Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A4EA100A2011F094C5BC21C4F9AE02.roa
File: 85A4EA100A2011F094C5BC21C4F9AE02.roa (raw, json)
Hash identifier: UcRoOmoX7E1jSR1PtyL6EpzJUHNOygCqm/7Nay2aanE=
Subject key identifier: 9C:78:52:3B:DF:32:7A:F8:87:E9:DE:6C:D0:0D:8F:75:FA:BE:23:3A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ACCA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A4EA100A2011F094C5BC21C4F9AE02.roa
Signing time: Wed 26 Mar 2025 10:14:10 +0000
ROA not before: Wed 26 Mar 2025 10:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.72.106.0/23 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.98.194.0/23 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.0.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.181.8.0/23 maxlen: 24
103.182.140.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.253.168.0/22 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44234 (0xacca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 26 10:14:10 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e3d372-4afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:a2:d3:88:64:55:5c:af:cd:d5:e4:8f:0e:
a6:24:72:82:13:7d:77:a8:8e:2b:c8:b9:b5:e3:96:
33:b2:d2:d1:b1:6e:09:8f:20:6e:d5:f2:c3:f9:b7:
28:fc:af:f5:c3:d3:4c:6d:8a:29:1f:67:71:86:37:
80:40:bb:32:b9:e7:ac:bf:8d:2e:71:5a:0b:43:66:
1e:98:86:ac:45:1b:c3:54:e6:5c:c9:e7:86:3d:c2:
1f:85:fb:36:7a:c7:c4:62:6a:ed:0a:df:5c:b2:a5:
15:20:20:8e:18:53:c9:11:a8:eb:d1:33:cc:aa:9a:
df:46:c4:12:df:ef:8e:94:cd:c7:30:41:3d:e1:68:
13:e4:90:c2:80:a9:1c:55:2d:e3:be:a3:e8:d3:a1:
08:d2:54:81:67:b9:f7:de:6e:02:88:c0:bd:bc:25:
a9:aa:9d:ff:f7:25:f8:e2:0f:84:70:f0:e2:7b:15:
38:da:54:ae:59:fb:8a:96:96:9f:57:c7:b6:2e:d9:
52:36:45:4b:f2:3e:af:25:95:5a:44:a3:a8:6e:32:
31:03:88:88:2b:95:fb:04:e9:99:6c:6e:f1:21:90:
62:88:e7:24:99:4f:93:18:37:0c:c8:f6:df:03:ea:
86:e8:48:0b:33:bd:75:83:27:04:b8:93:99:5b:fb:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:52:3B:DF:32:7A:F8:87:E9:DE:6C:D0:0D:8F:75:FA:BE:23:3A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A4EA100A2011F094C5BC21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.72.106.0/23
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.98.194.0/23
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.162.80.0/23
103.165.10.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.169.156.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.0.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.181.8.0/23
103.182.140.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.253.168.0/22
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:39:d1:f2:d2:a9:a2:16:ca:c0:a3:f8:1b:e5:52:09:47:0e:
a1:52:a4:3e:81:57:90:93:37:54:5a:82:35:ec:36:36:4a:81:
62:6b:a6:1b:6a:f3:22:f4:8a:62:88:5b:62:fb:e0:ad:4a:e3:
a1:c7:58:46:4a:58:87:e9:60:68:3d:03:62:21:53:cd:68:d2:
cc:7a:a2:7a:3d:14:d5:c6:d1:17:a7:19:02:9b:90:9d:56:70:
b5:10:a1:78:30:70:13:ca:0b:8c:c0:0d:f7:84:06:a9:e6:89:
f5:f5:6f:08:b9:98:1c:b5:78:73:70:80:cc:2d:63:0f:f5:52:
56:ac:da:77:86:f3:05:0c:a1:42:27:47:8f:ab:42:99:00:b5:
f3:86:48:42:43:3c:b4:31:a6:d4:4a:34:92:dd:ef:03:e1:eb:
78:df:e2:d1:fa:16:f0:f2:6c:df:b0:09:0e:1a:00:b9:78:bc:
ba:53:10:fd:94:6b:3f:31:9a:27:4d:d8:64:4c:2f:a5:03:e7:
43:53:ac:70:be:6e:de:58:9a:12:e3:4c:b1:7d:8c:c8:e9:c5:
b9:40:ef:1c:fb:ec:5a:d0:9c:0c:bc:df:5a:31:c6:01:3f:ef:
cb:f6:46:57:7f:54:17:d6:8c:05:2e:e6:60:9b:ec:98:8c:a6:
a4:39:29:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:23:12 2025 by rpki-client