Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
File: 4481013CA1A111EFBF3B451FC4F9AE02.roa (raw, json)
Hash identifier: LfMwtEIzX59/zH0kt17J6iEuS715NkiVREIJAcc5NB8=
Subject key identifier: 3C:F5:CA:6E:CD:EC:E1:00:A8:72:E4:EB:18:F1:A5:B1:7D:9B:01:5D
Certificate issuer: /CN=A916413C/serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Certificate serial: 2816
Authority key identifier: 36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
Signing time: Tue 28 Jan 2025 15:52:14 +0000
ROA not before: Tue 28 Jan 2025 15:52:14 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 18001
IP address blocks: 43.228.108.0/22 maxlen: 22
43.228.108.0/24 maxlen: 24
43.228.109.0/24 maxlen: 24
43.228.110.0/24 maxlen: 24
43.228.111.0/24 maxlen: 24
101.2.176.0/20 maxlen: 20
101.2.176.0/21 maxlen: 21
101.2.176.0/22 maxlen: 22
101.2.176.0/24 maxlen: 24
101.2.177.0/24 maxlen: 24
101.2.178.0/24 maxlen: 24
101.2.179.0/24 maxlen: 24
101.2.180.0/22 maxlen: 22
101.2.180.0/24 maxlen: 24
101.2.181.0/24 maxlen: 24
101.2.182.0/24 maxlen: 24
101.2.183.0/24 maxlen: 24
101.2.184.0/21 maxlen: 21
101.2.184.0/22 maxlen: 22
101.2.184.0/24 maxlen: 24
101.2.185.0/24 maxlen: 24
101.2.186.0/24 maxlen: 24
101.2.187.0/24 maxlen: 24
101.2.188.0/24 maxlen: 24
101.2.189.0/24 maxlen: 24
101.2.190.0/24 maxlen: 24
101.2.191.0/24 maxlen: 24
103.227.244.0/22 maxlen: 22
103.227.244.0/24 maxlen: 24
103.227.245.0/24 maxlen: 24
103.227.246.0/24 maxlen: 24
103.227.247.0/24 maxlen: 24
203.153.220.0/22 maxlen: 22
203.153.220.0/24 maxlen: 24
203.153.221.0/24 maxlen: 24
203.153.222.0/24 maxlen: 24
203.153.223.0/24 maxlen: 24
223.224.0.0/19 maxlen: 19
223.224.0.0/22 maxlen: 22
223.224.1.0/24 maxlen: 24
223.224.4.0/22 maxlen: 22
223.224.8.0/22 maxlen: 22
223.224.12.0/22 maxlen: 22
223.224.16.0/22 maxlen: 22
223.224.19.0/24 maxlen: 24
223.224.20.0/22 maxlen: 22
223.224.20.0/24 maxlen: 24
223.224.21.0/24 maxlen: 24
223.224.22.0/24 maxlen: 24
223.224.23.0/24 maxlen: 24
223.224.24.0/22 maxlen: 22
223.224.28.0/22 maxlen: 22
2400:ff00::/32 maxlen: 32
2400:ff00:5::/48 maxlen: 48
2400:ff00:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10262 (0x2816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916413C, serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Validity
Not Before: Jan 28 15:52:14 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6798fd2e-7cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:39:43:10:95:a2:5c:8d:fe:9b:07:c3:fc:
c3:63:b8:2d:30:d1:98:98:cf:dc:c6:b0:ab:9e:85:
21:04:b0:e2:59:81:a5:8c:82:db:0b:a7:c6:04:87:
c1:cf:c1:15:51:6e:6b:dc:93:4c:f9:79:4e:61:cf:
7f:0b:80:22:af:08:06:af:6f:99:27:e6:73:15:47:
45:20:6a:7d:92:55:e1:c5:55:e0:88:16:ad:ac:09:
e3:da:42:93:1f:aa:bb:9a:e9:8f:3e:c3:cb:01:8d:
4c:b5:5c:b3:4f:c2:8f:9e:f5:f3:ae:ae:0f:80:04:
e3:e8:07:a5:8a:73:8f:61:ee:f5:20:49:83:c1:75:
ca:8e:af:03:68:2f:d4:32:c3:61:19:d3:4d:34:91:
82:20:85:93:63:36:3e:b7:cc:fd:44:3f:fb:ee:7a:
cf:ac:2d:ce:22:e3:3c:23:01:9e:a0:65:ce:29:82:
80:e6:36:fd:62:40:74:5e:a9:89:be:71:58:23:ba:
05:1c:42:51:27:11:ee:76:d9:c6:5e:d1:8f:8e:13:
6d:fa:9a:cc:f9:58:1a:a6:56:c9:6b:0c:74:27:01:
57:2b:5b:c4:6e:13:7a:fc:7a:39:76:4c:88:86:d6:
95:05:ef:25:b4:ea:e9:ea:2c:73:d5:86:ea:d1:e8:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:CA:6E:CD:EC:E1:00:A8:72:E4:EB:18:F1:A5:B1:7D:9B:01:5D
X509v3 Authority Key Identifier:
keyid:36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.108.0/22
101.2.176.0/20
103.227.244.0/22
203.153.220.0/22
223.224.0.0/19
IPv6:
2400:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
00:9a:5e:3d:12:47:61:8f:3b:63:cb:c7:e4:4a:cf:27:03:f1:
a9:2c:eb:2d:83:de:2f:54:72:e6:5e:48:e7:1b:c1:cf:fa:eb:
ce:c6:c1:f5:4f:05:2a:db:97:cf:90:50:31:d8:2b:55:a5:8f:
9d:8e:e6:b7:e1:ed:ee:6a:77:48:eb:8e:6a:c8:15:c6:27:c3:
72:7b:d7:3c:6e:1c:95:81:99:8e:11:08:b1:66:33:16:a6:f5:
cf:6f:d6:85:11:5d:e0:2d:2b:6b:49:6c:ab:c4:a9:2b:ec:3c:
03:75:a9:e8:31:7b:93:db:a5:58:df:c3:65:63:7b:f6:36:1b:
fc:f4:3d:5e:1e:eb:9b:91:59:f2:57:2c:f1:65:02:59:6a:3c:
fb:91:5a:4a:54:57:c5:53:85:89:50:65:cc:2e:0a:7c:69:fa:
01:8b:d6:f3:52:79:3d:db:8d:aa:ce:2c:c7:e1:3d:2c:b6:4f:
8b:ca:47:41:d3:b8:9d:86:39:8f:74:f2:ee:01:30:bc:a2:b9:
c6:74:9e:a3:26:20:ec:4d:60:a7:46:52:93:a9:34:b0:23:f9:
73:6f:d9:f9:60:d2:cd:0d:f0:9d:f1:ae:d7:30:1c:a8:a7:76:
76:fa:1c:0b:15:93:91:b2:e2:b5:6c:25:02:4a:50:35:e1:5d:
f9:54:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:01 2025 by rpki-client