Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
File: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (raw, json)
Hash identifier: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=
Subject key identifier: C3:55:2C:43:4B:D5:80:AB:B2:52:90:B2:F6:2C:4C:E8:79:D7:61:5A
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 055B
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
Signing time: Tue 11 Feb 2025 08:13:10 +0000
ROA not before: Tue 11 Feb 2025 08:13:10 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.88.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
42.104.112.0/21 maxlen: 24
42.104.120.0/21 maxlen: 24
42.105.253.0/24 maxlen: 24
43.245.88.0/22 maxlen: 24
103.29.44.0/22 maxlen: 24
112.79.32.0/24 maxlen: 24
118.185.0.0/16 maxlen: 16
118.185.0.0/21 maxlen: 24
118.185.8.0/21 maxlen: 24
118.185.16.0/21 maxlen: 24
118.185.24.0/21 maxlen: 21
118.185.24.0/24 maxlen: 24
118.185.25.0/24 maxlen: 24
118.185.26.0/24 maxlen: 24
118.185.27.0/24 maxlen: 24
118.185.28.0/24 maxlen: 24
118.185.29.0/24 maxlen: 24
118.185.30.0/24 maxlen: 24
118.185.31.0/24 maxlen: 24
118.185.32.0/21 maxlen: 24
118.185.40.0/21 maxlen: 24
118.185.48.0/21 maxlen: 24
118.185.56.0/21 maxlen: 24
118.185.64.0/21 maxlen: 24
118.185.72.0/21 maxlen: 24
118.185.80.0/21 maxlen: 24
118.185.88.0/21 maxlen: 24
118.185.96.0/21 maxlen: 21
118.185.97.0/24 maxlen: 24
118.185.98.0/24 maxlen: 24
118.185.99.0/24 maxlen: 24
118.185.100.0/24 maxlen: 24
118.185.101.0/24 maxlen: 24
118.185.102.0/24 maxlen: 24
118.185.103.0/24 maxlen: 24
118.185.104.0/21 maxlen: 24
118.185.112.0/21 maxlen: 24
118.185.120.0/21 maxlen: 24
118.185.128.0/20 maxlen: 21
118.185.128.0/24 maxlen: 24
118.185.129.0/24 maxlen: 24
118.185.130.0/24 maxlen: 24
118.185.131.0/24 maxlen: 24
118.185.132.0/24 maxlen: 24
118.185.133.0/24 maxlen: 24
118.185.134.0/24 maxlen: 24
118.185.135.0/24 maxlen: 24
118.185.136.0/24 maxlen: 24
118.185.137.0/24 maxlen: 24
118.185.138.0/24 maxlen: 24
118.185.139.0/24 maxlen: 24
118.185.140.0/24 maxlen: 24
118.185.141.0/24 maxlen: 24
118.185.142.0/24 maxlen: 24
118.185.143.0/24 maxlen: 24
118.185.144.0/21 maxlen: 24
118.185.152.0/21 maxlen: 24
118.185.160.0/21 maxlen: 24
118.185.168.0/21 maxlen: 24
118.185.176.0/21 maxlen: 24
118.185.184.0/21 maxlen: 24
118.185.192.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
118.185.216.0/21 maxlen: 24
118.185.224.0/21 maxlen: 24
118.185.232.0/21 maxlen: 24
118.185.240.0/21 maxlen: 24
118.185.248.0/21 maxlen: 24
122.15.0.0/16 maxlen: 16
122.15.0.0/21 maxlen: 24
122.15.8.0/21 maxlen: 24
122.15.16.0/21 maxlen: 24
122.15.24.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.40.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.56.0/21 maxlen: 24
122.15.64.0/21 maxlen: 24
122.15.72.0/21 maxlen: 24
122.15.80.0/21 maxlen: 24
