Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/1E7AFF46066811ED8098BF45C4F9AE02.roa
File: 1E7AFF46066811ED8098BF45C4F9AE02.roa (raw, json)
Hash identifier: 1gfBWxubtAHaO2L7yyFmTjuANtEXOgERKbVVtHqz/Y4=
Subject key identifier: 64:8F:72:1B:6D:4D:1F:32:BD:5B:67:C6:D3:17:6A:C9:9B:79:77:E5
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 1519
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/1E7AFF46066811ED8098BF45C4F9AE02.roa
Signing time: Fri 28 Feb 2025 08:15:38 +0000
ROA not before: Fri 28 Feb 2025 08:15:38 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 136907
IP address blocks: 146.174.128.0/18 maxlen: 18
146.174.128.0/20 maxlen: 20
146.174.144.0/20 maxlen: 20
146.174.160.0/20 maxlen: 20
146.174.176.0/20 maxlen: 20
148.145.128.0/17 maxlen: 19
148.145.128.0/20 maxlen: 20
148.145.144.0/20 maxlen: 20
148.145.160.0/20 maxlen: 20
148.145.176.0/20 maxlen: 20
148.145.192.0/20 maxlen: 20
148.145.208.0/20 maxlen: 20
148.145.224.0/23 maxlen: 23
148.145.226.0/23 maxlen: 23
148.145.240.0/23 maxlen: 23
148.145.242.0/23 maxlen: 23
149.232.128.0/19 maxlen: 19
149.232.128.0/20 maxlen: 20
149.232.144.0/20 maxlen: 20
159.138.0.0/20 maxlen: 20
159.138.0.0/24 maxlen: 24
159.138.1.0/24 maxlen: 24
159.138.2.0/24 maxlen: 24
159.138.3.0/24 maxlen: 24
159.138.4.0/24 maxlen: 24
159.138.5.0/24 maxlen: 24
159.138.6.0/24 maxlen: 24
159.138.7.0/24 maxlen: 24
159.138.8.0/24 maxlen: 24
159.138.9.0/24 maxlen: 24
159.138.10.0/24 maxlen: 24
159.138.11.0/24 maxlen: 24
159.138.12.0/24 maxlen: 24
159.138.13.0/24 maxlen: 24
159.138.14.0/24 maxlen: 24
159.138.15.0/24 maxlen: 24
159.138.16.0/22 maxlen: 22
159.138.16.0/24 maxlen: 24
159.138.17.0/24 maxlen: 24
159.138.18.0/24 maxlen: 24
159.138.19.0/24 maxlen: 24
159.138.20.0/22 maxlen: 22
159.138.20.0/24 maxlen: 24
159.138.21.0/24 maxlen: 24
159.138.22.0/24 maxlen: 24
159.138.23.0/24 maxlen: 24
159.138.24.0/21 maxlen: 21
159.138.24.0/24 maxlen: 24
159.138.25.0/24 maxlen: 24
159.138.26.0/24 maxlen: 24
159.138.27.0/24 maxlen: 24
159.138.28.0/24 maxlen: 24
159.138.29.0/24 maxlen: 24
159.138.30.0/24 maxlen: 24
159.138.31.0/24 maxlen: 24
159.138.32.0/20 maxlen: 20
159.138.32.0/24 maxlen: 24
159.138.33.0/24 maxlen: 24
159.138.34.0/24 maxlen: 24
159.138.35.0/24 maxlen: 24
159.138.36.0/24 maxlen: 24
159.138.37.0/24 maxlen: 24
159.138.38.0/24 maxlen: 24
159.138.39.0/24 maxlen: 24
159.138.40.0/24 maxlen: 24
159.138.41.0/24 maxlen: 24
159.138.42.0/24 maxlen: 24
159.138.43.0/24 maxlen: 24
159.138.44.0/24 maxlen: 24
159.138.45.0/24 maxlen: 24
159.138.46.0/24 maxlen: 24
159.138.47.0/24 maxlen: 24
