Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
File: 828B2FD6173511EEBCEA943CC4F9AE02.roa (raw, json)
Hash identifier: FxoWoL6MTAaLzNfSDCNiaNctY7uqYP9Q5FystQHad8w=
Subject key identifier: 92:02:2D:DB:0E:50:E3:2B:8A:A7:B0:9F:98:56:F8:D2:FA:08:5A:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 946D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
Signing time: Fri 12 Jul 2024 06:47:00 +0000
ROA not before: Fri 12 Jul 2024 06:47:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.141.166.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/23 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37997 (0x946d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 12 06:47:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6690d164-ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:ef:53:bc:02:4c:f9:08:f3:09:c1:dc:dd:
98:99:8d:4a:53:42:ec:ae:4a:30:70:9e:9e:dd:d9:
2c:ad:cf:64:56:5c:9e:7f:ed:b5:61:bf:c1:43:a8:
65:02:91:35:ee:ed:db:3b:74:0c:2c:e4:be:52:c4:
ab:8c:eb:25:3c:31:33:20:30:ae:3c:27:fc:07:27:
ab:2f:77:17:91:45:87:42:1a:9d:53:94:73:ac:52:
6a:e8:cb:c7:c8:c3:ac:3b:1b:7a:bb:0c:4c:8d:d5:
ea:f9:d5:8a:17:58:4f:f0:65:fc:d3:23:8c:9f:2c:
b6:36:4b:10:1b:b8:76:b8:10:d2:80:1d:ca:ec:da:
97:31:d7:38:fd:04:07:05:18:d7:48:b0:75:c9:34:
a1:68:ed:1d:58:ef:2d:5d:60:f6:ee:36:e1:c8:6d:
13:75:5b:b0:e6:0c:4e:a8:65:67:2e:4f:2b:4e:ff:
a9:5b:d1:b3:9f:cb:dc:97:60:70:53:f3:a9:8e:40:
3a:12:bd:63:e3:52:0f:9f:e8:9a:37:6f:47:33:ed:
8b:58:cf:f4:4b:8d:d4:95:d7:ca:9d:a6:d2:21:43:
68:34:8f:d1:6c:a5:11:a0:f4:20:38:6c:f4:91:23:
7b:49:20:1b:0e:44:99:51:2c:15:75:f0:eb:2b:34:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:2D:DB:0E:50:E3:2B:8A:A7:B0:9F:98:56:F8:D2:FA:08:5A:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.141.166.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0/22
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
aa:13:f6:0a:1e:b7:28:5b:40:98:76:dc:e5:01:dc:a5:61:94:
89:c6:f3:eb:f5:c3:b7:c6:d7:f3:0e:cb:75:3f:75:73:92:5e:
fc:b1:e4:6e:81:61:82:39:bd:7a:08:13:01:2b:d8:40:cd:b4:
f7:6d:6d:21:49:28:49:fc:00:4c:92:cb:63:c9:7d:de:24:3d:
50:e1:e4:8e:8a:07:30:79:6c:96:54:66:af:10:84:e2:76:d0:
41:3e:fd:8d:7d:2c:6a:52:2a:34:e8:3c:47:d3:c3:53:ff:9b:
01:ba:f4:ad:98:5d:a3:41:10:e6:b2:aa:4e:87:69:7e:c0:03:
a5:fa:5e:a9:d3:c3:b4:e9:d2:80:ad:61:f3:83:80:09:18:5a:
99:42:4d:75:15:7f:a6:2a:9a:2e:52:be:99:50:d2:58:81:74:
38:65:45:07:6e:c1:a7:8b:8c:aa:46:30:f9:c4:31:a2:72:3a:
29:3a:d8:cb:4c:2f:08:d6:e1:b6:55:4c:93:79:07:44:54:2a:
df:28:c7:37:19:7a:8a:49:54:39:d2:9f:22:03:f6:69:c6:a4:
dd:e6:49:45:e2:8c:3a:e9:b8:6b:e7:81:0c:13:d1:05:98:fc:
6f:3d:e9:a6:0c:36:ee:22:dd:28:97:96:b3:91:2d:96:52:f2:
51:a4:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:52 2025 by rpki-client