Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
File: 1DDD352E2AD111EFAE5FF358C4F9AE02.roa (raw, json)
Hash identifier: on8QL257RTNCU7XbiG21LokQ3wXTvPKXhFQjXXJMqGM=
Subject key identifier: 3F:75:1E:11:8C:D3:C1:85:0D:17:66:83:BC:08:A1:20:A7:92:FF:3E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 49ED
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
Signing time: Sat 01 Mar 2025 08:58:03 +0000
ROA not before: Sat 01 Mar 2025 08:58:03 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45899
IP address blocks: 14.160.0.0/11 maxlen: 24
14.224.0.0/16 maxlen: 24
14.226.0.0/15 maxlen: 24
14.228.0.0/14 maxlen: 24
14.232.0.0/13 maxlen: 24
14.240.0.0/12 maxlen: 24
43.239.220.0/23 maxlen: 24
103.53.168.0/23 maxlen: 24
103.89.92.0/22 maxlen: 24
103.161.38.0/23 maxlen: 24
103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
113.160.0.0/11 maxlen: 24
123.16.0.0/16 maxlen: 24
123.17.0.0/16 maxlen: 24
123.18.0.0/15 maxlen: 24
123.20.0.0/14 maxlen: 24
123.24.0.0/14 maxlen: 24
123.28.0.0/15 maxlen: 24
123.30.0.0/18 maxlen: 24
123.30.64.0/22 maxlen: 24
123.30.68.0/23 maxlen: 24
123.30.74.0/23 maxlen: 24
123.30.76.0/22 maxlen: 24
123.30.80.0/21 maxlen: 24
123.30.88.0/23 maxlen: 24
123.30.90.0/23 maxlen: 24
123.30.92.0/23 maxlen: 24
123.30.96.0/21 maxlen: 24
123.30.106.0/23 maxlen: 24
123.30.110.0/24 maxlen: 24
123.30.112.0/21 maxlen: 24
123.30.120.0/22 maxlen: 24
123.30.124.0/23 maxlen: 24
123.30.126.0/24 maxlen: 24
123.30.130.0/23 maxlen: 24
123.30.141.0/24 maxlen: 24
123.30.144.0/22 maxlen: 24
123.30.148.0/23 maxlen: 24
123.30.151.0/24 maxlen: 24
123.30.152.0/23 maxlen: 24
123.30.161.0/24 maxlen: 24
123.30.166.0/23 maxlen: 24
123.30.168.0/21 maxlen: 24
123.30.176.0/20 maxlen: 24
123.30.192.0/21 maxlen: 24
123.30.201.0/24 maxlen: 24
123.30.202.0/23 maxlen: 24
123.30.204.0/22 maxlen: 24
123.30.208.0/20 maxlen: 24
123.30.224.0/22 maxlen: 24
123.30.228.0/23 maxlen: 24
123.30.231.0/24 maxlen: 24
123.30.232.0/21 maxlen: 24
123.30.240.0/23 maxlen: 24
123.30.243.0/24 maxlen: 24
123.30.245.0/24 maxlen: 24
123.30.246.0/23 maxlen: 24
123.30.248.0/23 maxlen: 24
123.30.251.0/24 maxlen: 24
123.30.252.0/24 maxlen: 24
123.30.254.0/23 maxlen: 24
123.31.0.0/21 maxlen: 24
123.31.8.0/23 maxlen: 24
123.31.13.0/24 maxlen: 24
123.31.14.0/23 maxlen: 24
123.31.16.0/21 maxlen: 24
123.31.25.0/24 maxlen: 24
123.31.26.0/24 maxlen: 24
123.31.48.0/20 maxlen: 24
123.31.64.0/18 maxlen: 24
123.31.128.0/17 maxlen: 24
157.119.246.0/23 maxlen: 24
163.61.74.0/23 maxlen: 24
203.160.0.0/23 maxlen: 24
203.162.0.0/21 maxlen: 24
203.162.8.0/22 maxlen: 24
203.162.12.0/24 maxlen: 24
203.162.14.0/23 maxlen: 24
203.162.16.0/20 maxlen: 24
203.162.32.0/23 maxlen: 24
203.162.35.0/24 maxlen: 24
203.162.38.0/23 maxlen: 24
203.162.40.0/21 maxlen: 24
203.162.48.0/24 maxlen: 24
203.162.50.0/24 maxlen: 24
203.162.52.0/24 maxlen: 24
203.162.54.0/23 maxlen: 24
203.162.57.0/24 maxlen: 24
203.162.58.0/24 maxlen: 24
203.162.60.0/22 maxlen: 24
203.162.64.0/22 maxlen: 24
203.162.70.0/23 maxlen: 24
