Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/8B6B6494B0F011E5A08A224DC4F9AE02.roa
File: 8B6B6494B0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier: EcFfAVw1+KNCf6BnnPpJp4N3yDcgb9MlcFL3IDwXH10=
Subject key identifier: 5C:08:F8:87:CB:C2:4A:68:DD:DE:95:45:B2:3B:6E:77:65:F9:E4:4F
Certificate issuer: /CN=A916413C/serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Certificate serial: 2815
Authority key identifier: 36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/8B6B6494B0F011E5A08A224DC4F9AE02.roa
Signing time: Tue 28 Jan 2025 15:52:13 +0000
ROA not before: Tue 28 Jan 2025 15:52:13 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 132045
IP address blocks: 43.228.108.0/22 maxlen: 22
43.228.108.0/24 maxlen: 24
43.228.109.0/24 maxlen: 24
43.228.110.0/24 maxlen: 24
43.228.111.0/24 maxlen: 24
101.2.176.0/20 maxlen: 20
101.2.176.0/21 maxlen: 21
101.2.176.0/22 maxlen: 22
101.2.176.0/24 maxlen: 24
101.2.177.0/24 maxlen: 24
101.2.178.0/24 maxlen: 24
101.2.179.0/24 maxlen: 24
101.2.180.0/22 maxlen: 22
101.2.180.0/24 maxlen: 24
101.2.181.0/24 maxlen: 24
101.2.182.0/24 maxlen: 24
101.2.183.0/24 maxlen: 24
101.2.184.0/21 maxlen: 21
101.2.184.0/22 maxlen: 22
101.2.184.0/24 maxlen: 24
101.2.185.0/24 maxlen: 24
101.2.186.0/24 maxlen: 24
101.2.187.0/24 maxlen: 24
101.2.188.0/24 maxlen: 24
101.2.189.0/24 maxlen: 24
101.2.190.0/24 maxlen: 24
101.2.191.0/24 maxlen: 24
103.227.244.0/22 maxlen: 22
103.227.244.0/24 maxlen: 24
103.227.245.0/24 maxlen: 24
103.227.246.0/24 maxlen: 24
103.227.247.0/24 maxlen: 24
203.153.220.0/22 maxlen: 22
203.153.220.0/24 maxlen: 24
203.153.221.0/24 maxlen: 24
203.153.222.0/24 maxlen: 24
203.153.223.0/24 maxlen: 24
223.224.0.0/19 maxlen: 19
223.224.0.0/22 maxlen: 22
223.224.0.0/24 maxlen: 24
223.224.1.0/24 maxlen: 24
223.224.2.0/24 maxlen: 24
223.224.3.0/24 maxlen: 24
223.224.4.0/22 maxlen: 22
223.224.4.0/24 maxlen: 24
223.224.5.0/24 maxlen: 24
223.224.6.0/24 maxlen: 24
223.224.7.0/24 maxlen: 24
223.224.8.0/22 maxlen: 22
223.224.8.0/24 maxlen: 24
223.224.9.0/24 maxlen: 24
223.224.10.0/24 maxlen: 24
223.224.11.0/24 maxlen: 24
223.224.12.0/22 maxlen: 22
223.224.12.0/24 maxlen: 24
223.224.13.0/24 maxlen: 24
223.224.14.0/24 maxlen: 24
223.224.15.0/24 maxlen: 24
223.224.16.0/22 maxlen: 22
223.224.16.0/24 maxlen: 24
223.224.17.0/24 maxlen: 24
223.224.18.0/24 maxlen: 24
223.224.19.0/24 maxlen: 24
223.224.20.0/22 maxlen: 22
223.224.20.0/24 maxlen: 24
223.224.21.0/24 maxlen: 24
223.224.22.0/24 maxlen: 24
223.224.23.0/24 maxlen: 24
223.224.24.0/22 maxlen: 22
223.224.24.0/24 maxlen: 24
223.224.25.0/24 maxlen: 24
223.224.26.0/24 maxlen: 24
223.224.27.0/24 maxlen: 24
223.224.28.0/22 maxlen: 22
223.224.28.0/24 maxlen: 24
223.224.29.0/24 maxlen: 24
223.224.30.0/24 maxlen: 24
223.224.31.0/24 maxlen: 24
2400:ff00::/32 maxlen: 32
2400:ff00:5::/48 maxlen: 48
2400:ff00:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10261 (0x2815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916413C, serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Validity
Not Before: Jan 28 15:52:13 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6798fd2d-655b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:67:6f:26:85:c8:59:ec:4c:89:db:40:f8:
de:8a:1a:ad:89:d4:b2:cb:8c:8b:f1:3c:fe:4a:cd:
c2:cc:be:85:33:20:93:20:2d:c6:79:aa:10:9a:2e:
b8:33:12:40:2a:54:fc:0c:2b:bf:97:fb:25:e7:5c:
c5:07:a6:02:9c:36:81:e3:48:59:8f:6d:08:c1:1d:
6b:41:b7:ce:4a:ee:99:7c:a2:23:01:d7:d0:ce:18:
