Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8B9BC4AE1C11EFA5D18944C4F9AE02.roa
File: 9E8B9BC4AE1C11EFA5D18944C4F9AE02.roa (raw, json)
Hash identifier: XyDvTTb7935cI3yLurwGSoQ9uG+H0hLJzmFWCrEQLD0=
Subject key identifier: C4:A5:CE:A1:D2:68:BE:F7:31:D7:9F:5B:FD:01:83:41:E1:1B:D3:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E28
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8B9BC4AE1C11EFA5D18944C4F9AE02.roa
Signing time: Fri 29 Nov 2024 06:46:58 +0000
ROA not before: Fri 29 Nov 2024 06:46:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/22 maxlen: 24
14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.28.0/22 maxlen: 24
14.102.28.0/24 maxlen: 24
14.102.29.0/24 maxlen: 24
14.102.30.0/24 maxlen: 24
14.102.31.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/22 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/22 maxlen: 24
14.102.92.0/24 maxlen: 24
14.102.93.0/24 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.99.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.124.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.245.136.0/22 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/23 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/22 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.100.0/22 maxlen: 24
103.122.84.0/24 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.145.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/22 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.232.0/24 maxlen: 24
114.69.234.0/24 maxlen: 24
114.69.235.0/24 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
150.107.192.0/22 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40488 (0x9e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 29 06:46:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67496362-e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:e7:8a:66:f3:be:19:7e:70:8c:d0:61:41:
b7:db:3a:32:ea:0c:90:4b:96:c7:af:28:86:58:ec:
a6:e2:ba:f2:e1:e9:ca:47:26:29:99:cd:ae:cb:0e:
5b:08:89:78:c5:be:18:05:1a:e9:01:04:60:33:34:
05:67:ae:c1:6e:8d:f8:e4:9d:de:85:d9:5b:3a:ea:
c0:45:6b:84:65:f1:2f:62:a2:4e:e7:8b:d4:87:7b:
6a:b8:fe:a4:68:82:25:f6:9b:06:d7:72:aa:43:f7:
14:91:6f:73:e6:89:45:35:52:ac:df:7e:12:20:a1:
5a:be:c5:c8:2c:7c:34:ff:9d:8a:01:d1:f2:a3:49:
cf:bf:ea:62:eb:39:bd:c0:79:13:37:12:dd:fa:66:
6f:8d:fd:75:96:50:65:1f:2f:9e:1e:d3:70:58:b2:
0f:1f:b1:f9:86:a4:11:d8:eb:a9:88:2e:e2:11:2c:
7d:5b:13:33:7e:39:bf:f5:fc:0e:e8:02:20:1d:3a:
ee:de:63:2b:06:f2:40:b7:d1:9b:83:8a:7f:a6:de:
23:7d:57:30:98:0c:5b:61:26:99:5e:04:df:78:95:
6b:76:b4:a0:1a:15:23:57:4e:02:92:dc:3f:9a:55:
f4:9c:58:05:63:e0:08:d0:e6:2b:0a:bc:f4:4f:8d:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:CE:A1:D2:68:BE:F7:31:D7:9F:5B:FD:01:83:41:E1:1B:D3:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8B9BC4AE1C11EFA5D18944C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/22
14.102.22.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0-14.102.50.255
14.102.56.0/22
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.97.255
14.102.99.0-14.102.101.255
14.102.103.0-14.102.127.255
43.245.136.0/22
43.251.212.0/22