122.15.88.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.104.0/21 maxlen: 24
122.15.112.0/21 maxlen: 24
122.15.120.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.136.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.160.0/21 maxlen: 24
122.15.168.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.184.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.200.0/21 maxlen: 24
122.15.208.0/21 maxlen: 24
122.15.216.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.232.0/21 maxlen: 24
122.15.240.0/21 maxlen: 24
122.15.248.0/21 maxlen: 24
123.63.0.0/16 maxlen: 16
123.63.0.0/21 maxlen: 24
123.63.8.0/21 maxlen: 24
123.63.16.0/21 maxlen: 24
123.63.24.0/21 maxlen: 24
123.63.32.0/21 maxlen: 24
123.63.40.0/21 maxlen: 24
123.63.48.0/21 maxlen: 24
123.63.56.0/21 maxlen: 24
123.63.64.0/21 maxlen: 24
123.63.72.0/21 maxlen: 24
123.63.80.0/21 maxlen: 24
123.63.88.0/21 maxlen: 24
123.63.96.0/21 maxlen: 24
123.63.104.0/21 maxlen: 24
123.63.112.0/21 maxlen: 24
123.63.120.0/21 maxlen: 24
123.63.128.0/18 maxlen: 18
123.63.128.0/20 maxlen: 24
123.63.144.0/21 maxlen: 24
123.63.152.0/21 maxlen: 24
123.63.160.0/19 maxlen: 19
123.63.160.0/21 maxlen: 24
123.63.168.0/21 maxlen: 24
123.63.176.0/21 maxlen: 24
123.63.184.0/21 maxlen: 24
123.63.192.0/18 maxlen: 18
123.63.192.0/21 maxlen: 24
123.63.200.0/21 maxlen: 24
123.63.208.0/21 maxlen: 24
123.63.216.0/21 maxlen: 24
123.63.224.0/19 maxlen: 19
123.63.224.0/21 maxlen: 24
123.63.232.0/21 maxlen: 24
123.63.240.0/21 maxlen: 24
123.63.248.0/21 maxlen: 24
124.247.192.0/24 maxlen: 24
124.247.193.0/24 maxlen: 24
124.247.194.0/24 maxlen: 24
124.247.198.0/24 maxlen: 24
124.247.199.0/24 maxlen: 24
124.247.201.0/24 maxlen: 24
124.247.203.0/24 maxlen: 24
124.247.204.0/24 maxlen: 24
124.247.205.0/24 maxlen: 24
124.247.224.0/24 maxlen: 24
124.247.228.0/24 maxlen: 24
124.247.229.0/24 maxlen: 24
124.247.230.0/24 maxlen: 24
124.247.231.0/24 maxlen: 24
124.247.232.0/24 maxlen: 24
124.247.233.0/24 maxlen: 24
124.247.234.0/24 maxlen: 24
124.247.235.0/24 maxlen: 24
124.247.236.0/24 maxlen: 24
182.19.0.0/19 maxlen: 19
182.19.0.0/20 maxlen: 24
182.19.16.0/20 maxlen: 24
182.19.32.0/19 maxlen: 19
182.19.32.0/20 maxlen: 24
182.19.48.0/20 maxlen: 24
182.19.64.0/20 maxlen: 24
182.19.80.0/21 maxlen: 24
182.19.88.0/21 maxlen: 24
182.19.96.0/19 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.25.0/24 maxlen: 24
2400:5200:401::/48 maxlen: 48
2400:5200:402::/48 maxlen: 48
2400:5200:403::/48 maxlen: 48
2400:5200:404::/48 maxlen: 48
2400:5200:c00::/40 maxlen: 48
2400:5200:1000::/40 maxlen: 48
2400:5200:1400::/40 maxlen: 48
2400:5200:1800::/40 maxlen: 48
2400:5200:1c00::/40 maxlen: 48
2400:5200:2000::/36 maxlen: 48
2400:5200:3000::/36 maxlen: 48
2400:5200:4000::/36 maxlen: 48
2400:5200:5000::/36 maxlen: 48
