Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
File: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (raw, json)
Hash identifier: VAwS5Uo7Cqi7lzXCRRZhfVVXN11Han/DThkDiW77C6s=
Subject key identifier: 87:12:C2:5B:38:4A:68:8B:D1:36:1E:6A:06:87:D4:6D:79:79:5F:FC
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1C17
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
Signing time: Thu 16 Jan 2025 07:47:54 +0000
ROA not before: Thu 16 Jan 2025 07:47:54 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 4761
IP address blocks: 103.105.24.0/24 maxlen: 24
103.105.25.0/24 maxlen: 24
103.105.27.0/24 maxlen: 24
103.108.20.0/24 maxlen: 24
103.108.21.0/24 maxlen: 24
103.108.22.0/24 maxlen: 24
103.108.23.0/24 maxlen: 24
114.0.0.0/16 maxlen: 24
114.1.0.0/16 maxlen: 24
114.2.0.0/16 maxlen: 24
114.3.0.0/16 maxlen: 24
114.4.0.0/16 maxlen: 24
114.5.0.0/16 maxlen: 24
114.6.0.0/16 maxlen: 24
114.7.0.0/16 maxlen: 24
114.8.0.0/16 maxlen: 24
114.9.0.0/16 maxlen: 24
114.10.0.0/16 maxlen: 23
114.10.0.0/19 maxlen: 24
114.10.33.0/24 maxlen: 24
114.10.34.0/23 maxlen: 24
114.10.36.0/22 maxlen: 24
114.10.40.0/21 maxlen: 24
114.10.48.0/20 maxlen: 24
114.10.64.0/18 maxlen: 24
114.10.128.0/17 maxlen: 24
114.11.0.0/16 maxlen: 24
114.12.0.0/16 maxlen: 24
114.13.0.0/16 maxlen: 24
114.14.0.0/16 maxlen: 24
114.15.0.0/16 maxlen: 24
120.160.0.0/11 maxlen: 11
120.188.0.0/21 maxlen: 21
120.188.0.0/22 maxlen: 22
120.188.4.0/22 maxlen: 22
120.188.4.0/24 maxlen: 24
120.188.32.0/21 maxlen: 21
120.188.34.0/23 maxlen: 23
120.188.37.0/24 maxlen: 24
120.188.39.0/24 maxlen: 24
120.188.64.0/22 maxlen: 22
120.188.64.0/23 maxlen: 23
120.188.66.0/23 maxlen: 23
120.188.72.0/21 maxlen: 21
120.188.72.0/22 maxlen: 22
120.188.76.0/22 maxlen: 22
120.188.80.0/21 maxlen: 21
120.188.80.0/22 maxlen: 22
120.188.84.0/22 maxlen: 22
120.188.92.0/22 maxlen: 22
124.195.2.0/24 maxlen: 24
124.195.3.0/24 maxlen: 24
124.195.5.0/24 maxlen: 24
124.195.6.0/23 maxlen: 24
124.195.8.0/23 maxlen: 24
124.195.12.0/22 maxlen: 22
124.195.12.0/23 maxlen: 24
124.195.15.0/24 maxlen: 24
124.195.16.0/24 maxlen: 24
124.195.18.0/24 maxlen: 24
124.195.19.0/24 maxlen: 24
124.195.26.0/23 maxlen: 24
124.195.28.0/23 maxlen: 24
124.195.32.0/23 maxlen: 24
124.195.34.0/23 maxlen: 24
124.195.36.0/23 maxlen: 24
124.195.48.0/22 maxlen: 22
124.195.48.0/23 maxlen: 23
124.195.50.0/24 maxlen: 24
124.195.51.0/24 maxlen: 24
124.195.52.0/22 maxlen: 22
124.195.52.0/24 maxlen: 24
124.195.54.0/23 maxlen: 24
124.195.56.0/22 maxlen: 22
124.195.58.0/23 maxlen: 24
124.195.124.0/23 maxlen: 24
202.93.32.0/20 maxlen: 20
202.93.32.0/24 maxlen: 24
202.93.33.0/24 maxlen: 24
202.93.34.0/24 maxlen: 24
202.93.36.0/24 maxlen: 24
202.93.39.0/24 maxlen: 24
202.93.40.0/23 maxlen: 23
202.93.41.0/24 maxlen: 24
202.93.42.0/24 maxlen: 24