159.138.48.0/20 maxlen: 20
159.138.48.0/24 maxlen: 24
159.138.49.0/24 maxlen: 24
159.138.50.0/24 maxlen: 24
159.138.51.0/24 maxlen: 24
159.138.52.0/24 maxlen: 24
159.138.53.0/24 maxlen: 24
159.138.54.0/24 maxlen: 24
159.138.55.0/24 maxlen: 24
159.138.56.0/24 maxlen: 24
159.138.57.0/24 maxlen: 24
159.138.58.0/24 maxlen: 24
159.138.59.0/24 maxlen: 24
159.138.60.0/24 maxlen: 24
159.138.61.0/24 maxlen: 24
159.138.62.0/24 maxlen: 24
159.138.63.0/24 maxlen: 24
159.138.64.0/21 maxlen: 21
159.138.64.0/24 maxlen: 24
159.138.65.0/24 maxlen: 24
159.138.66.0/24 maxlen: 24
159.138.67.0/24 maxlen: 24
159.138.68.0/24 maxlen: 24
159.138.69.0/24 maxlen: 24
159.138.70.0/24 maxlen: 24
159.138.71.0/24 maxlen: 24
159.138.77.0/24 maxlen: 24
159.138.78.0/24 maxlen: 24
159.138.80.0/20 maxlen: 20
159.138.80.0/24 maxlen: 24
159.138.81.0/24 maxlen: 24
159.138.82.0/24 maxlen: 24
159.138.83.0/24 maxlen: 24
159.138.84.0/24 maxlen: 24
159.138.85.0/24 maxlen: 24
159.138.86.0/24 maxlen: 24
159.138.87.0/24 maxlen: 24
159.138.88.0/24 maxlen: 24
159.138.89.0/24 maxlen: 24
159.138.90.0/24 maxlen: 24
159.138.91.0/24 maxlen: 24
159.138.92.0/24 maxlen: 24
159.138.93.0/24 maxlen: 24
159.138.94.0/24 maxlen: 24
159.138.95.0/24 maxlen: 24
159.138.96.0/20 maxlen: 20
159.138.96.0/24 maxlen: 24
159.138.97.0/24 maxlen: 24
159.138.98.0/24 maxlen: 24
159.138.99.0/24 maxlen: 24
159.138.100.0/24 maxlen: 24
159.138.101.0/24 maxlen: 24
159.138.102.0/24 maxlen: 24
159.138.103.0/24 maxlen: 24
159.138.104.0/24 maxlen: 24
159.138.105.0/24 maxlen: 24
159.138.106.0/24 maxlen: 24
159.138.107.0/24 maxlen: 24
159.138.108.0/24 maxlen: 24
159.138.109.0/24 maxlen: 24
159.138.110.0/24 maxlen: 24
159.138.111.0/24 maxlen: 24
159.138.112.0/21 maxlen: 21
159.138.113.0/24 maxlen: 24
159.138.114.0/24 maxlen: 24
159.138.116.0/24 maxlen: 24
159.138.120.0/22 maxlen: 22
159.138.120.0/24 maxlen: 24
159.138.121.0/24 maxlen: 24
159.138.122.0/24 maxlen: 24
159.138.123.0/24 maxlen: 24
159.138.124.0/24 maxlen: 24
159.138.125.0/24 maxlen: 24
159.138.126.0/23 maxlen: 23
159.138.126.0/24 maxlen: 24
159.138.127.0/24 maxlen: 24
159.138.128.0/20 maxlen: 20
159.138.128.0/24 maxlen: 24
159.138.129.0/24 maxlen: 24
159.138.130.0/24 maxlen: 24
159.138.131.0/24 maxlen: 24
159.138.132.0/24 maxlen: 24
159.138.133.0/24 maxlen: 24
159.138.134.0/24 maxlen: 24
159.138.135.0/24 maxlen: 24
159.138.136.0/24 maxlen: 24
159.138.137.0/24 maxlen: 24
159.138.138.0/24 maxlen: 24
159.138.139.0/24 maxlen: 24
159.138.140.0/24 maxlen: 24
159.138.141.0/24 maxlen: 24
159.138.142.0/24 maxlen: 24
159.138.143.0/24 maxlen: 24
