Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/64D969CACC1B11EFAC3BC07DC4F9AE02.roa
File: 64D969CACC1B11EFAC3BC07DC4F9AE02.roa (raw, json)
Hash identifier: qIWJv0hJgUkJ7fYT1khSKJcRDcnJeclsoZzD+DwJKz8=
Subject key identifier: 76:DD:E3:B3:12:80:22:C5:E8:E5:B6:28:72:18:50:D9:10:25:78:00
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 07EB
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/64D969CACC1B11EFAC3BC07DC4F9AE02.roa
Signing time: Mon 06 Jan 2025 10:45:50 +0000
ROA not before: Mon 06 Jan 2025 10:45:50 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9723
IP address blocks: 1.178.2.0/23 maxlen: 24
1.178.64.0/20 maxlen: 24
1.178.80.0/20 maxlen: 24
1.178.96.0/20 maxlen: 24
1.178.160.0/20 maxlen: 24
1.178.176.0/20 maxlen: 24
1.179.0.0/20 maxlen: 24
1.179.16.0/20 maxlen: 24
1.179.48.0/20 maxlen: 24
1.179.96.0/20 maxlen: 24
58.87.0.0/20 maxlen: 20
58.87.0.0/23 maxlen: 23
58.87.2.0/23 maxlen: 23
58.87.6.0/23 maxlen: 23
58.87.8.0/23 maxlen: 23
58.87.10.0/23 maxlen: 23
58.87.12.0/23 maxlen: 23
58.87.14.0/24 maxlen: 24
58.87.15.0/24 maxlen: 24
110.238.6.0/23 maxlen: 23
110.238.8.0/23 maxlen: 23
110.238.10.0/23 maxlen: 23
110.238.12.0/23 maxlen: 23
110.238.14.0/23 maxlen: 23
110.238.16.0/20 maxlen: 20
110.238.16.0/24 maxlen: 24
110.238.18.0/24 maxlen: 24
110.238.21.0/24 maxlen: 24
110.238.24.0/24 maxlen: 24
110.238.25.0/24 maxlen: 24
110.238.144.0/20 maxlen: 20
110.238.144.0/22 maxlen: 24
110.238.240.0/20 maxlen: 20
110.238.240.0/23 maxlen: 24
110.239.0.0/20 maxlen: 20
110.239.16.0/20 maxlen: 20
110.239.32.0/20 maxlen: 20
110.239.32.0/22 maxlen: 24
110.239.128.0/20 maxlen: 20
110.239.128.0/21 maxlen: 21
110.239.176.0/21 maxlen: 21
110.239.176.0/24 maxlen: 24
110.239.178.0/24 maxlen: 24
110.239.224.0/20 maxlen: 20
110.239.240.0/20 maxlen: 20
119.12.80.0/20 maxlen: 20
119.12.80.0/21 maxlen: 24
119.12.112.0/21 maxlen: 24
119.13.0.0/23 maxlen: 23
119.13.2.0/24 maxlen: 24
119.13.3.0/24 maxlen: 24
119.13.4.0/23 maxlen: 23
119.13.6.0/23 maxlen: 23
119.13.8.0/23 maxlen: 23
119.13.10.0/24 maxlen: 24
119.13.48.0/21 maxlen: 21
119.13.48.0/24 maxlen: 24
119.13.49.0/24 maxlen: 24
119.13.144.0/21 maxlen: 24
119.13.176.0/21 maxlen: 23
119.13.176.0/23 maxlen: 24
119.13.178.0/24 maxlen: 24
119.13.180.0/22 maxlen: 24
119.13.240.0/21 maxlen: 24
121.91.96.0/21 maxlen: 24
121.91.192.0/21 maxlen: 24
123.200.128.0/20 maxlen: 20
123.200.133.0/24 maxlen: 24
123.200.136.0/22 maxlen: 22
123.200.140.0/22 maxlen: 22
123.200.144.0/22 maxlen: 22
123.200.148.0/22 maxlen: 22
123.200.152.0/21 maxlen: 21
123.200.160.0/23 maxlen: 23
123.200.162.0/23 maxlen: 23
123.200.164.0/23 maxlen: 23
123.200.165.0/24 maxlen: 24
123.200.166.0/23 maxlen: 23
123.200.168.0/23 maxlen: 23
123.200.170.0/23 maxlen: 23
123.200.172.0/24 maxlen: 24
123.200.174.0/24 maxlen: 24
123.200.175.0/24 maxlen: 24
123.200.176.0/23 maxlen: 23
123.200.179.0/24 maxlen: 24
123.200.180.0/23 maxlen: 23
123.200.182.0/23 maxlen: 23
123.200.184.0/22 maxlen: 22
123.200.187.0/24 maxlen: 24
123.200.188.0/23 maxlen: 23
123.200.200.0/21 maxlen: 24
123.200.208.0/21 maxlen: 21
123.200.216.0/21 maxlen: 21
123.200.240.0/21 maxlen: 24
202.83.64.0/19 maxlen: 19
202.83.64.0/22 maxlen: 22
202.83.68.0/23 maxlen: 23
202.83.70.0/23 maxlen: 23
202.83.72.0/24 maxlen: 24
202.83.73.0/24 maxlen: 24
202.83.74.0/23 maxlen: 23
202.83.76.0/22 maxlen: 22
202.83.80.0/23 maxlen: 23
202.83.82.0/24 maxlen: 24
202.83.83.0/24 maxlen: 24
202.83.84.0/22 maxlen: 22
202.83.88.0/23 maxlen: 23
