Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
File: 3D6EE0CACCE011EFA944933EC4F9AE02.roa (raw, json)
Hash identifier: q2WmUgBnNTKJtHuITM3o3qHI8JUeldMTEVGYdfxrw8s=
Subject key identifier: 7B:9B:72:17:0A:9D:3F:47:10:09:E1:61:93:6B:24:CA:B3:B8:91:E0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A5FE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
Signing time: Thu 13 Feb 2025 04:39:43 +0000
ROA not before: Thu 13 Feb 2025 04:39:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24554
IP address blocks: 36.255.108.0/22 maxlen: 24
36.255.180.0/22 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.224.172.0/22 maxlen: 24
43.241.116.0/22 maxlen: 24
45.116.44.0/22 maxlen: 24
45.117.48.0/22 maxlen: 22
45.117.48.0/24 maxlen: 24
45.117.49.0/24 maxlen: 24
45.117.50.0/24 maxlen: 24
45.117.51.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.117.148.0/22 maxlen: 22
45.117.148.0/24 maxlen: 24
45.117.149.0/24 maxlen: 24
45.117.150.0/24 maxlen: 24
45.117.151.0/24 maxlen: 24
45.117.248.0/22 maxlen: 22
45.117.248.0/24 maxlen: 24
45.117.249.0/24 maxlen: 24
45.117.250.0/24 maxlen: 24
45.117.251.0/24 maxlen: 24
58.146.96.0/19 maxlen: 24
103.29.208.0/22 maxlen: 24
103.51.208.0/22 maxlen: 24
103.53.60.0/22 maxlen: 22
103.53.60.0/24 maxlen: 24
103.53.61.0/24 maxlen: 24
103.53.62.0/24 maxlen: 24
103.53.63.0/24 maxlen: 24
103.53.232.0/22 maxlen: 22
103.53.232.0/24 maxlen: 24
103.53.233.0/24 maxlen: 24
103.53.234.0/24 maxlen: 24
103.53.235.0/24 maxlen: 24
103.54.104.0/22 maxlen: 24
103.57.172.0/22 maxlen: 24
103.195.76.0/22 maxlen: 24
103.200.100.0/22 maxlen: 24
103.200.212.0/22 maxlen: 24
103.203.60.0/22 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
120.138.0.0/22 maxlen: 24
180.148.32.0/19 maxlen: 24
182.237.128.0/18 maxlen: 24
183.87.0.0/21 maxlen: 22
183.87.0.0/24 maxlen: 24
183.87.1.0/24 maxlen: 24
183.87.2.0/24 maxlen: 24
183.87.3.0/24 maxlen: 24
183.87.4.0/24 maxlen: 24
183.87.5.0/24 maxlen: 24
183.87.6.0/24 maxlen: 24
183.87.7.0/24 maxlen: 24
183.87.8.0/22 maxlen: 22
183.87.8.0/24 maxlen: 24
183.87.9.0/24 maxlen: 24
183.87.10.0/24 maxlen: 24
183.87.11.0/24 maxlen: 24
183.87.16.0/22 maxlen: 22
183.87.16.0/24 maxlen: 24
183.87.17.0/24 maxlen: 24
183.87.18.0/24 maxlen: 24
183.87.19.0/24 maxlen: 24
183.87.20.0/22 maxlen: 22
183.87.20.0/24 maxlen: 24
183.87.21.0/24 maxlen: 24
183.87.22.0/24 maxlen: 24
183.87.23.0/24 maxlen: 24
183.87.24.0/22 maxlen: 22
183.87.24.0/24 maxlen: 24
183.87.25.0/24 maxlen: 24
183.87.26.0/24 maxlen: 24
183.87.27.0/24 maxlen: 24
183.87.28.0/22 maxlen: 22
183.87.28.0/24 maxlen: 24
183.87.29.0/24 maxlen: 24
183.87.30.0/24 maxlen: 24
183.87.31.0/24 maxlen: 24
183.87.224.0/20 maxlen: 24
202.177.224.0/19 maxlen: 19
202.177.224.0/22 maxlen: 22
202.177.224.0/24 maxlen: 24
202.177.225.0/24 maxlen: 24
202.177.226.0/24 maxlen: 24
202.177.227.0/24 maxlen: 24
202.177.228.0/22 maxlen: 22
202.177.228.0/24 maxlen: 24
202.177.229.0/24 maxlen: 24
202.177.230.0/24 maxlen: 24
202.177.231.0/24 maxlen: 24
202.177.232.0/22 maxlen: 22
202.177.232.0/24 maxlen: 24
202.177.233.0/24 maxlen: 24
202.177.234.0/24 maxlen: 24
202.177.235.0/24 maxlen: 24
202.177.236.0/22 maxlen: 22
202.177.236.0/24 maxlen: 24
202.177.237.0/24 maxlen: 24
202.177.238.0/24 maxlen: 24
202.177.239.0/24 maxlen: 24
202.177.240.0/22 maxlen: 22
202.177.240.0/24 maxlen: 24
202.177.241.0/24 maxlen: 24
202.177.242.0/24 maxlen: 24