159.138.144.0/21 maxlen: 21
159.138.144.0/24 maxlen: 24
159.138.145.0/24 maxlen: 24
159.138.146.0/24 maxlen: 24
159.138.147.0/24 maxlen: 24
159.138.148.0/24 maxlen: 24
159.138.149.0/24 maxlen: 24
159.138.150.0/24 maxlen: 24
159.138.151.0/24 maxlen: 24
159.138.152.0/21 maxlen: 21
159.138.152.0/24 maxlen: 24
159.138.153.0/24 maxlen: 24
159.138.154.0/24 maxlen: 24
159.138.155.0/24 maxlen: 24
159.138.156.0/24 maxlen: 24
159.138.157.0/24 maxlen: 24
159.138.158.0/24 maxlen: 24
159.138.159.0/24 maxlen: 24
159.138.160.0/20 maxlen: 20
159.138.176.0/23 maxlen: 23
159.138.178.0/24 maxlen: 24
159.138.179.0/24 maxlen: 24
159.138.180.0/24 maxlen: 24
159.138.181.0/24 maxlen: 24
159.138.188.0/24 maxlen: 24
159.138.189.0/24 maxlen: 24
159.138.208.0/21 maxlen: 21
159.138.224.0/24 maxlen: 24
159.138.225.0/24 maxlen: 24
159.138.226.0/24 maxlen: 24
159.138.227.0/24 maxlen: 24
159.138.228.0/24 maxlen: 24
159.138.229.0/24 maxlen: 24
159.138.230.0/24 maxlen: 24
159.138.231.0/24 maxlen: 24
159.138.232.0/24 maxlen: 24
159.138.233.0/24 maxlen: 24
159.138.234.0/24 maxlen: 24
159.138.235.0/24 maxlen: 24
159.138.236.0/24 maxlen: 24
159.138.237.0/24 maxlen: 24
159.138.238.0/24 maxlen: 24
159.138.239.0/24 maxlen: 24
159.138.240.0/24 maxlen: 24
159.138.241.0/24 maxlen: 24
159.138.242.0/24 maxlen: 24
159.138.243.0/24 maxlen: 24
159.138.244.0/24 maxlen: 24
159.138.245.0/24 maxlen: 24
159.138.246.0/24 maxlen: 24
159.138.247.0/24 maxlen: 24
159.138.248.0/24 maxlen: 24
159.138.249.0/24 maxlen: 24
159.138.250.0/24 maxlen: 24
159.138.251.0/24 maxlen: 24
159.138.252.0/24 maxlen: 24
159.138.253.0/24 maxlen: 24
159.138.254.0/24 maxlen: 24
159.138.255.0/24 maxlen: 24
166.108.192.0/18 maxlen: 18
166.108.192.0/20 maxlen: 20
166.108.192.0/24 maxlen: 24
166.108.193.0/24 maxlen: 24
166.108.194.0/24 maxlen: 24
166.108.195.0/24 maxlen: 24
166.108.196.0/24 maxlen: 24
166.108.197.0/24 maxlen: 24
166.108.198.0/24 maxlen: 24
166.108.199.0/24 maxlen: 24
166.108.200.0/24 maxlen: 24
166.108.201.0/24 maxlen: 24
166.108.202.0/24 maxlen: 24
166.108.203.0/24 maxlen: 24
166.108.204.0/24 maxlen: 24
166.108.205.0/24 maxlen: 24
166.108.206.0/24 maxlen: 24
166.108.207.0/24 maxlen: 24
166.108.208.0/20 maxlen: 20
166.108.208.0/24 maxlen: 24
166.108.209.0/24 maxlen: 24
166.108.210.0/24 maxlen: 24
166.108.211.0/24 maxlen: 24
166.108.212.0/24 maxlen: 24
166.108.213.0/24 maxlen: 24
166.108.214.0/24 maxlen: 24
166.108.215.0/24 maxlen: 24
166.108.216.0/24 maxlen: 24
166.108.217.0/24 maxlen: 24
166.108.218.0/24 maxlen: 24
166.108.219.0/24 maxlen: 24
166.108.220.0/24 maxlen: 24