59:b4:24:35:f0:f8:36:c9:3b:82:04:9f:b5:63:e9:
fa:a9:cb:44:9e:30:32:dc:24:76:20:1e:79:1a:ca:
f1:dc:5b:8b:75:3d:d0:7c:af:20:32:47:cc:6b:f9:
ef:7e:cf:ae:f7:30:f8:23:9e:01:70:47:eb:f9:13:
b5:39:d7:60:60:a9:93:f5:74:85:cc:65:30:13:dc:
a6:9d:16:33:d0:f9:da:2b:52:21:14:6d:15:72:9b:
2f:31:97:bc:6a:31:09:e0:b8:a0:a3:49:38:8c:44:
c4:3d:aa:8e:15:ca:2a:a3:bd:a0:95:35:c2:ba:fc:
d7:84:c9:3e:d6:99:c2:29:f5:a9:13:b0:48:28:3a:
8d:25:60:9c:b2:50:2f:4d:98:33:38:66:77:37:c3:
04:14:7a:ff:55:64:2a:1d:d3:c8:c4:44:cb:bf:bc:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:F8:87:CB:C2:4A:68:DD:DE:95:45:B2:3B:6E:77:65:F9:E4:4F
X509v3 Authority Key Identifier:
keyid:36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/8B6B6494B0F011E5A08A224DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.108.0/22
101.2.176.0/20
103.227.244.0/22
203.153.220.0/22
223.224.0.0/19
IPv6:
2400:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
79:5f:d9:dc:96:c0:89:f5:ad:84:a6:8d:1e:f4:cb:af:f8:f0:
e0:4b:84:c6:4d:42:30:cd:3f:85:f8:59:9e:78:d4:77:0b:81:
e9:7b:d4:fa:37:0d:7a:e7:3b:11:d6:d0:0e:b4:96:c8:1f:69:
56:a0:ab:89:eb:4b:27:ef:75:8a:c1:e3:dc:e5:1e:b8:b0:62:
e9:91:ea:95:8b:3f:7c:6a:01:1b:b1:d9:60:e2:2e:71:48:9d:
d3:89:b9:e4:b5:b2:e0:5b:a1:cc:3c:f4:c9:db:99:05:99:97:
2a:88:32:69:1d:17:00:57:38:a9:f3:9a:83:8b:a3:00:5f:c5:
f5:ec:54:a7:70:07:b8:29:b8:ef:50:3b:3b:f1:b2:b5:d6:ca:
bf:1a:f0:cc:04:16:fb:a9:99:4c:8b:de:db:86:9a:20:0b:5d:
ae:08:9e:a7:1c:9c:b7:5c:70:9b:11:db:2d:3f:0a:b0:f3:d0:
6f:5a:c5:98:67:68:38:11:59:2e:27:3a:f1:d6:bc:fd:a7:aa:
31:9f:60:cd:43:7a:3e:f8:46:b1:5b:30:e2:24:74:0f:a9:c2:
50:e1:f7:20:49:91:87:e1:95:d7:89:40:0d:ec:e1:aa:43:9c:
f0:c6:de:24:5b:5d:4f:74:fa:88:6c:6d:00:4e:db:27:00:9f:
cc:2f:6b:97
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICKBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQxM0MxMTAvBgNVBAUTKDM2NUQ3MUIyNjgyRjU2QjBFRUZGMTE1NDc1NUQyNzlC
OEY5QUZCMzMwHhcNMjUwMTI4MTU1MjEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk4ZmQyZC02NTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2LpnbyaFyFnsTInbQPjeihqtidSyy4yL8Tz+Ss3CzL6FMyCTIC3GeaoQmi64
MxJAKlT8DCu/l/sl51zFB6YCnDaB40hZj20IwR1rQbfOSu6ZfKIjAdfQzhhZtCQ1
8Pg2yTuCBJ+1Y+n6qctEnjAy3CR2IB55Gsrx3FuLdT3QfK8gMkfMa/nvfs+u9zD4
I54BcEfr+RO1OddgYKmT9XSFzGUwE9ymnRYz0PnaK1IhFG0VcpsvMZe8ajEJ4Lig
o0k4jETEPaqOFcoqo72glTXCuvzXhMk+1pnCKfWpE7BIKDqNJWCcslAvTZgzOGZ3
N8MEFHr/VWQqHdPIxETLv7xaiQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFFwI+IfL
wkpo3d6VRbI7bndl+eRPMB8GA1UdIwQYMBaAFDZdcbJoL1aw7v8RVHVdJ5uPmvsz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDEzQy85REQ4MjAxQUEw
NzMxMUU0QThCQjZGNDRDNEY5QUUwMi9ObDF4c21ndlZyRHVfeEZVZFYwbm00LWEt
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05sMXhzbWd2VnJEdV94RlVkVjBubTQtYS16TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQxM0MvOUREODIwMUFBMDczMTFFNEE4QkI2RjQ0QzRGOUFFMDIvOEI2QjY0OTRC
MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAIr5GwDBARlArADBAJn4/QDBALLmdwDBAXf4AAwDQQCAAIw
BwMFACQA/wAwDQYJKoZIhvcNAQELBQADggEBAHlf2dyWwIn1rYSmjR70y6/48OBL
hMZNQjDNP4X4WZ541HcLgel71Po3DXrnOxHW0A60lsgfaVagq4nrSyfvdYrB49zl
HriwYumR6pWLP3xqARux2WDiLnFIndOJueS1suBbocw89MnbmQWZlyqIMmkdFwBX
OKnzmoOLowBfxfXsVKdwB7gpuO9QOzvxsrXWyr8a8MwEFvupmUyL3tuGmiALXa4I
nqccnLdccJsR2y0/CrDz0G9axZhnaDgRWS4nOvHWvP2nqjGfYM1Dej74RrFbMOIk
dA+pwlDh9yBJkYfhldeJQA3s4apDnPDG3iRbXU90+ohsbQBO2ycAn8wva5c=
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:13 2025 by rpki-client