2400:5200:6000::/36 maxlen: 48
2400:5200:7000::/36 maxlen: 48
2400:5200:8000::/36 maxlen: 48
2400:5200:9000::/36 maxlen: 48
2400:5200:a000::/36 maxlen: 48
2400:5200:b000::/36 maxlen: 48
2400:5200:c000::/36 maxlen: 48
2400:5200:d000::/36 maxlen: 48
2400:5200:e000::/36 maxlen: 48
2400:5200:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D
Validity
Not Before: Feb 11 08:13:10 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67ab0696-9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:3d:cf:0c:4e:71:0c:90:4b:12:b0:8b:e6:
34:97:e4:ec:ac:d9:8d:cb:48:bb:dc:b9:86:b1:b3:
35:57:09:9e:be:bd:4a:f4:bf:99:4b:6f:b4:c3:f7:
1a:6c:d6:d9:08:c6:ea:8a:5e:10:c4:c1:94:6d:ff:
8f:2b:ca:35:50:33:2e:43:ae:6d:e6:f8:b1:28:22:
38:dd:c3:38:03:d5:ba:bc:4d:c2:0e:34:54:c6:32:
11:67:b4:44:4f:41:b4:48:46:c3:70:7c:e2:78:e5:
74:c7:4a:d9:7f:a9:2a:a2:2c:a2:a1:ac:34:1f:87:
84:f4:86:65:54:7b:da:27:b7:bf:23:4b:58:fd:63:
17:c5:9e:67:18:62:16:9a:15:c0:53:ab:de:96:50:
e6:6c:f6:e1:e4:ce:e4:d2:0b:73:c9:cf:18:4d:21:
28:af:01:cc:2b:57:c6:8f:17:ec:c4:0a:0f:e3:2f:
66:fb:ae:91:29:fc:d1:6c:66:f8:2d:fb:55:06:ca:
f6:81:cd:36:ee:14:80:24:eb:98:b5:18:97:98:65:
8e:6e:f9:ee:ac:ca:af:cd:8b:11:38:ec:f9:dc:e7:
b5:e6:e9:97:c8:af:db:6e:44:42:70:67:2d:28:25:
a4:22:75:cb:e9:b1:bf:fb:62:59:7a:2f:eb:3c:3b:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:2C:43:4B:D5:80:AB:B2:52:90:B2:F6:2C:4C:E8:79:D7:61:5A
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0/18
42.105.253.0/24
43.245.88.0/22
103.29.44.0/22
112.79.32.0/24
118.185.0.0/16
122.15.0.0/16
123.63.0.0/16
124.247.192.0-124.247.194.255
124.247.198.0/23
124.247.201.0/24
124.247.203.0-124.247.205.255
124.247.224.0/24
124.247.228.0-124.247.236.255
182.19.0.0/17
223.196.18.0/24
223.196.25.0/24
IPv6:
2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
2400:5200:c00::/40
2400:5200:1000::/40
2400:5200:1400::/40
2400:5200:1800::/40
2400:5200:1c00::/40
2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b0:cd:8b:fa:15:b9:09:fe:19:6a:40:f6:cc:86:af:53:2c:9d:
08:8a:50:f3:fe:1e:f4:a6:cb:3c:c1:03:d1:59:5f:53:fd:60:
da:fe:b2:fd:cd:ce:45:b9:23:2d:b6:39:3c:6c:1f:27:59:c4:
08:e7:d2:3f:c2:ee:3e:fc:8e:5e:b4:40:33:de:b0:17:ed:cd:
64:6a:75:b9:65:b8:78:28:36:7c:3e:b8:b6:9d:c0:1a:bb:35:
d1:8c:ed:41:64:18:09:cf:c5:46:eb:b7:58:cc:a2:19:73:be:
71:99:a9:b2:f6:66:75:9a:c1:a3:91:b0:da:f7:63:bc:d6:5a:
0f:8f:1f:9b:21:1f:30:87:f1:e7:57:2c:c5:bc:22:39:bc:ed:
51:1b:fc:3a:67:a9:a7:0e:46:59:8a:7e:dc:b0:e8:3c:46:2d:
0f:8e:fb:67:20:ae:04:db:da:c3:0a:0a:6e:59:bf:12:f3:c4:
50:60:17:ac:8d:01:7a:dd:0a:7c:53:37:cf:bf:b9:14:c8:6c:
47:31:f1:d9:56:d6:e1:bd:3e:cf:fa:15:f0:8d:e9:67:79:ae:
da:15:38:24:df:04:ae:d4:e2:5e:5b:10:14:a5:3b:79:19:62:
03:2a:3a:40:cc:fc:f7:bf:9c:c3:53:37:b7:ca:a5:c4:90:5b:
02:34:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:43:34 2025 by rpki-client