203.162.72.0/22 maxlen: 24
203.162.82.0/23 maxlen: 24
203.162.84.0/22 maxlen: 24
203.162.88.0/21 maxlen: 24
203.162.97.0/24 maxlen: 24
203.162.98.0/23 maxlen: 24
203.162.104.0/21 maxlen: 24
203.162.112.0/20 maxlen: 24
203.162.128.0/20 maxlen: 24
203.162.144.0/21 maxlen: 24
203.162.152.0/24 maxlen: 24
203.162.154.0/24 maxlen: 24
203.162.156.0/22 maxlen: 24
203.162.160.0/23 maxlen: 24
203.162.162.0/24 maxlen: 24
203.162.164.0/22 maxlen: 24
203.162.168.0/21 maxlen: 24
203.162.176.0/21 maxlen: 24
203.162.184.0/21 maxlen: 24
203.162.192.0/18 maxlen: 24
203.210.128.0/17 maxlen: 24
221.132.0.0/20 maxlen: 24
221.132.16.0/23 maxlen: 24
221.132.18.0/23 maxlen: 24
221.132.20.0/22 maxlen: 24
221.132.24.0/21 maxlen: 24
221.132.32.0/19 maxlen: 24
222.252.0.0/15 maxlen: 24
222.254.0.0/16 maxlen: 24
222.255.0.0/19 maxlen: 24
222.255.32.0/22 maxlen: 24
222.255.36.0/23 maxlen: 24
222.255.39.0/24 maxlen: 24
222.255.40.0/21 maxlen: 24
222.255.48.0/20 maxlen: 24
222.255.64.0/21 maxlen: 24
222.255.72.0/21 maxlen: 24
222.255.80.0/20 maxlen: 24
222.255.96.0/22 maxlen: 24
222.255.100.0/23 maxlen: 24
222.255.104.0/21 maxlen: 24
222.255.112.0/21 maxlen: 24
222.255.120.0/24 maxlen: 24
222.255.123.0/24 maxlen: 24
222.255.124.0/22 maxlen: 24
222.255.128.0/18 maxlen: 24
222.255.192.0/20 maxlen: 24
222.255.208.0/23 maxlen: 24
222.255.212.0/22 maxlen: 24
222.255.216.0/21 maxlen: 24
222.255.224.0/21 maxlen: 24
222.255.232.0/23 maxlen: 24
222.255.236.0/24 maxlen: 24
222.255.238.0/24 maxlen: 24
222.255.240.0/20 maxlen: 24
2001:df3:d8c0::/48 maxlen: 48
2001:df4:c340::/48 maxlen: 48
2001:ee0::/32 maxlen: 35
2001:ee0::/36 maxlen: 39
2001:ee0::/40 maxlen: 48
2001:ee0:100::/40 maxlen: 48
2001:ee0:200::/40 maxlen: 48
2001:ee0:400::/40 maxlen: 48
2001:ee0:500::/40 maxlen: 48
2001:ee0:600::/40 maxlen: 48
2001:ee0:700::/40 maxlen: 48
2001:ee0:800::/40 maxlen: 48
2001:ee0:900::/40 maxlen: 48
2001:ee0:a00::/40 maxlen: 48
2001:ee0:b00::/40 maxlen: 48
2001:ee0:c00::/40 maxlen: 48
2001:ee0:d00::/40 maxlen: 48
2001:ee0:e00::/40 maxlen: 48
2001:ee0:f00::/40 maxlen: 48
2001:ee0:1000::/36 maxlen: 48
2001:ee0:2000::/36 maxlen: 48
2001:ee0:3000::/36 maxlen: 48
2001:ee0:4000::/36 maxlen: 48
2001:ee0:5000::/36 maxlen: 48
2001:ee0:6000::/36 maxlen: 48
2001:ee0:7000::/36 maxlen: 48
2001:ee0:8000::/36 maxlen: 48
2001:ee0:9000::/36 maxlen: 48
2001:ee0:a000::/36 maxlen: 48
2001:ee0:b000::/36 maxlen: 48
2001:ee0:c000::/36 maxlen: 48
2001:ee0:d000::/36 maxlen: 48
2001:ee0:e000::/36 maxlen: 48
2001:ee0:f000::/36 maxlen: 48
2001:ee1::/32 maxlen: 48
2001:ee2::/32 maxlen: 48
2001:ee3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18925 (0x49ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 1 08:58:03 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67c2cc1b-622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:2b:9b:c0:ec:d6:9e:97:29:d4:a6:b8:bc:
2f:57:21:01:f6:97:bd:7b:a9:8d:01:52:5a:e7:29:
d1:81:67:27:09:4b:54:90:e6:02:5c:32:56:d7:fe:
8b:c2:00:d6:a6:bc:d0:0e:9d:a4:04:9f:00:84:fe:
