:06:ae:55:a0:de:4e:07:ba:e7:75:06:
62:54:44:b5:09:b8:2a:0c:1c:7c:5e:49:f5:93:8d:69:24:8c:
47:64:11:6c:7e:bd:42:d3:2f:59:7a:e2:a2:08:c6:15:32:d9:
c7:3f:dd:eb:1a:d5:5b:ba:54:cd:cc:5e:6a:34:c4:83:f1:6e:
5f:7f:60:51:f6:9b:e8:7d:f4:9d:41:a7:e7:c0:12:d7:cc:63:
27:3f:1e:f8:9b:a8:d0:ca:2e:c8:b4:03:6b:82:af:03:7b:de:
5e:d1:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:42:10 2025 by rpki-client