Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/879491BCDC9011EFA1551458C4F9AE02.roa
File: 879491BCDC9011EFA1551458C4F9AE02.roa (raw, json)
Hash identifier: 6sNVpFwvyE2inE9XaR78ADvo3B6OLqp80N0aKnR5TE0=
Subject key identifier: 66:C9:0D:21:FA:C7:47:D4:44:D3:B5:AE:29:C2:D5:AE:3E:AC:A9:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A398
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/879491BCDC9011EFA1551458C4F9AE02.roa
Signing time: Mon 27 Jan 2025 09:24:38 +0000
ROA not before: Mon 27 Jan 2025 09:24:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
103.37.98.0/23 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.115.128.0/24 maxlen: 24
103.115.131.0/24 maxlen: 24
103.120.108.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.148.119.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.154.56.0/23 maxlen: 24
103.156.121.0/24 maxlen: 24
103.157.188.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.0.0/24 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.48.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.178.24.0/23 maxlen: 24
103.178.117.0/24 maxlen: 24
103.179.50.0/23 maxlen: 24
103.181.66.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.191.202.0/23 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.141.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df0:47c0::/48 maxlen: 48
2001:df1:d240::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2401:bba0::/32 maxlen: 32
2405:e100:a::/48 maxlen: 48
2405:e100:b::/48 maxlen: 48
2405:e100:c::/48 maxlen: 48
2405:e100:d::/48 maxlen: 48
2405:e100:e::/48 maxlen: 48
2405:e100:f::/48 maxlen: 48
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41880 (0xa398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 27 09:24:38 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679750d6-b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:bf:b1:1a:09:fa:f8:5c:83:83:4f:e9:9d:
df:4a:60:f5:e4:8d:73:d4:23:dc:e6:53:e3:cb:7c:
7c:46:ca:d4:1f:3f:6b:ce:b7:ad:6e:22:cd:29:84:
76:50:1f:c6:4a:93:72:f0:77:1e:d6:65:93:f2:d7:
a8:12:bd:c9:ca:16:85:85:98:2a:b6:a1:4d:5f:d5:
53:a5:f2:85:1f:4f:38:71:01:68:9b:0f:fd:66:9b:
60:81:7d:47:4c:5b:68:5a:6d:c0:c3:ee:7a:5f:db:
4b:7e:df:91:c2:ce:3e:17:25:41:ec:8e:b6:71:6a:
3c:56:a0:e8:20:83:7e:bd:97:50:40:f0:9c:df:e6:
ed:62:65:02:5d:61:2b:ef:36:67:bd:fa:88:a9:ac:
13:0b:93:c8:a6:52:ac:0d:a1:4c:46:22:01:2c:a8:
31:b0:3c:dc:2a:9d:ee:84:21:39:b1:f0:1d:8d:99:
53:83:5c:60:73:37:e6:44:28:d5:b8:8e:6a:ae:2a:
de:5b:95:a6:4c:48:14:89:b8:f8:d8:3e:36:2e:ee:
53:c4:2e:79:9f:26:eb:6a:11:9d:a3:3a:85:de:84:
52:1f:c8:e7:f4:a2:70:a1:f5:32:35:37:76:78:93:
fb:db:bc:27:6b:5e:a3:d9:72:23:10:4e:64:bd:25:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:0D:21:FA:C7:47:D4:44:D3:B5:AE:29:C2:D5:AE:3E:AC:A9:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/879491BCDC9011EFA1551458C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
103.37.98.0/23
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.88.59.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.115.128.0/24
103.115.131.0/24
103.120.108.0/24
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.148.119.0/24
103.154.8.0/23
103.154.56.0/23
103.156.121.0/24
103.157.188.0/23
103.158.41.0/24
103.159.104.0/23
103.160.25.0/24
103.160.222.0/24
103.164.140.0/24
103.165.88.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.0.0/24
103.170.36.0/22
103.170.48.0/23
103.170.84.0/23
103.174.28.0/23
103.178.24.0/23
103.178.117.0/24
103.179.50.0/23
103.181.66.0/24
103.181.119.0/24
103.184.41.0/24
103.184.205.0/24
103.191.202.0/23
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.141.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df0:47c0::/48
2001:df1:d240::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df2:9640::/48
2001:df3:1340::/48
2400:d660::/32
2401:bba0::/32
2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:b9:27:44:8e:df:27:cc:76:ab:9f:b9:74:cc:57:82:cc:f0:
f2:76:99:88:86:91:2e:bb:64:b9:7f:36:59:50:20:73:bf:87:
a2:8a:81:8d:df:7f:4f:b7:a0:e8:af:b8:98:34:d5:70:7a:50:
77:d3:65:d3:4d:de:26:2a:8d:a2:3c:d8:0a:cd:7c:0c:7f:83:
85:bd:08:3d:20:90:11:46:8c:a3:60:e9:9e:ee:41:c1:21:aa:
52:e2:d3:03:73:35:c1:fe:f8:dc:4e:ac:29:9b:e8:65:a9:98:
d0:b7:45:d6:ef:50:c6:09:cc:3f:ba:e5:6d:c5:11:80:92:da:
c8:80:b0:de:63:e8:c8:c7:22:43:9b:6c:59:1f:6c:26:44:97:
cf:aa:c9:83:d4:7c:77:4d:db:c8:ec:10:c4:fe:4c:c4:10:04:
39:de:df:3c:59:a7:15:60:d9:05:d2:a6:45:03:91:02:94:a4:
c6:35:ab:8d:ef:e4:d7:6d:02:ba:a8:1f:34:b1:00:0a:bd:7b:
0e:cf:99:06:fa:f4:10:86:7d:a1:c3:b3:3b:24:2d:1d:31:94:
99:8f:87:cb:8e:80:ad:73:68:07:54:7f:49:04:e2:46:06:c8:
b7:10:23:36:1d:91:45:10:17:f7:d0:67:87:e3:eb:63:51:46:
7e:3d:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:57:25 2025 by rpki-client