166.108.221.0/24 maxlen: 24
166.108.222.0/24 maxlen: 24
166.108.223.0/24 maxlen: 24
166.108.224.0/20 maxlen: 20
166.108.224.0/24 maxlen: 24
166.108.225.0/24 maxlen: 24
166.108.226.0/24 maxlen: 24
166.108.227.0/24 maxlen: 24
166.108.228.0/24 maxlen: 24
166.108.229.0/24 maxlen: 24
166.108.230.0/24 maxlen: 24
166.108.231.0/24 maxlen: 24
166.108.232.0/24 maxlen: 24
166.108.233.0/24 maxlen: 24
166.108.234.0/24 maxlen: 24
166.108.235.0/24 maxlen: 24
166.108.236.0/24 maxlen: 24
166.108.237.0/24 maxlen: 24
166.108.238.0/24 maxlen: 24
166.108.239.0/24 maxlen: 24
166.108.240.0/20 maxlen: 20
166.108.240.0/24 maxlen: 24
166.108.241.0/24 maxlen: 24
166.108.242.0/24 maxlen: 24
166.108.243.0/24 maxlen: 24
166.108.244.0/24 maxlen: 24
166.108.245.0/24 maxlen: 24
166.108.246.0/24 maxlen: 24
166.108.247.0/24 maxlen: 24
166.108.248.0/24 maxlen: 24
166.108.249.0/24 maxlen: 24
166.108.250.0/24 maxlen: 24
166.108.251.0/24 maxlen: 24
166.108.252.0/24 maxlen: 24
166.108.253.0/24 maxlen: 24
166.108.254.0/24 maxlen: 24
166.108.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5401 (0x1519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678
Validity
Not Before: Feb 28 08:15:38 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67c170aa-57ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:16:09:1d:d0:d6:50:77:65:97:dd:18:26:
53:b9:61:38:8d:47:84:89:c1:15:6f:17:43:71:2e:
2c:cb:cc:a0:d8:f4:ed:6d:6b:55:e0:f2:7f:9b:fd:
f5:1c:94:9b:a0:7d:a7:72:4c:c6:ae:85:53:82:a9:
17:c5:13:ea:b8:b0:7f:91:10:eb:7a:e4:32:56:52:
de:de:0d:8f:66:1e:ff:30:50:cd:69:9a:47:b9:8e:
2e:3e:97:ad:fe:1b:8e:ef:75:2a:9f:f9:93:08:ad:
52:8a:a6:bd:0a:0c:b3:d4:54:95:a3:9d:08:9f:8d:
11:87:23:9d:42:0f:f9:49:0e:88:18:84:72:f2:57:
0a:8c:80:0b:84:87:81:f4:2c:04:ed:0a:5e:11:53:
1f:b6:e3:d6:a5:b2:30:7a:1b:76:f7:21:9c:21:7b:
3b:11:96:df:9c:c4:02:29:a8:28:59:eb:a7:0e:d1:
a2:b2:9a:0d:4e:3d:59:09:a8:fb:03:c2:19:b5:98:
3c:ce:24:42:d1:9d:bd:03:17:af:b2:27:7b:ec:a4:
29:8f:4d:4e:a7:1f:f6:40:74:84:6b:9d:62:5a:c3:
25:3e:d0:f0:a7:b5:6d:1e:78:f4:7a:da:66:2d:d7:
d7:dd:a3:81:2f:dc:ae:54:c6:22:c7:4a:37:5c:c1:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:72:1B:6D:4D:1F:32:BD:5B:67:C6:D3:17:6A:C9:9B:79:77:E5
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/1E7AFF46066811ED8098BF45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.174.128.0/18
148.145.128.0/17
149.232.128.0/19
159.138.0.0-159.138.71.255
159.138.77.0-159.138.78.255
159.138.80.0-159.138.181.255
159.138.188.0/23
159.138.208.0/21
159.138.224.0/19
