Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa
File: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (raw, json)
Hash identifier: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=
Subject key identifier: 54:75:91:CE:AB:7C:07:79:1F:D3:DD:68:B8:14:6B:56:CE:A1:1E:CE
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0CF4
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa
Signing time: Sat 18 Jan 2025 18:06:50 +0000
ROA not before: Sat 18 Jan 2025 18:06:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55799
IP address blocks: 27.122.56.0/24 maxlen: 24
27.122.57.0/24 maxlen: 24
27.122.58.0/24 maxlen: 24
27.122.59.0/24 maxlen: 24
43.239.156.0/22 maxlen: 22
43.239.156.0/23 maxlen: 23
43.239.156.0/24 maxlen: 24
43.239.157.0/24 maxlen: 24
43.239.158.0/23 maxlen: 23
43.239.158.0/24 maxlen: 24
43.239.159.0/24 maxlen: 24
43.245.196.0/23 maxlen: 23
43.245.196.0/24 maxlen: 24
43.245.197.0/24 maxlen: 24
43.245.198.0/24 maxlen: 24
43.245.199.0/24 maxlen: 24
43.251.157.0/24 maxlen: 24
43.251.158.0/24 maxlen: 24
43.251.159.0/24 maxlen: 24
103.1.152.0/24 maxlen: 24
103.1.153.0/24 maxlen: 24
103.1.154.0/24 maxlen: 24
103.1.155.0/24 maxlen: 24
103.10.196.0/24 maxlen: 24
103.10.198.0/24 maxlen: 24
103.35.72.0/22 maxlen: 22
103.35.72.0/24 maxlen: 24
103.35.73.0/24 maxlen: 24
103.35.74.0/24 maxlen: 24
103.35.75.0/24 maxlen: 24
103.68.223.0/24 maxlen: 24
103.71.254.0/24 maxlen: 24
103.72.4.0/23 maxlen: 23
182.161.32.0/22 maxlen: 22
182.161.32.0/24 maxlen: 24
182.161.33.0/24 maxlen: 24
182.161.34.0/24 maxlen: 24
182.161.35.0/24 maxlen: 24
202.144.192.0/22 maxlen: 22
202.144.192.0/24 maxlen: 24
202.144.193.0/24 maxlen: 24
202.144.194.0/24 maxlen: 24
202.144.195.0/24 maxlen: 24
2402:c480:3001::/48 maxlen: 48
2402:c480:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C
Validity
Not Before: Jan 18 18:06:50 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=678bedba-7704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:70:9c:7a:40:3e:56:89:01:f7:f2:f4:aa:
d0:56:22:6a:e1:34:68:8b:61:fa:cd:bd:c8:bb:1c:
cf:c5:3d:8e:b7:2e:6b:1e:e7:6d:28:67:8d:96:86:
af:ca:25:51:a8:56:f8:9b:f0:0a:6f:71:82:d9:3f:
d4:21:55:03:b6:37:32:9b:90:f4:d9:fd:e2:8a:e4:
11:d5:c4:e0:cc:06:f7:fa:51:c9:42:69:f0:e3:c4:
b1:77:46:de:1b:f9:35:04:fa:82:f4:08:80:e4:36:
1c:22:20:5c:11:b9:c5:28:45:ef:e2:1a:cc:be:01:
d7:02:4f:44:14:e6:d2:94:7f:e9:52:a6:e5:2f:fc:
67:3c:01:13:15:96:24:1d:90:06:5c:4c:0e:74:6e:
91:87:97:72:d4:40:4a:27:d0:96:be:51:65:05:09:
d1:d7:27:5a:90:92:06:47:29:a2:bc:1f:48:4f:9e:
e3:be:55:06:8f:ab:3c:b9:54:41:55:0d:6f:a0:cb:
50:c8:69:6e:e1:c2:6d:59:6e:2e:50:fd:0a:4d:2a:
47:b5:2b:02:1c:f9:6d:e3:22:5d:30:56:12:c4:ee:
29:02:63:dc:55:bc:1e:40:28:4f:a1:a9:a6:66:a3:
16:bc:47:d3:d5:19:f8:ef:48:95:d0:10:28:2d:30:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:91:CE:AB:7C:07:79:1F:D3:DD:68:B8:14:6B:56:CE:A1:1E:CE
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.122.56.0/22
43.239.156.0/22
43.245.196.0/22
43.251.157.0-43.251.159.255
103.1.152.0/22
103.10.196.0/24
103.10.198.0/24
103.35.72.0/22
103.68.223.0/24
103.71.254.0/24
103.72.4.0/23
182.161.32.0/22
202.144.192.0/22
IPv6:
2402:c480:3001::/48
2402:c480:8001::/48
Signature Algorithm: sha256WithRSAEncryption
2a:4f:cd:8d:6e:8f:21:56:25:b1:2c:a3:f2:b5:3b:d4:46:40:
e0:44:73:72:09:02:de:37:e5:e8:e3:18:eb:c3:9f:f6:e4:00:
b7:2a:25:3e:f3:72:a3:6a:d7:4a:b9:2b:6e:84:9e:4d:c0:8d:
a2:c1:7b:d9:14:20:19:5d:b0:64:02:ae:7d:d3:99:00:85:6b:
06:f7:04:0c:e3:9e:d2:d8:4a:8c:bf:17:41:3b:12:ea:74:51:
dc:06:de:88:0a:d3:be:33:ae:1f:83:48:0c:93:a3:0c:67:93:
d1:9f:15:9c:39:17:49:cb:34:23:d1:35:2c:42:d7:b9:3b:78:
0f:02:f3:ca:0e:bc:54:14:39:b5:ae:c5:23:76:32:b3:36:7e:
fa:04:ae:57:eb:3c:ab:68:fc:8e:3d:02:aa:55:93:33:9c:dc:
05:73:44:5a:0a:f8:7a:8a:12:87:00:a6:84:1b:eb:91:94:a8:
bc:62:89:f0:69:67:f7:ca:53:91:f3:55:cd:23:d7:19:b3:b2:
8e:40:16:11:30:6f:e8:7a:32:6a:49:ad:eb:47:a2:05:b5:4f:
17:fe:47:a6:f4:8d:0a:6c:d4:2a:4a:82:da:01:e6:b7:d9:62:
ae:a9:6e:e0:66:94:2d:1f:17:c2:75:a8:58:4c:95:2d:05:12:
d5:cf:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:35 2025 by rpki-client