Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/694CCE66E53911EF9DD1B90DC4F9AE02.roa
File: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (raw, json)
Hash identifier: dHpVockv1v0nsLKVjW4JjR0Rc9XC1Dp8MsDOOMq04/4=
Subject key identifier: F8:9F:40:21:BE:B3:44:CE:F9:50:ED:CD:E8:07:AE:A9:85:9D:D4:A6
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 179F
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/694CCE66E53911EF9DD1B90DC4F9AE02.roa
Signing time: Tue 11 Feb 2025 04:40:17 +0000
ROA not before: Tue 11 Feb 2025 04:40:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 134190
IP address blocks: 42.3.226.0/24 maxlen: 32
203.198.4.0/25 maxlen: 32
203.198.4.128/25 maxlen: 32
203.198.7.0/26 maxlen: 32
203.198.7.64/26 maxlen: 32
203.198.23.0/24 maxlen: 32
203.198.24.64/26 maxlen: 32
218.102.1.0/24 maxlen: 32
218.102.2.0/24 maxlen: 32
218.102.3.0/24 maxlen: 32
218.102.11.64/27 maxlen: 32
218.102.16.0/25 maxlen: 32
218.102.16.208/30 maxlen: 32
218.102.20.80/28 maxlen: 32
218.102.20.128/27 maxlen: 32
218.102.20.192/27 maxlen: 32
218.102.20.224/27 maxlen: 32
218.102.21.32/28 maxlen: 32
218.102.21.224/27 maxlen: 32
218.102.22.64/27 maxlen: 32
218.102.22.96/27 maxlen: 32
218.102.23.0/24 maxlen: 32
218.102.32.0/24 maxlen: 32
218.102.34.0/24 maxlen: 32
218.102.43.64/27 maxlen: 32
218.102.43.96/27 maxlen: 32
218.102.48.0/24 maxlen: 32
218.102.49.0/26 maxlen: 32
218.102.49.80/28 maxlen: 32
218.102.49.128/26 maxlen: 32
218.102.49.192/28 maxlen: 32
218.102.50.0/24 maxlen: 32
218.102.51.0/24 maxlen: 32
218.102.52.80/28 maxlen: 32
218.102.53.0/24 maxlen: 32
218.102.60.64/26 maxlen: 32
218.102.62.0/24 maxlen: 32
219.76.0.64/27 maxlen: 32
219.76.5.0/25 maxlen: 32
219.76.7.0/25 maxlen: 32
219.76.14.64/27 maxlen: 32
219.76.14.96/27 maxlen: 32
219.76.26.128/27 maxlen: 32
219.76.26.160/27 maxlen: 32
219.76.26.192/26 maxlen: 32
219.76.64.64/26 maxlen: 32
219.76.64.160/28 maxlen: 32
219.76.64.192/26 maxlen: 32
219.76.67.96/27 maxlen: 32
219.76.68.0/26 maxlen: 32
219.76.68.64/26 maxlen: 32
219.76.94.0/24 maxlen: 32
219.76.95.0/24 maxlen: 32
219.76.98.64/27 maxlen: 32
219.76.99.0/24 maxlen: 32
219.76.100.0/26 maxlen: 32
219.76.100.64/26 maxlen: 32
219.76.100.128/25 maxlen: 32
219.76.104.64/28 maxlen: 32
219.76.111.0/24 maxlen: 32
219.76.112.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6047 (0x179f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F
Validity
Not Before: Feb 11 04:40:17 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67aad4b1-8f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b7:f1:67:84:dc:5a:64:e9:01:4e:f3:29:37:
a5:ff:17:a3:b5:da:50:44:ed:bd:82:c2:51:2b:95:
ad:93:db:e5:6a:87:bc:bc:89:ca:8e:c4:91:b5:90:
a8:ce:52:e3:b5:3b:27:d1:cc:a5:ca:06:30:11:06:
13:9f:c8:4a:3c:19:59:0f:21:ab:2e:c7:e7:e7:05:
cb:87:be:d3:1f:88:74:0c:be:d9:b1:7e:64:16:4a:
26:4a:32:17:6d:6a:65:29:6c:37:ac:f5:ee:18:5a:
da:d0:41:4d:76:c7:e8:a8:a0:42:4e:cb:ea:61:0d:
94:2a:0a:5f:95:22:87:f4:b1:cc:ba:82:c6:f5:66:
80:84:00:aa:1c:76:c2:5d:07:34:dc:ac:91:f4:47:
1c:37:89:12:a8:32:63:04:ef:d4:77:fa:5f:23:9a:
77:3a:9e:df:91:43:0d:f7:1d:82:c3:d2:64:10:75:
cf:6e:63:1c:db:0c:00:40:9c:5e:d5:c5:e2:ae:32:
63:fc:9f:cf:31:5e:1b:ff:42:4d:30:5f:ac:67:7f:
9d:de:03:df:d5:1c:52:4c:4e:8f:4b:89:35:7a:09:
81:b3:1a:3d:63:16:dc:f2:88:a2:ec:b4:ef:43:7a:
12:14:7e:a6:04:98:b6:2e:62:66:4c:e0:b0:05:62:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9F:40:21:BE:B3:44:CE:F9:50:ED:CD:E8:07:AE:A9:85:9D:D4:A6
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/694CCE66E53911EF9DD1B90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.3.226.0/24
203.198.4.0/24
203.198.7.0/25
203.198.23.0/24
203.198.24.64/26
218.102.1.0-218.102.3.255
218.102.11.64/27
218.102.16.0/25
218.102.16.208/30
218.102.20.80/28
218.102.20.128/27
218.102.20.192/26
218.102.21.32/28
218.102.21.224/27
218.102.22.64/26
218.102.23.0/24
218.102.32.0/24
218.102.34.0/24
218.102.43.64/26
218.102.48.0-218.102.49.63
218.102.49.80/28
218.102.49.128-218.102.49.207
218.102.50.0/23
218.102.52.80/28
218.102.53.0/24
218.102.60.64/26
218.102.62.0/24
219.76.0.64/27
219.76.5.0/25
219.76.7.0/25
219.76.14.64/26
219.76.26.128/25
219.76.64.64/26
219.76.64.160/28
219.76.64.192/26
219.76.67.96/27
219.76.68.0/25
219.76.94.0/23
219.76.98.64/27
219.76.99.0-219.76.100.255
219.76.104.64/28
219.76.111.0-219.76.112.255
Signature Algorithm: sha256WithRSAEncryption
13:50:0a:6c:36:11:99:33:78:56:a9:9c:3c:e9:62:7c:c9:7a:
82:95:d9:bf:94:a5:f3:e1:92:f6:59:e1:5e:97:ef:18:c7:4e:
2a:f1:87:49:21:81:74:2b:97:a8:02:c2:05:04:c5:e8:66:6f:
49:47:60:fc:f5:b3:34:4b:25:15:9c:e2:04:2e:4e:84:95:d1:
a6:80:fe:dc:64:a1:e3:1e:43:82:df:c0:51:47:95:7a:7d:d1:
92:de:7c:35:c9:7f:ba:1a:75:77:07:d1:89:21:fc:dc:e0:c1:
ba:87:c3:e0:2f:db:55:23:69:8d:aa:66:b9:12:a6:77:02:2c:
78:d1:44:f5:dc:48:56:bd:f6:1d:db:c2:83:33:30:5f:3c:0f:
b4:52:5a:7f:53:a1:46:a1:b6:af:53:17:ed:ab:df:00:83:41:
80:d1:12:bc:5f:87:84:b1:f1:ba:88:07:ee:9b:b3:db:10:62:
ec:7c:84:80:93:c7:6f:8c:1f:89:2c:1d:90:a8:66:b3:43:64:
02:4f:26:c7:21:d0:92:c8:66:4b:37:4b:c0:63:63:46:b6:07:
0a:a7:eb:65:9e:6d:9e:c4:37:a1:bd:2e:32:e6:f4:bd:f4:71:
c7:68:48:87:6c:0e:aa:8e:60:4d:d6:26:7b:7e:9c:3c:a4:d4:
92:ff:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:35:48 2025 by rpki-client