166.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:eb:04:52:4b:29:62:ef:ad:20:42:90:3a:8a:ec:11:61:9e:
aa:fe:d0:5c:53:71:2b:81:ed:50:f3:a9:2c:b7:71:27:77:06:
de:32:d4:16:c0:bc:e5:d1:65:2b:26:ee:66:fa:ea:09:2a:e8:
b5:35:c5:0b:f3:ba:81:91:79:f2:50:a8:42:92:4d:81:43:fd:
55:a4:ff:84:68:7e:d0:e2:73:ef:3a:72:a8:c3:bc:63:76:b1:
3a:8d:99:40:3c:61:8a:0c:91:2f:9b:85:29:30:eb:4b:06:4a:
af:57:84:70:b2:20:2d:b2:f1:77:d9:b9:4c:d1:71:46:d4:8a:
8e:94:11:53:b4:2b:a5:7c:23:7f:53:31:25:08:17:ab:a5:a8:
ce:4c:9a:5b:c2:61:4c:12:11:62:98:07:52:88:ce:60:af:ff:
4a:64:c0:61:8c:bf:75:c2:e8:2e:a0:c5:e9:ef:f8:13:32:19:
35:0d:13:c5:fa:0b:f3:9c:c9:45:47:aa:d5:20:e4:28:61:41:
d5:ad:b7:e0:3e:d5:52:74:2c:61:c1:2a:a0:93:b4:28:1f:9a:
21:32:c4:7f:aa:c4:a7:3b:1a:77:46:25:2b:00:d0:15:88:3c:
65:3f:cf:88:05:98:3f:a2:f8:ff:19:9a:a9:1f:66:5a:55:62:
0a:ae:55:e0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgICFRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDFFMTIzODQ1NjM3MUU3NDQ4OTQ2MjJFOThBQzFFRTU1
QjQxNDVFMTAwHhcNMjUwMjI4MDgxNTM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MxNzBhYS01N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArr0WCR3Q1lB3ZZfdGCZTuWE4jUeEicEVbxdDcS4sy8yg2PTtbWtV4PJ/m/31
HJSboH2nckzGroVTgqkXxRPquLB/kRDreuQyVlLe3g2PZh7/MFDNaZpHuY4uPpet
/huO73Uqn/mTCK1Siqa9Cgyz1FSVo50In40RhyOdQg/5SQ6IGIRy8lcKjIALhIeB
9CwE7QpeEVMftuPWpbIweht29yGcIXs7EZbfnMQCKagoWeunDtGispoNTj1ZCaj7
A8IZtZg8ziRC0Z29Axevsid77KQpj01Opx/2QHSEa51iWsMlPtDwp7VtHnj0etpm
LdfX3aOBL9yuVMYix0o3XMGOKQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFGSPchtt
TR8yvVtnxtMXasmbeXflMB8GA1UdIwQYMBaAFB4SOEVjcedEiUYi6YrB7lW0FF4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC82OTdFMzU2QTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUwU0pSaUxwaXNIdVZiUVVY
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hoSTRSV054NTBTSlJpTHBpc0h1VmJRVVhoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U2NzgvNjk3RTM1NkE2OTU3MTFFOEE0MkJFNjgwQzRGOUFFMDIvMUU3QUZGNDYw
NjY4MTFFRDgwOThCRjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E
XTBbMFkEAgABMFMDBAaSroADBAeUkYADBAWV6IAwCwMDAZ+KAwQDn4pAMAwDBACf
ik0DBACfik4wDAMEBJ+KUAMEAZ+KtAMEAZ+KvAMEA5+K0AMEBZ+K4AMEBqZswDAN
BgkqhkiG9w0BAQsFAAOCAQEATesEUkspYu+tIEKQOorsEWGeqv7QXFNxK4HtUPOp
LLdxJ3cG3jLUFsC85dFlKybuZvrqCSrotTXFC/O6gZF58lCoQpJNgUP9VaT/hGh+
0OJz7zpyqMO8Y3axOo2ZQDxhigyRL5uFKTDrSwZKr1eEcLIgLbLxd9m5TNFxRtSK
jpQRU7QrpXwjf1MxJQgXq6WozkyaW8JhTBIRYpgHUojOYK//SmTAYYy/dcLoLqDF
6e/4EzIZNQ0TxfoL85zJRUeq1SDkKGFB1a234D7VUnQsYcEqoJO0KB+aITLEf6rE
pzsad0YlKwDQFYg8ZT/PiAWYP6L4/xmaqR9mWlViCq5V4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:57 2025 by rpki-client