Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/ED00CD0ADC6C11EF8E8A990EC4F9AE02.roa
File: ED00CD0ADC6C11EF8E8A990EC4F9AE02.roa (raw, json)
Hash identifier: aE9MfGbkwVRXXtnWk0MAluXwZZaUQ944Jh8mXEEcW6g=
Subject key identifier: 2F:30:A9:F5:CA:CC:F9:80:D6:FF:AC:5B:E6:CE:85:A5:E6:22:1F:17
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 078E
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/ED00CD0ADC6C11EF8E8A990EC4F9AE02.roa
Signing time: Mon 27 Jan 2025 05:09:46 +0000
ROA not before: Mon 27 Jan 2025 05:09:46 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.42.0/24 maxlen: 24
126.209.43.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.64.0/19 maxlen: 19
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.88.0/24 maxlen: 24
126.209.89.0/24 maxlen: 24
126.209.90.0/24 maxlen: 24
126.209.91.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.94.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA
Validity
Not Before: Jan 27 05:09:46 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6797151a-af94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:0a:56:0e:6e:fd:e2:f7:e6:67:24:78:be:
bd:f8:72:a4:9b:b3:31:e0:b7:8f:9c:80:86:fa:6a:
f3:26:7c:cf:77:9e:e9:dc:27:10:31:d3:94:35:68:
b5:58:d6:d0:83:50:10:c7:c8:3b:f1:a9:7d:44:09:
6e:23:26:25:27:20:90:8a:d1:66:58:d7:24:c1:e2:
93:ee:7c:5e:a9:31:2f:fa:ad:1e:9e:01:3d:b6:bd:
6b:a8:aa:ae:7e:9f:f7:d4:1f:dd:70:d8:53:83:4e:
93:9c:87:a4:2f:7c:a3:09:11:b5:71:3a:73:fe:1d:
54:59:89:b5:17:40:04:83:ae:f4:6f:12:05:36:ad:
00:6e:d2:84:bf:a9:96:a6:37:83:df:92:7e:3a:81:
30:49:18:04:3e:4e:90:1b:c1:bb:67:7f:fa:ba:25:
ee:2a:91:31:92:94:b6:99:f2:e7:08:1a:25:e5:3d:
08:0f:6b:7b:ae:c0:84:9f:1f:c4:ae:00:93:90:32:
14:b2:f8:af:41:ae:10:37:dd:f3:3c:b2:00:c7:10:
2d:a1:45:3e:d5:61:80:5b:aa:75:fd:63:79:fa:88:
fe:fc:c4:7d:b1:ab:48:f9:82:fa:76:88:a1:30:4c:
6f:4a:e4:81:f7:89:54:18:5a:b0:0a:65:47:0e:06:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:A9:F5:CA:CC:F9:80:D6:FF:AC:5B:E6:CE:85:A5:E6:22:1F:17
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/ED00CD0ADC6C11EF8E8A990EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.121.0-61.245.123.255
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.95.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
03:1c:26:d4:a4:f6:08:85:8f:94:52:29:98:48:03:91:9a:90:
c7:70:14:4e:96:0d:85:18:ea:a5:20:38:5d:40:f4:8e:5f:f8:
9d:ed:2f:cb:23:bd:ad:42:3b:ea:18:72:4f:c3:f9:62:2e:c5:
e1:1d:37:a0:d4:3b:5b:10:03:4e:7d:45:40:87:a0:db:1d:f7:
aa:44:02:40:c8:ab:19:03:c2:74:e6:6f:55:ed:a1:f7:ad:a5:
23:b1:f3:d2:73:6f:0c:ab:7d:d0:91:11:22:eb:f7:bd:e8:ab:
33:d5:42:3a:1d:f5:4e:fd:3a:0e:2d:0c:d1:52:97:55:e7:b1:
7b:a1:fb:7b:e7:b0:27:02:04:a4:60:47:15:2f:1b:1f:2f:78:
b4:5d:29:7a:d3:6d:1e:74:6d:b2:f2:cf:52:4a:f3:4a:ab:f7:
cb:c7:28:25:76:58:fc:84:f4:8f:13:53:f8:48:70:46:4f:01:
90:eb:0a:16:f5:88:e5:ce:07:f2:06:5b:0a:b6:a8:73:f3:85:
7f:6f:f2:85:5a:f7:92:2d:fa:8f:9d:39:13:1f:55:aa:84:e9:
17:8b:c7:56:c1:c2:4f:8c:f1:f1:6d:a0:4f:4f:4f:90:f6:22:
46:8b:43:5a:59:f6:e0:e6:e7:3e:d7:90:70:fa:c9:08:29:a0:
25:e5:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:10:56 2025 by rpki-client