202.177.243.0/24 maxlen: 24
202.177.244.0/22 maxlen: 22
202.177.244.0/24 maxlen: 24
202.177.245.0/24 maxlen: 24
202.177.246.0/24 maxlen: 24
202.177.247.0/24 maxlen: 24
202.177.248.0/22 maxlen: 22
202.177.248.0/24 maxlen: 24
202.177.249.0/24 maxlen: 24
202.177.250.0/24 maxlen: 24
202.177.251.0/24 maxlen: 24
202.177.252.0/22 maxlen: 22
202.177.252.0/24 maxlen: 24
202.177.253.0/24 maxlen: 24
202.177.254.0/24 maxlen: 24
202.177.255.0/24 maxlen: 24
2402:b00::/32 maxlen: 32
2402:b00::/40 maxlen: 48
2402:b00:100::/40 maxlen: 48
2402:b00:200::/40 maxlen: 48
2402:b00:fffb::/48 maxlen: 48
2402:b00:fffc::/48 maxlen: 48
2402:b00:fffd::/48 maxlen: 48
2402:b00:fffe::/48 maxlen: 48
2402:b00:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42494 (0xa5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 13 04:39:43 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ad778f-6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:92:cd:42:82:96:ff:91:75:e9:6a:35:06:
24:54:08:15:99:23:17:db:86:64:ca:3e:b0:78:45:
f1:98:c5:25:17:5d:1a:fd:2c:ac:60:de:7f:4b:ae:
76:80:ad:96:84:06:2b:de:b2:0f:6d:a8:ed:b4:82:
cd:9c:28:2a:a1:c5:9d:f2:d0:35:c0:7b:3a:ed:24:
94:ff:b6:c9:ff:19:3d:f9:31:84:98:3e:7f:5a:aa:
fa:b0:f3:1e:09:8e:c5:6f:91:86:6a:dc:28:f1:96:
7e:d1:8d:35:66:87:d7:f2:35:26:9d:b3:59:0b:e4:
64:b1:2e:89:eb:46:bb:ac:0c:99:f6:d4:d5:bd:41:
d9:d1:17:56:85:8c:5f:b6:c7:c3:e2:37:4c:61:26:
59:39:05:15:fa:14:eb:46:e1:f1:98:8e:14:9a:c2:
23:72:67:09:f0:18:17:3d:1b:96:92:ce:3f:3a:b4:
00:90:80:20:34:23:01:2d:73:b6:bd:5e:95:2f:a4:
d7:ad:82:a3:42:24:da:8e:05:a4:ac:5b:f3:51:c7:
38:40:20:18:a9:55:1b:39:ad:6e:f9:f6:0d:35:e8:
3c:a9:59:bd:bd:3c:9f:c9:7e:13:f0:31:02:6d:bc:
2b:2e:c0:dc:00:0b:aa:5f:85:10:e0:7f:14:76:4a:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:72:17:0A:9D:3F:47:10:09:E1:61:93:6B:24:CA:B3:B8:91:E0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.108.0/22
36.255.180.0-36.255.187.255
43.224.172.0/22
43.241.116.0/22
45.116.44.0/22
45.117.48.0/22
45.117.108.0/22
45.117.148.0/22
45.117.248.0/22
58.146.96.0/19
103.29.208.0/22
103.51.208.0/22
103.53.60.0/22
103.53.232.0/22
103.54.104.0/22
103.57.172.0/22
103.195.76.0/22
103.200.100.0/22
103.200.212.0/22
103.203.60.0/22
103.214.230.0/23
103.215.96.0/23
103.234.212.0/22
103.234.240.0/22
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
120.138.0.0/22
180.148.32.0/19
182.237.128.0/18
183.87.0.0-183.87.11.255
183.87.16.0/20
183.87.224.0/20
202.177.224.0/19
IPv6:
2402:b00::/32
Signature Algorithm: sha256WithRSAEncryption
14:65:ec:51:fb:8b:38:bf:a6:ba:37:36:52:f0:a0:4e:b7:de:
f6:ef:2e:4c:af:d1:70:e3:e7:2f:38:1a:c0:25:96:f0:68:1d:
fc:35:89:41:11:41:7f:a4:80:b0:c4:85:07:3b:cc:48:7a:e7:
01:9b:2c:26:f8:ec:9b:52:24:d8:4c:92:4b:ba:8d:63:f3:70:
85:63:d8:17:1e:96:a0:39:d2:c9:4e:dc:50:e0:01:88:6d:64:
e5:0b:6e:c9:58:70:cf:59:f1:86:18:fc:a3:55:ea:26:89:e2:
ba:64:c2:ad:ca:d9:33:11:d1:b6:4c:26:ff:2f:98:18:bd:50:
8b:10:55:0c:10:dd:95:da:bf:78:9c:71:0b:50:dc:93:46:b2:
dd:dc:d8:10:b2:f4:47:ab:40:57:ca:da:c7:9f:85:de:d2:38:
07:8d:f1:e0:9f:14:8c:0d:ca:34:5b:d2:be:5f:dc:93:4c:c5:
b4:ad:f5:3b:60:2c:9e:4a:b3:da:5c:96:dd:38:d5:61:90:ac:
0d:d2:4d:6b:8f:9e:e9:e6:98:f4:3e:76:3c:88:95:6b:77:01:
64:61:44:49:d5:3b:9c:41:b4:c3:4e:ab:dd:79:a4:f2:2c:24:
87:76:02:b1:44:fc:4c:40:20:87:ed:d3:d7:09:50:76:e6:02:
20:49:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:56 2025 by rpki-client