Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B794890DFD111EF816BF855C4F9AE02.roa
File: 5B794890DFD111EF816BF855C4F9AE02.roa (raw, json)
Hash identifier: IXBSQyjUzOLpo0tlf0jpbHcl2F1xyxUsBXn2ZsmwCKw=
Subject key identifier: 54:99:75:70:DC:00:BB:A4:01:74:64:A1:62:75:67:A0:59:68:5E:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A470
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B794890DFD111EF816BF855C4F9AE02.roa
Signing time: Fri 31 Jan 2025 12:46:15 +0000
ROA not before: Fri 31 Jan 2025 12:46:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.21.232.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.116.60.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
150.129.88.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42096 (0xa470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 31 12:46:15 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679cc617-457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:d9:ed:6a:e3:fb:0d:ac:ab:4c:1e:a5:15:
2e:62:40:29:6f:38:79:50:07:e7:35:b1:b4:78:84:
09:24:61:bb:8a:a8:aa:43:c2:17:46:c2:22:be:95:
f4:1d:1e:53:2b:33:01:fd:83:3b:19:dd:28:01:3d:
94:e6:66:99:2d:17:17:73:8c:3c:7c:bf:17:15:47:
2a:99:9a:16:3a:0b:b5:8f:9f:57:c0:c0:03:cb:74:
32:7d:5d:51:7f:b9:84:44:fe:ab:a4:c1:cb:48:47:
4f:03:94:b3:d3:d7:55:e1:16:6a:b3:b3:06:36:fb:
fe:97:cf:e0:18:63:4e:b8:3f:1d:0c:2f:3e:0d:35:
15:7b:6d:f0:fd:48:d4:17:f3:49:fe:1e:5d:02:bc:
f8:66:a0:b0:95:aa:d8:0e:15:67:93:e6:49:21:84:
04:c1:91:8d:99:26:05:bc:f3:5e:d8:0c:94:07:83:
ef:ff:b3:54:d7:72:33:7a:86:cb:2e:a3:37:c3:4b:
26:27:2e:83:68:38:1d:25:07:28:e1:99:ad:87:fb:
9d:19:fe:73:f9:3c:2f:b7:b1:60:71:3c:03:7c:78:
e7:f7:50:3f:98:df:57:e8:04:c4:2b:0d:a6:7e:d2:
ba:29:60:fa:3d:75:33:0c:71:f6:76:7c:74:87:52:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:75:70:DC:00:BB:A4:01:74:64:A1:62:75:67:A0:59:68:5E:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B794890DFD111EF816BF855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.21.232.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.116.60.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.153.208.0/23
103.155.194.0/23
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
150.129.88.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
3f:16:20:36:13:0e:c5:a4:fa:9b:fb:f1:6e:7d:56:f3:97:16:
be:5e:83:fb:ab:ad:6a:2d:17:fc:8b:63:c5:fe:be:56:b5:2b:
e7:78:ed:51:a4:57:fe:05:0d:f4:3c:51:35:6c:4b:8c:7c:65:
cd:84:3b:97:b4:2b:6c:0e:53:0c:2e:bd:a0:62:ed:c4:df:83:
5b:bd:b0:bc:4e:c6:d4:d6:04:84:04:9f:f3:3d:f2:5f:07:b9:
fe:ec:91:88:f4:e7:56:97:8d:ef:13:c8:97:78:7d:a1:17:d3:
26:02:8b:59:3e:a6:c8:0f:e8:a5:64:1d:16:40:4d:36:97:94:
a4:be:8a:da:00:a0:de:a1:e8:ec:89:e2:7a:80:48:6b:e8:e9:
cf:f8:24:79:ea:28:08:6f:17:fd:e2:8a:47:53:bd:db:f3:36:
6f:7f:e2:01:85:07:e4:2e:f3:50:92:9b:53:de:c5:ea:78:52:
c8:8f:e1:3f:ae:94:26:bd:33:fe:6b:fc:11:8e:6d:7c:a6:b4:
f9:25:71:ba:48:1e:22:0f:93:4f:b9:e8:87:ca:d0:54:0c:28:
ee:ae:9a:92:18:10:70:dc:4a:8c:4c:16:2d:fe:88:67:6f:7d:
9d:13:87:d9:1f:17:eb:0d:51:32:4b:1a:04:09:8b:94:9f:2c:
16:1c:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:36:44 2025 by rpki-client