Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
File: 75D2A3666E8011EF92BDE465C4F9AE02.roa (raw, json)
Hash identifier: Geibmj5f7sWd8ePmSyK9CqZnwcGstWhLmjedleooMUY=
Subject key identifier: F6:34:95:CE:40:86:7A:AA:4B:BD:FD:1A:39:8B:96:14:5D:44:0B:91
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1D05
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
Signing time: Thu 06 Mar 2025 23:55:43 +0000
ROA not before: Thu 06 Mar 2025 23:55:43 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 132165
IP address blocks: 43.245.128.0/24 maxlen: 24
43.245.129.0/24 maxlen: 24
43.245.130.0/24 maxlen: 24
43.245.131.0/24 maxlen: 24
103.12.120.0/24 maxlen: 24
103.12.121.0/24 maxlen: 24
103.12.122.0/24 maxlen: 24
103.12.123.0/24 maxlen: 24
111.119.160.0/24 maxlen: 24
111.119.161.0/24 maxlen: 24
111.119.162.0/24 maxlen: 24
111.119.163.0/24 maxlen: 24
111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
111.119.166.0/24 maxlen: 24
111.119.167.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.193.0/24 maxlen: 24
113.203.195.0/24 maxlen: 24
113.203.200.0/24 maxlen: 24
113.203.201.0/24 maxlen: 24
113.203.202.0/24 maxlen: 24
113.203.203.0/24 maxlen: 24
113.203.204.0/24 maxlen: 24
113.203.205.0/24 maxlen: 24
113.203.207.0/24 maxlen: 24
115.42.64.0/24 maxlen: 24
115.42.65.0/24 maxlen: 24
115.42.66.0/24 maxlen: 24
115.42.67.0/24 maxlen: 24
115.42.68.0/24 maxlen: 24
115.42.69.0/24 maxlen: 24
115.42.70.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
118.103.232.0/24 maxlen: 24
118.103.233.0/24 maxlen: 24
118.103.234.0/24 maxlen: 24
118.103.235.0/24 maxlen: 24
118.103.236.0/24 maxlen: 24
118.103.237.0/24 maxlen: 24
118.103.238.0/24 maxlen: 24
118.103.239.0/24 maxlen: 24
2406:d00::/48 maxlen: 48
2406:d00:2222::/48 maxlen: 48
2406:d00:5555::/48 maxlen: 48
2406:d00:aaaa::/48 maxlen: 48
2406:d00:bbbb::/48 maxlen: 48
2406:d00:ccaa::/47 maxlen: 48
2406:d00:ccc0::/46 maxlen: 48
2406:d00:cccc::/46 maxlen: 48
2406:d00:cce0::/48 maxlen: 48
2406:d00:ccea::/48 maxlen: 48
2406:d00:ddc1::/48 maxlen: 48
2406:d00:ddcc::/48 maxlen: 48
2406:d00:ddd1::/48 maxlen: 48
2406:d00:dddd::/48 maxlen: 48
2406:d00:ddf1::/48 maxlen: 48
2406:d00:ddff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7429 (0x1d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A
Validity
Not Before: Mar 6 23:55:43 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67ca35ff-91d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:59:8e:fe:12:32:1e:99:4b:24:60:31:84:
66:86:f0:9a:31:40:4d:2c:67:90:a1:9f:62:45:12:
a7:d8:0d:bb:75:fd:4e:57:f2:4d:ce:93:3a:0b:8c:
5a:17:f4:30:d8:cd:6b:06:df:fb:2f:c0:c5:d1:af:
62:ff:25:32:86:99:aa:df:92:93:20:be:54:f0:a5:
c8:ae:07:53:43:e4:b5:f9:8c:db:92:e1:b2:42:93:
0e:ee:14:25:05:99:b5:4f:fa:58:14:a3:a2:55:55:
34:c1:d7:2e:07:24:5c:a5:5c:9e:2c:db:ce:10:e0:
34:51:55:3e:b1:e9:9e:69:87:3f:a3:54:29:04:4b:
bc:1e:f7:c5:da:c5:ea:1b:ee:b2:09:31:91:2b:56:
68:d8:c3:43:e3:4a:38:41:93:83:67:4c:7c:4b:64:
ce:79:66:f0:7c:c5:13:db:a7:3d:ac:29:18:2f:20:
57:2a:00:33:d0:e0:6e:d8:e5:09:db:b2:16:6b:ea:
f8:43:01:4b:8f:9b:64:29:cf:ed:51:d4:2c:25:cd:
d8:10:88:7e:aa:ed:c7:47:f3:de:fd:7f:a3:3f:75:
45:a9:5a:fa:b7:89:5e:d4:04:b7:4f:35:57:5b:df:
f0:fb:d3:14:e3:ae:64:ea:23:5a:93:7a:a5:36:6d:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:95:CE:40:86:7A:AA:4B:BD:FD:1A:39:8B:96:14:5D:44:0B:91
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.128.0/22
103.12.120.0/22
111.119.160.0/21
113.203.192.0/23
113.203.195.0/24
113.203.200.0-113.203.205.255
113.203.207.0/24
115.42.64.0-115.42.70.255
118.103.226.0-118.103.239.255
IPv6:
2406:d00::/48
2406:d00:2222::/48
2406:d00:5555::/48
2406:d00:aaaa::/48
2406:d00:bbbb::/48
2406:d00:ccaa::/47
2406:d00:ccc0::/46
2406:d00:cccc::/46
2406:d00:cce0::/48
2406:d00:ccea::/48
2406:d00:ddc1::/48
2406:d00:ddcc::/48
2406:d00:ddd1::/48
2406:d00:dddd::/48
2406:d00:ddf1::/48
2406:d00:ddff::/48
Signature Algorithm: sha256WithRSAEncryption
73:e1:7d:72:0b:3c:b4:43:6f:8c:74:87:8b:bd:5b:79:2d:97:
59:b8:dc:9b:79:5b:0c:e0:24:f6:19:97:a4:14:50:a3:5a:b4:
5e:c8:e4:16:8c:6d:8f:e6:7b:ca:02:5a:df:c0:e3:b5:8d:7c:
97:9e:ca:1c:07:89:6f:4a:35:6b:5b:48:04:64:73:05:f3:28:
db:60:9d:66:ca:1d:6e:6e:21:e8:30:ea:db:ce:d3:ea:2a:44:
5c:27:4d:61:9a:97:f5:ac:4a:3a:51:a0:37:d4:67:86:b8:ed:
62:9d:35:0c:b2:d1:60:d1:86:59:79:66:db:50:4e:0b:45:8b:
df:71:03:53:12:b4:99:e7:ed:5f:af:28:ba:d5:02:9d:e8:9b:
94:db:94:2f:cf:48:5d:09:85:05:2b:b0:11:8a:2c:ba:5d:e9:
28:10:fa:18:9d:6e:22:1e:5e:5a:af:45:ab:e3:ff:05:3d:c0:
06:2c:da:79:13:8f:1d:17:cb:73:cf:7e:f1:42:0d:0d:bb:c5:
75:63:6e:dc:4c:2b:56:51:89:be:8b:35:67:64:82:19:64:f6:
67:53:7d:d0:ed:dc:96:be:7a:f4:5e:5b:b5:f6:d2:1b:93:8b:
e9:22:6b:ac:f7:d7:0a:5a:9f:53:9a:67:10:b9:8a:13:fe:6f:
34:97:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:57:09 2025 by rpki-client