61.14.228.0/23
61.14.231.0/24
103.5.200.0/22
103.59.189.0/24
103.87.100.0/22
103.122.84.0/24
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.145.0/24
110.172.147.0/24
110.172.150.0-110.172.164.255
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0-114.69.232.255
114.69.234.0/23
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
150.107.192.0/22
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0/22
Signature Algorithm: sha256WithRSAEncryption
41:19:39:59:d2:29:af:fb:43:49:ee:31:a4:94:22:bb:65:a4:
eb:7d:79:4d:c5:b3:24:f8:31:9a:7c:bc:65:95:a6:f1:bc:4b:
a6:98:65:65:e7:10:82:85:dc:20:d2:29:be:05:54:b2:07:9d:
3f:b4:c4:d9:88:09:6d:ae:17:45:26:55:1e:39:06:e3:f1:34:
d8:63:45:47:7c:f5:26:10:f5:89:fa:28:9c:5f:81:48:91:b5:
82:76:10:4b:56:62:46:b3:7e:dd:8a:e0:b5:e8:c7:a3:13:4d:
45:4d:95:96:af:81:57:61:1b:3c:2e:22:4e:85:ed:55:6d:81:
ca:da:05:56:a5:7a:25:a2:77:41:4e:83:7c:78:67:03:95:55:
18:11:d3:4a:89:6b:c9:bd:63:76:01:6f:77:bf:02:a2:32:4a:
d3:6c:b7:70:1c:5c:f4:33:a4:a0:96:43:c9:ca:4f:cd:06:fc:
23:6d:2a:ff:af:5b:d3:c5:58:07:72:d1:d1:e6:fa:a3:4a:1f:
a7:cd:9f:12:f3:df:9b:b3:5c:00:58:8b:b1:d6:38:6c:ac:5b:
f2:c8:53:c6:06:78:53:1b:39:a7:0a:56:aa:28:f4:95:cf:0f:
ca:39:82:d8:46:77:61:53:15:c1:83:5f:8b:c6:a1:11:57:52:
24:47:8e:b7
-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgIDAJ4oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTEyOTA2NDY1OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc0OTYzNjItZTVjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMqL54pm874ZfnCM0GFBt9s6MuoMkEuWx68ohljspuK68uHpykcmKZnNrssO
WwiJeMW+GAUa6QEEYDM0BWeuwW6N+OSd3oXZWzrqwEVrhGXxL2KiTueL1Id7arj+
pGiCJfabBtdyqkP3FJFvc+aJRTVSrN9+EiChWr7FyCx8NP+digHR8qNJz7/qYus5
vcB5EzcS3fpmb439dZZQZR8vnh7TcFiyDx+x+YakEdjrqYgu4hEsfVsTM345v/X8
DugCIB067t5jKwbyQLfRm4OKf6beI31XMJgMW2EmmV4E33iVa3a0oBoVI1dOApLc
P5pV9JxYBWPgCNDmKwq89E+Nu/UCAwEAAaOCBDkwggQ1MB0GA1UdDgQWBBTEpc6h
0mi+9zHXn1v9AYNB4RvT2TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFOEI5QkM0
QUUxQzExRUZBNUQxODk0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBwQYIKwYBBQUHAQcB
Af8EggGwMIIBrDCCAagEAgABMIIBoAMEAg5mADAMAwQBDmYWAwQADmYmMAwDBAMO
ZigDBAEOZiwwDAMEBA5mMAMEAA5mMgMEAg5mODAMAwQGDmZAAwQADmZOAwQCDmZQ
AwQADmZYMAwDBAAOZlsDBAEOZmAwDAMEAA5mYwMEAQ5mZDAMAwQADmZnAwQHDmYA
AwQCK/WIAwQCK/vUAwQBPQ7kAwQAPQ7nAwQCZwXIAwQAZzu9AwQCZ1dkAwQAZ3pU
AwQAZ56DAwQAZ6AYAwQBZ69IAwQBZ7AIMAwDBAFurIIDBABurIQwDAMEAW6shgME
AG6siDAMAwQBbqyKAwQAbqyMAwQAbqyRAwQAbqyTMAwDBAFurJYDBABurKQwDAME
AW6spgMEAG6sqAMEAW6sqgMEAW6srjAMAwQAbqyxAwQCbqywAwQCbqy4AwQCb+tA
MAwDBAJyReQDBAByRegDBAFyReoDBAByRfADBAFyRfIDBAFyRfgDBAJyRfwwDAME
BHZbsAMEAHZbsgMEAHZbvQMEAHZbvwMEApZrwDAMAwQGyllAAwQAyllIAwQAyllK
AwQCyllMMA0GCSqGSIb3DQEBCwUAA4IBAQBBGTlZ0imv+0NJ7jGklCK7ZaTrfXlN
xbMk+DGafLxllabxvEummGVl5xCChdwg0im+BVSyB50/tMTZiAltrhdFJlUeOQbj
8TTYY0VHfPUmEPWJ+iicX4FIkbWCdhBLVmJGs37diuC16MejE01FTZWWr4FXYRs8
LiJOhe1VbYHK2gVWpXolondBToN8eGcDlVUYEdNKiWvJvWN2AW93vwKiMkrTbLdw
HFz0M6SglkPJyk/NBvwjbSr/r1vTxVgHctHR5vqjSh+nzZ8S89+bs1wAWIux1jhs
rFvyyFPGBnhTGzmnClaqKPSVzw/KOYLYRndhUxXBg1+LxqERV1IkR463
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:34:04 2025 by rpki-client