Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
File: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (raw, json)
Hash identifier: OIcrwBZfO0r9AZzqec0EZieuFLydO0IeQ37B1ozdZjo=
Subject key identifier: EA:79:E2:AF:31:8B:3A:B5:59:01:92:E7:84:72:01:82:1C:70:2C:4A
Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial: 0CC2
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
Signing time: Sun 09 Feb 2025 11:14:18 +0000
ROA not before: Sun 09 Feb 2025 11:14:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58715
IP address blocks: 45.113.132.0/22 maxlen: 24
59.152.96.0/20 maxlen: 24
103.21.40.0/22 maxlen: 24
103.85.156.0/22 maxlen: 24
144.48.116.0/22 maxlen: 24
182.48.64.0/19 maxlen: 24
2404:4f80::/32 maxlen: 36
2404:4f80::/48 maxlen: 48
2404:4f80:f::/48 maxlen: 48
2404:4f80:10::/48 maxlen: 48
2404:4f80:11::/48 maxlen: 48
2404:4f80:12::/48 maxlen: 48
2404:4f80:13::/48 maxlen: 48
2404:4f80:14::/48 maxlen: 48
2404:4f80:15::/48 maxlen: 48
2404:4f80:16::/48 maxlen: 48
2404:4f80:17::/48 maxlen: 48
2404:4f80:18::/48 maxlen: 48
2404:4f80:19::/48 maxlen: 48
2404:4f80:1a::/48 maxlen: 48
2404:4f80:1b::/48 maxlen: 48
2404:4f80:1c::/48 maxlen: 48
2404:4f80:1d::/48 maxlen: 48
2404:4f80:1e::/48 maxlen: 48
2404:4f80:1f::/48 maxlen: 48
2404:4f80:20::/48 maxlen: 48
2404:4f80:21::/48 maxlen: 48
2404:4f80:22::/48 maxlen: 48
2404:4f80:29::/48 maxlen: 48
2404:4f80:30::/48 maxlen: 48
2404:4f80:31::/48 maxlen: 48
2404:4f80:32::/48 maxlen: 48
2404:4f80:33::/48 maxlen: 48
2404:4f80:34::/48 maxlen: 48
2404:4f80:35::/48 maxlen: 48
2404:4f80:36::/48 maxlen: 48
2404:4f80:37::/48 maxlen: 48
2404:4f80:38::/48 maxlen: 48
2404:4f80:39::/48 maxlen: 48
2404:4f80:3a::/48 maxlen: 48
2404:4f80:3b::/48 maxlen: 48
2404:4f80:3c::/48 maxlen: 48
2404:4f80:3d::/48 maxlen: 48
2404:4f80:3e::/48 maxlen: 48
2404:4f80:71::/48 maxlen: 48
2404:4f80:72::/48 maxlen: 48
2404:4f80:73::/48 maxlen: 48
2404:4f80:31f::/48 maxlen: 48
2404:4f80:320::/48 maxlen: 48
2404:4f80:321::/48 maxlen: 48
2404:4f80:322::/48 maxlen: 48
2404:4f80:323::/48 maxlen: 48
2404:4f80:324::/48 maxlen: 48
2404:4f80:325::/48 maxlen: 48
2404:4f80:326::/48 maxlen: 48
2404:4f80:327::/48 maxlen: 48
2404:4f80:328::/48 maxlen: 48
2404:4f80:329::/48 maxlen: 48
2404:4f80:32a::/48 maxlen: 48
2404:4f80:32b::/48 maxlen: 48
2404:4f80:32c::/48 maxlen: 48
2404:4f80:32d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A998
Validity
Not Before: Feb 9 11:14:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67a88e09-9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:13:3f:59:fc:0d:20:a5:eb:9d:57:e0:0c:
94:bc:0e:0d:45:3c:06:db:fe:4c:ee:77:e4:d6:54:
0c:3e:34:2b:63:14:fc:41:b4:79:6d:08:d2:01:75:
f2:a4:e3:84:32:b1:d4:f7:a6:ba:92:f8:d7:ad:85:
41:3e:c0:da:cb:10:89:dd:74:5d:62:82:e7:27:d7:
49:09:0d:ab:7d:a6:55:57:fe:85:88:52:2c:a5:2b:
5e:4d:43:2e:16:01:42:ac:b3:b5:7a:c3:4e:31:95:
2e:7e:fe:9f:f6:61:d8:2f:60:45:3c:30:91:09:cb:
3b:ec:73:8f:4e:32:80:cb:6e:c8:ed:96:e4:ff:65:
67:5f:6f:49:ea:eb:9f:de:2a:48:77:fe:6d:f8:81:
8d:4f:4f:05:43:20:26:80:6e:88:50:67:33:a7:67:
6c:92:34:0d:f9:10:0a:88:f6:e0:6d:d7:43:3a:4b:
03:a9:e1:dc:e9:6f:dc:34:f4:e0:a3:c7:35:d2:32:
fe:a0:c7:5c:f0:78:5b:6c:b1:f7:32:7d:50:27:20:
e2:12:f7:a6:36:df:02:60:8e:c5:4e:f3:6b:c5:a4:
83:e1:1f:90:bb:3c:14:3a:07:ae:56:1f:bb:3c:de:
66:53:3e:05:1f:f7:1d:1c:cf:eb:46:a8:28:68:bf:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:E2:AF:31:8B:3A:B5:59:01:92:E7:84:72:01:82:1C:70:2C:4A
X509v3 Authority Key Identifier:
keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.132.0/22
59.152.96.0/20
103.21.40.0/22
103.85.156.0/22
144.48.116.0/22
182.48.64.0/19
IPv6:
2404:4f80::/32
Signature Algorithm: sha256WithRSAEncryption
b8:d8:63:a6:79:28:b8:99:b1:82:d9:b6:aa:e4:7a:69:21:d2:
47:45:84:b2:6c:8b:06:4d:4e:bb:ca:82:8d:8f:fe:05:a7:15:
4e:0f:e8:2d:59:08:59:2b:3f:11:d1:d3:c9:06:b1:9d:41:66:
bd:c4:9e:22:8b:44:1a:0a:3a:77:99:a2:ce:df:43:07:4b:80:
d7:75:7a:1f:3a:47:17:3e:50:8f:e4:c4:22:63:b4:f4:29:84:
85:1e:3d:33:1e:7a:c8:6e:a4:29:98:a4:90:b9:26:8f:be:7d:
72:7b:0c:9a:83:c7:ba:3b:de:bf:77:38:8c:f6:fb:1a:46:c4:
e9:80:ed:4b:b7:21:f8:c0:43:0f:01:75:54:16:35:3e:5a:89:
47:b8:c7:1c:93:09:8e:28:f7:25:d2:67:09:a1:26:a1:e3:22:
c1:5d:1d:e1:9e:91:07:7d:43:12:51:37:a5:8c:ba:06:e3:09:
31:d8:df:e5:31:f1:41:c2:5e:75:81:4b:c4:f4:b6:dd:da:01:
c3:2d:86:92:fc:de:d1:81:25:88:a5:56:69:e7:f4:32:28:a1:
51:9d:e5:80:24:ad:34:d1:8b:5e:77:42:0e:b8:ab:6c:b5:cc:
c5:17:e6:3b:d7:d1:f0:3c:b3:ce:83:1c:19:cc:22:f4:5a:55:
dc:1d:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:19 2025 by rpki-client