Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
File: 0BA74CC46EF111EEB2AAC928C4F9AE02.roa (raw, json)
Hash identifier: sSqCRXgaXdcP/1HFPLoOeSD5w+f3YRFNDYQNQ9WN49E=
Subject key identifier: DE:04:B9:12:6D:7A:60:89:B5:75:F7:0A:2F:0A:79:A9:81:12:3C:79
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 491B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
Signing time: Thu 02 Jan 2025 03:06:37 +0000
ROA not before: Thu 02 Jan 2025 03:06:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38733
IP address blocks: 42.96.33.0/24 maxlen: 24
42.96.36.0/23 maxlen: 24
42.96.62.0/24 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.244.0/24 maxlen: 24
103.82.32.0/22 maxlen: 24
103.117.196.0/23 maxlen: 23
103.188.20.0/23 maxlen: 23
103.190.38.0/23 maxlen: 24
115.165.161.0/24 maxlen: 24
115.165.162.0/23 maxlen: 24
115.165.164.0/23 maxlen: 24
115.165.167.0/24 maxlen: 24
119.82.133.0/24 maxlen: 24
124.158.8.0/21 maxlen: 24
124.158.8.0/24 maxlen: 24
124.158.9.0/24 maxlen: 24
124.158.10.0/24 maxlen: 24
124.158.11.0/24 maxlen: 24
124.158.12.0/24 maxlen: 24
124.158.13.0/24 maxlen: 24
124.158.15.0/24 maxlen: 24
203.167.12.0/22 maxlen: 24
2400:8c60::/48 maxlen: 48
2402:5300:4020::/48 maxlen: 48
2402:5300:4021::/48 maxlen: 48
2402:5300:4e00::/40 maxlen: 48
2402:5300:7100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18715 (0x491b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Jan 2 03:06:37 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=677602bd-9b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:be:cb:b1:8e:89:c4:5d:6b:d5:37:99:d7:
75:5a:2a:7a:27:1a:dd:78:83:f4:90:a1:1f:37:4a:
1b:df:d9:6b:56:59:9a:50:69:cf:81:d5:f4:d6:61:
00:d6:96:8d:5d:54:37:7c:c8:e0:ff:47:8b:4d:5a:
5a:20:86:f2:06:ad:34:0c:2f:6f:4b:b5:5c:0b:c1:
25:2f:cc:80:c5:cc:b4:04:c2:ea:04:12:75:3b:c2:
10:26:bf:dc:66:7f:c7:bc:a9:8a:14:31:bd:7b:c1:
3d:16:03:09:ec:9e:c0:db:02:72:5d:b0:4f:c6:d2:
0a:89:5d:47:22:88:8e:20:84:95:0c:c2:7e:9b:0b:
27:9e:f5:7b:f2:10:db:95:fd:e5:ff:97:2b:fe:6b:
a4:40:c7:74:99:62:cb:d6:a9:60:09:ee:3f:3b:a1:
1f:a2:e7:31:97:b6:f0:b5:b8:32:04:65:c7:a9:79:
67:6f:b7:14:18:b8:91:4b:e4:ed:6a:af:61:f4:99:
72:ab:1a:03:7d:e4:6f:16:27:08:b9:8d:c2:9d:30:
f9:be:db:50:f6:11:27:2f:4e:75:8a:df:27:f2:67:
da:55:ee:24:5e:80:12:d8:ab:c1:1c:58:d6:93:f0:
58:7c:c8:ca:e5:c6:99:68:b9:f3:37:4e:7a:96:ef:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:B9:12:6D:7A:60:89:B5:75:F7:0A:2F:0A:79:A9:81:12:3C:79
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.33.0/24
42.96.36.0/23
42.96.62.0/23
45.122.244.0/24