202.93.43.0/24 maxlen: 24
202.93.44.0/24 maxlen: 24
202.93.46.0/24 maxlen: 24
202.93.47.0/24 maxlen: 24
202.152.160.0/20 maxlen: 20
202.152.160.0/24 maxlen: 24
202.152.162.0/24 maxlen: 24
202.152.163.0/24 maxlen: 24
202.152.168.0/24 maxlen: 24
202.152.175.0/24 maxlen: 24
2407::/32 maxlen: 32
2407:0:33bc::/46 maxlen: 46
2407:0:33c0::/43 maxlen: 43
2407:0:3780::/44 maxlen: 44
2407:0:3790::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7191 (0x1c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD
Validity
Not Before: Jan 16 07:47:54 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6788b9aa-636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:d1:58:d4:d4:2f:b3:a4:68:8e:81:11:b1:
7d:93:3c:b7:d0:35:1f:b5:ba:34:71:41:54:5b:1e:
72:7e:a2:07:c3:7e:0d:aa:d5:b5:a1:52:ac:c6:09:
20:71:d8:cb:7b:3f:17:de:90:f2:a9:f4:6e:f0:f9:
da:48:ec:e6:80:44:8e:c1:47:94:bd:fc:f0:29:02:
79:4f:06:b3:52:1f:89:87:dd:cb:48:07:71:f8:d4:
e1:a5:e3:68:d1:a6:d1:89:e0:db:f5:52:ad:45:e2:
f0:03:59:a2:f1:fa:a7:cf:99:79:53:48:00:20:1d:
61:36:23:90:26:8c:99:b9:0b:21:92:a2:e8:48:06:
f7:d9:a4:fa:e0:cc:1c:4c:af:9b:74:a4:b1:f3:bf:
1b:10:d7:1e:4d:84:d7:92:87:35:1a:f7:dd:50:ee:
28:78:09:59:37:a1:54:97:aa:3a:43:62:a2:8a:3e:
ce:97:fd:1a:b8:3f:d9:3e:ad:a6:99:d3:93:4f:54:
c7:6a:bd:44:a5:68:14:4c:d8:a0:0c:cb:d1:25:ff:
36:9c:82:18:dd:e8:c4:c9:57:05:ed:a3:f8:7c:51:
d3:df:19:02:50:4a:41:f6:3d:0f:29:eb:10:c6:0b:
57:53:55:d0:2d:fe:0a:90:e7:3f:1c:f0:df:a0:e2:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:C2:5B:38:4A:68:8B:D1:36:1E:6A:06:87:D4:6D:79:79:5F:FC
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.24.0/23
103.105.27.0/24
103.108.20.0/22
114.0.0.0/12
120.160.0.0/11
124.195.2.0/23
124.195.5.0-124.195.9.255
124.195.12.0-124.195.16.255
124.195.18.0/23
124.195.26.0-124.195.29.255
124.195.32.0-124.195.37.255
124.195.48.0-124.195.59.255
124.195.124.0/23
202.93.32.0/20
202.152.160.0/20
IPv6:
2407::/32
Signature Algorithm: sha256WithRSAEncryption
af:f1:12:58:3b:8a:37:3b:ae:6e:e1:db:bc:77:8a:3c:83:05:
f4:26:3c:ed:bc:73:d1:fb:f9:7e:30:91:13:67:09:8d:2a:dc:
37:1e:2f:d2:8d:e7:82:eb:99:d3:d3:1f:5a:4e:af:d0:a4:f2:
c2:6e:e9:ba:43:5e:49:69:89:8f:b8:cc:4d:41:75:ab:b8:7c:
32:de:be:c6:52:58:3a:57:80:57:5e:43:92:29:d9:e9:9e:35:
f8:f5:ab:d4:f5:fc:f3:f0:d0:9b:f7:76:0e:7e:aa:21:0d:6f:
22:90:73:6b:16:d4:63:e3:d3:76:fc:59:1b:46:80:b1:ea:68:
20:cc:5c:ac:bf:ab:89:28:7c:0a:cc:35:5f:08:55:b0:c0:a6:
66:f5:5f:72:e3:d4:77:e2:0b:e2:5c:69:e5:0a:bb:4b:dd:75:
5d:0d:fe:26:4c:60:ff:f8:e0:30:a2:79:01:b1:73:88:49:69:
9d:81:10:d4:0d:bb:52:cf:15:6f:69:f8:54:7a:e7:2a:e9:61:
0d:6b:7b:d1:94:11:31:c9:73:63:68:30:1b:f0:91:2d:49:e5:
11:27:03:38:6d:21:11:d3:79:4f:49:d9:b4:70:fe:ae:30:c0:
ec:42:45:7a:ed:ea:5e:f4:38:84:5d:df:e3:7e:81:61:ba:78:
17:5b:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:47 2025 by rpki-client