Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/C6E81980E56211EFB47DC04AC4F9AE02.roa
File: C6E81980E56211EFB47DC04AC4F9AE02.roa (raw, json)
Hash identifier: VSgYF48h9d7xYj/WyMaWXMSjkvcmWezOLREmf93Kxxs=
Subject key identifier: 27:8D:76:04:3F:F6:82:C5:E2:EB:F5:09:10:48:24:49:7D:14:10:50
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: D4
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/C6E81980E56211EFB47DC04AC4F9AE02.roa
Signing time: Mon 03 Mar 2025 10:51:57 +0000
ROA not before: Mon 03 Mar 2025 10:51:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17466
IP address blocks: 58.2.0.0/20 maxlen: 20
58.2.16.0/20 maxlen: 20
58.2.16.0/21 maxlen: 21
58.2.16.0/22 maxlen: 22
58.2.20.0/22 maxlen: 22
58.2.32.0/19 maxlen: 19
58.2.128.0/19 maxlen: 19
58.2.192.0/19 maxlen: 19
58.2.224.0/21 maxlen: 21
58.2.232.0/22 maxlen: 22
58.2.240.0/20 maxlen: 20
119.43.0.0/17 maxlen: 17
119.43.128.0/18 maxlen: 18
119.43.192.0/21 maxlen: 21
119.43.205.0/24 maxlen: 24
119.43.206.0/23 maxlen: 23
119.43.208.0/20 maxlen: 20
119.43.224.0/19 maxlen: 19
124.4.0.0/19 maxlen: 19
124.4.32.0/21 maxlen: 21
124.4.40.0/22 maxlen: 22
124.4.44.0/24 maxlen: 24
124.4.45.0/24 maxlen: 24
124.4.46.0/23 maxlen: 23
124.4.48.0/20 maxlen: 20
124.4.64.0/18 maxlen: 18
124.4.120.0/23 maxlen: 23
124.4.122.0/23 maxlen: 23
124.4.122.0/24 maxlen: 24
124.4.123.0/24 maxlen: 24
124.4.128.0/18 maxlen: 18
124.4.192.0/21 maxlen: 21
124.4.204.0/22 maxlen: 22
124.4.208.0/20 maxlen: 20
124.4.252.0/22 maxlen: 22
182.94.0.0/17 maxlen: 17
182.94.128.0/18 maxlen: 18
182.94.192.0/19 maxlen: 19
182.94.224.0/21 maxlen: 21
182.94.232.0/22 maxlen: 22
182.94.240.0/24 maxlen: 24
182.94.241.0/24 maxlen: 24
182.94.242.0/23 maxlen: 23
182.94.244.0/22 maxlen: 22
182.94.248.0/21 maxlen: 21
182.95.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49
Validity
Not Before: Mar 3 10:51:57 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c589cd-d505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:14:24:58:36:e3:7c:7f:ae:45:21:2e:81:
02:c5:97:9b:4a:a9:93:ec:b8:9b:e3:cd:52:7a:9d:
75:eb:54:5c:b8:18:e4:cb:d7:4b:73:06:11:0c:13:
92:a5:93:3b:52:c3:f7:04:d7:66:b0:fd:e9:b2:1d:
2c:14:d4:a2:6b:d4:bc:e7:f8:b0:fc:6e:48:33:a7:
c3:8a:ea:5b:62:2a:f0:64:7b:86:36:b2:38:16:4b:
37:96:ba:ac:ba:96:4d:fb:70:fa:de:c6:c5:9a:93:
df:b8:91:33:a1:5c:e2:b2:26:10:ac:02:b0:6a:03:
46:97:0c:1e:ab:0f:f2:01:d2:41:f0:dc:87:07:d2:
80:50:2d:be:24:b3:27:97:82:ed:e4:30:77:05:ff:
c2:b4:a4:13:d3:c4:42:0b:bc:23:e9:3a:6b:65:01:
c2:81:04:02:e5:f1:c9:40:f0:5a:03:29:e8:b5:88:
64:ac:02:38:25:78:80:61:e1:54:1f:0e:96:9e:da:
51:a1:9c:7c:e0:ce:d4:78:19:bc:62:be:6c:bf:27:
e1:c6:f0:57:b8:2a:ea:bf:25:9d:63:a1:60:ab:f9:
a5:4a:fd:04:64:f1:67:ce:e6:34:eb:59:46:7a:2c:
f4:9c:fa:1d:01:04:4d:3e:77:a3:50:e6:04:0a:87:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:76:04:3F:F6:82:C5:E2:EB:F5:09:10:48:24:49:7D:14:10:50
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/C6E81980E56211EFB47DC04AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.2.0.0/18
58.2.128.0/19
58.2.192.0-58.2.235.255
58.2.240.0/20
119.43.0.0-119.43.199.255
119.43.205.0-119.43.255.255
124.4.0.0-124.4.199.255
124.4.204.0-124.4.223.255
124.4.252.0/22
182.94.0.0-182.94.235.255
182.94.240.0-182.95.255.255
Signature Algorithm: sha256WithRSAEncryption
bf:57:24:19:4c:57:2c:2e:e3:9d:bb:d2:c2:ea:dd:a8:78:34:
fa:8f:b8:9a:08:75:3f:dc:0e:36:59:51:8d:8d:5c:4d:4f:c8:
dd:9d:99:7f:fd:9c:a2:3f:da:65:90:10:d4:d2:0e:98:2e:f4:
ab:85:66:c3:9e:7b:6d:97:3b:db:53:9b:70:c8:60:34:96:f7:
38:42:8f:41:94:b5:26:14:5a:66:e3:d4:f2:8f:02:7b:e8:72:
41:1d:b0:8e:b6:71:f9:fc:20:93:2a:26:d2:98:8c:26:e1:fa:
1a:f0:d1:52:67:56:e7:3d:40:fd:9b:30:4d:1e:01:22:51:f0:
a8:fe:b4:fd:03:ad:8e:4e:6a:23:2f:12:43:62:61:e1:e2:84:
b9:1a:81:29:bb:a6:7e:3e:4b:e3:e4:88:c3:a1:e0:86:61:5b:
f2:7d:1d:a7:75:42:9c:41:ca:f1:fb:e1:55:c0:dd:8a:a4:95:
78:5e:8b:39:5e:b0:b6:28:0e:d6:e6:1b:47:a0:86:88:66:8c:
bf:0f:d4:eb:f4:4b:62:be:73:45:99:89:19:a5:48:5d:c4:82:
a7:f7:ab:f2:1a:97:f2:c4:aa:fa:c8:b5:49:3d:51:6c:23:91:
44:2b:ac:68:d2:b1:da:65:2d:68:77:c2:35:8b:5b:98:6b:a0:
6a:47:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:22 2025 by rpki-client