55:0d:fe:f5:0a:89:a9:06:67:cf:a1:5f:17:8d:46:
f4:30:c1:c3:e9:7c:8c:35:d5:30:60:68:7c:f5:96:
32:87:69:76:46:74:c0:60:bb:29:84:1c:e8:8e:8e:
df:f1:88:73:e5:c8:18:77:85:cf:6a:60:52:98:94:
37:5d:26:c4:72:a0:63:9f:ef:6d:91:b5:0c:92:4a:
6a:6f:64:1c:18:6a:81:09:44:d0:47:d0:00:91:4f:
26:4b:71:70:c2:16:79:c6:bf:59:0c:e5:31:e0:f1:
d2:82:31:65:40:9f:6d:50:6a:ca:31:7c:8d:09:ec:
f6:e1:25:6d:77:3d:4c:86:35:72:92:ec:f6:00:fb:
c6:f3:ed:e9:35:a2:1f:74:1f:2e:12:30:94:84:9a:
e8:20:c3:4f:84:bf:63:6d:61:aa:f0:91:44:8e:ab:
96:62:3d:dd:b7:91:1a:37:2f:d6:3e:00:43:a3:a8:
cd:69:de:64:78:0f:a8:54:c5:90:06:9f:c3:eb:0e:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:1E:11:8C:D3:C1:85:0D:17:66:83:BC:08:A1:20:A7:92:FF:3E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.160.0.0/11
14.224.0.0/16
14.226.0.0-14.255.255.255
43.239.220.0/23
103.53.168.0/23
103.89.92.0/22
103.161.38.0/23
103.171.92.0/23
113.160.0.0/11
123.16.0.0-123.30.69.255
123.30.74.0-123.30.93.255
123.30.96.0/21
123.30.106.0/23
123.30.110.0/24
123.30.112.0-123.30.126.255
123.30.130.0/23
123.30.141.0/24
123.30.144.0-123.30.149.255
123.30.151.0-123.30.153.255
123.30.161.0/24
123.30.166.0-123.30.199.255
123.30.201.0-123.30.229.255
123.30.231.0-123.30.241.255
123.30.243.0/24
123.30.245.0-123.30.249.255
123.30.251.0-123.30.252.255
123.30.254.0-123.31.9.255
123.31.13.0-123.31.23.255
123.31.25.0-123.31.26.255
123.31.48.0-123.31.255.255
157.119.246.0/23
163.61.74.0/23
203.160.0.0/23
203.162.0.0-203.162.12.255
203.162.14.0-203.162.33.255
203.162.35.0/24
203.162.38.0-203.162.48.255
203.162.50.0/24
203.162.52.0/24
203.162.54.0/23
203.162.57.0-203.162.58.255
203.162.60.0-203.162.67.255
203.162.70.0-203.162.75.255
203.162.82.0-203.162.95.255
203.162.97.0-203.162.99.255
203.162.104.0-203.162.152.255
203.162.154.0/24
203.162.156.0-203.162.162.255
203.162.164.0-203.162.255.255
203.210.128.0/17
221.132.0.0/18
222.252.0.0-222.255.37.255
222.255.39.0-222.255.101.255
222.255.104.0-222.255.120.255
222.255.123.0-222.255.209.255
222.255.212.0-222.255.233.255
222.255.236.0/24
222.255.238.0/24
222.255.240.0/20
IPv6:
2001:df3:d8c0::/48
2001:df4:c340::/48
2001:ee0::/30
Signature Algorithm: sha256WithRSAEncryption
61:e9:d0:d3:ef:e1:e0:15:9b:25:98:85:ee:c6:32:8e:14:0a:
ac:e2:5a:69:e6:a0:7f:3f:ae:e9:0a:fe:40:c5:27:f4:d2:93:
87:f9:a0:2f:ef:f5:b6:bd:90:51:f6:76:e4:d9:8b:0a:cc:41:
af:31:4c:e7:df:b6:21:be:40:c6:70:c0:a4:d6:08:ac:c2:2d:
dc:a3:7a:8d:f1:fe:d5:0d:37:94:41:0e:ef:ca:ce:10:34:10:
e8:f5:b5:f1:f9:44:a0:cf:a6:a8:36:0f:ea:e5:d9:c5:b4:21:
c1:78:6b:89:0c:1c:8e:84:4d:69:63:f7:75:b3:c6:5f:9d:db:
37:51:f9:24:8b:67:37:aa:d0:c7:58:14:44:ea:e2:e5:68:35:
aa:6c:df:ad:06:d3:79:e4:76:c9:21:4c:9d:32:fc:42:8a:40:
e6:10:56:04:54:3c:b9:12:b3:f4:3c:95:3f:f0:a9:6c:0d:52:
e3:a2:2a:19:36:c7:0b:a8:f7:46:1c:69:b6:38:d1:d5:73:13:
cd:11:d5:97:ef:a8:be:8a:fd:18:c4:b3:8e:1f:9f:ce:19:2a:
a5:9c:ba:f1:5b:b0:2a:0d:d6:a5:fe:ea:6b:fc:0f:06:a2:72:
39:3d:e9:ad:36:77:12:5a:1c:f3:34:ee:bf:8b:04:a9:40:a8:
68:00:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:03 2025 by rpki-client