103.82.32.0/22
103.117.196.0/23
103.188.20.0/23
103.190.38.0/23
115.165.161.0-115.165.165.255
115.165.167.0/24
119.82.133.0/24
124.158.8.0/21
203.167.12.0/22
IPv6:
2400:8c60::/48
2402:5300:4020::/47
2402:5300:4e00::/40
2402:5300:7100::/40
Signature Algorithm: sha256WithRSAEncryption
1f:4d:0e:41:f9:0d:95:e9:35:41:ed:bc:67:e7:ee:bf:4c:87:
46:90:bc:41:1d:db:a1:26:00:46:ac:6c:43:a0:0b:d2:51:99:
fe:6c:dd:7e:bd:58:f1:e6:3d:ab:ac:8a:80:8a:ed:6a:07:2f:
5c:09:83:ee:ae:5f:c5:60:57:86:65:ca:c0:6c:57:2b:cf:fb:
c3:cb:d6:c6:e7:ba:cf:d1:17:f5:dc:60:c2:c8:a7:28:c0:22:
91:f4:3d:ed:f6:58:f8:53:40:8b:1f:ab:67:f5:50:7a:50:48:
ac:a9:d5:0a:7f:4a:f7:5e:69:7e:92:83:b6:32:cb:4e:71:79:
bb:89:43:7f:f2:28:9b:1d:91:3c:89:f5:72:af:55:d6:c3:e0:
fc:55:d9:67:60:d0:b2:47:60:fe:10:13:b0:ec:60:71:a4:c8:
4a:60:f2:73:85:fb:bb:50:76:de:f2:93:4c:60:4c:99:34:e3:
18:34:70:b6:6f:e5:72:d3:90:27:36:bc:9c:0f:fe:64:1b:83:
fa:6c:aa:69:9c:2d:d9:d8:d4:1b:e1:93:74:ae:18:5c:76:10:
b0:28:95:43:af:e5:7a:0e:32:97:89:41:81:ef:b8:21:84:77:
f2:65:27:6d:9c:df:37:99:e7:2d:1e:24:3f:f8:62:0c:4b:87:
e4:cf:62:44
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgICSRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMTAyMDMwNjM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc2MDJiZC05YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0x2+y7GOicRda9U3mdd1Wip6JxrdeIP0kKEfN0ob39lrVlmaUGnPgdX01mEA
1paNXVQ3fMjg/0eLTVpaIIbyBq00DC9vS7VcC8ElL8yAxcy0BMLqBBJ1O8IQJr/c
Zn/HvKmKFDG9e8E9FgMJ7J7A2wJyXbBPxtIKiV1HIoiOIISVDMJ+mwsnnvV78hDb
lf3l/5cr/mukQMd0mWLL1qlgCe4/O6Efoucxl7bwtbgyBGXHqXlnb7cUGLiRS+Tt
aq9h9JlyqxoDfeRvFicIuY3CnTD5vttQ9hEnL051it8n8mfaVe4kXoAS2KvBHFjW
k/BYfMjK5caZaLnzN056lu/qBQIDAQABo4IDEjCCAw4wHQYDVR0OBBYEFN4EuRJt
emCJtXX3Ci8KeamBEjx5MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEJBNzRDQzQ2
RUYxMTFFRUIyQUFDOTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZsGCCsGAQUFBwEHAQH/
BIGLMIGIMFwEAgABMFYDBAAqYCEDBAEqYCQDBAEqYD4DBAAtevQDBAJnUiADBAFn
dcQDBAFnvBQDBAFnviYwDAMEAHOloQMEAXOlpAMEAHOlpwMEAHdShQMEA3yeCAME
AsunDDAoBAIAAjAiAwcAJACMYAAAAwcBJAJTAEAgAwYAJAJTAE4DBgAkAlMAcTAN
BgkqhkiG9w0BAQsFAAOCAQEAH00OQfkNlek1Qe28Z+fuv0yHRpC8QR3boSYARqxs
Q6AL0lGZ/mzdfr1Y8eY9q6yKgIrtagcvXAmD7q5fxWBXhmXKwGxXK8/7w8vWxue6
z9EX9dxgwsinKMAikfQ97fZY+FNAix+rZ/VQelBIrKnVCn9K915pfpKDtjLLTnF5
u4lDf/Iomx2RPIn1cq9V1sPg/FXZZ2DQskdg/hATsOxgcaTISmDyc4X7u1B23vKT
TGBMmTTjGDRwtm/lctOQJza8nA/+ZBuD+myqaZwt2djUG+GTdK4YXHYQsCiVQ6/l
eg4yl4lBge+4IYR38mUnbZzfN5nnLR4kP/hiDEuH5M9iRA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:29:11 2025 by rpki-client