202.83.90.0/23 maxlen: 23
202.83.92.0/23 maxlen: 23
202.83.94.0/24 maxlen: 24
202.83.95.0/24 maxlen: 24
202.183.96.0/20 maxlen: 20
202.183.96.0/24 maxlen: 24
202.183.97.0/24 maxlen: 24
202.183.98.0/24 maxlen: 24
202.183.100.0/23 maxlen: 23
202.183.102.0/23 maxlen: 23
202.183.102.0/24 maxlen: 24
202.183.104.0/22 maxlen: 22
202.183.108.0/24 maxlen: 24
202.183.110.0/24 maxlen: 24
202.183.111.0/24 maxlen: 24
202.183.112.0/20 maxlen: 20
202.183.112.0/23 maxlen: 23
202.183.114.0/23 maxlen: 23
202.183.116.0/23 maxlen: 23
202.183.118.0/24 maxlen: 24
202.183.119.0/24 maxlen: 24
202.183.120.0/22 maxlen: 22
202.183.124.0/23 maxlen: 23
202.183.126.0/24 maxlen: 24
202.183.127.0/24 maxlen: 24
210.56.64.0/24 maxlen: 24
210.56.68.0/23 maxlen: 24
210.56.70.0/23 maxlen: 24
220.157.64.0/24 maxlen: 24
220.157.70.0/24 maxlen: 24
220.157.71.0/24 maxlen: 24
220.157.74.0/23 maxlen: 24
220.157.79.0/24 maxlen: 24
220.157.80.0/23 maxlen: 24
220.157.82.0/23 maxlen: 24
220.157.84.0/23 maxlen: 24
220.157.86.0/23 maxlen: 24
220.157.90.0/24 maxlen: 24
220.157.91.0/24 maxlen: 24
220.157.92.0/24 maxlen: 24
220.157.93.0/24 maxlen: 24
220.157.94.0/24 maxlen: 24
220.157.95.0/24 maxlen: 24
2407:6800::/32 maxlen: 32
2407:6800:0:200::/56 maxlen: 56
2407:6800:0:300::/56 maxlen: 56
2407:6800:0:400::/56 maxlen: 56
2407:6800:0:500::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE
Validity
Not Before: Jan 6 10:45:50 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=677bb45e-1bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:bb:82:7d:15:9f:0f:3c:e4:4b:d0:cd:05:
59:4e:33:f9:b5:99:0e:bb:b1:ee:92:ae:bc:46:ca:
15:8c:65:a5:f2:3d:a9:4f:2b:f0:c2:fc:40:21:eb:
d6:59:87:27:ae:79:f6:99:80:47:4e:69:a5:e4:05:
d7:57:b9:3d:12:c2:78:9a:08:93:84:94:30:63:3c:
59:05:d4:59:fd:37:b9:3b:0f:e8:24:a8:db:b5:8c:
09:d6:7e:97:c9:58:ee:52:58:2e:4d:0a:0a:b3:cf:
37:c5:86:52:0a:64:94:ff:9f:8c:0b:7c:07:63:79:
38:cb:2f:55:65:c6:bf:84:ae:bd:50:4d:47:2a:7e:
f1:cc:ed:35:b8:75:41:a6:f3:68:b9:67:12:a2:e9:
de:9e:bd:2b:76:bc:82:b3:65:02:50:32:d4:39:8d:
f5:f6:2b:4f:7b:d4:67:98:78:16:fa:ac:ab:1d:51:
3f:12:be:85:34:83:ec:fc:19:d6:21:56:4b:3a:47:
5e:1f:40:26:73:8c:27:08:43:1e:68:ac:ea:2b:8a:
64:1a:99:4e:d3:01:3c:aa:7d:b0:e1:56:df:9c:64:
d7:e1:2a:f4:93:07:1c:63:ae:cc:d2:a5:d5:d3:39:
c3:91:af:80:60:57:40:89:d1:b9:0d:cd:fc:8b:70:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DD:E3:B3:12:80:22:C5:E8:E5:B6:28:72:18:50:D9:10:25:78:00
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/64D969CACC1B11EFAC3BC07DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.178.2.0/23
1.178.64.0-1.178.111.255
1.178.160.0/19
1.179.0.0/19
1.179.48.0/20
1.179.96.0/20
58.87.0.0/20
110.238.6.0-110.238.31.255
110.238.144.0/20
110.238.240.0-110.239.47.255
110.239.128.0/20
110.239.176.0/21
110.239.224.0/19
119.12.80.0/20
119.12.112.0/21
119.13.0.0-119.13.10.255
119.13.48.0/21
119.13.144.0/21
119.13.176.0/21
119.13.240.0/21
121.91.96.0/21
121.91.192.0/21
123.200.128.0-123.200.172.255
123.200.174.0-123.200.177.255
123.200.179.0-123.200.189.255
123.200.200.0-123.200.223.255
123.200.240.0/21
202.83.64.0/19
202.183.96.0/19
210.56.64.0/24
210.56.68.0/22
220.157.64.0/24
220.157.70.0/23
220.157.74.0/23
220.157.79.0-220.157.87.255
220.157.90.0-220.157.95.255
IPv6:
2407:6800::/32
Signature Algorithm: sha256WithRSAEncryption
32:d7:0f:6f:14:82:d2:8c:1a:81:b9:7d:d5:ba:55:9f:4e:3f:
5a:42:30:6c:41:31:a1:e7:3c:74:7e:49:8a:a0:c4:36:15:13:
e3:06:8d:fc:c7:db:16:52:86:d1:73:39:f6:70:88:36:09:84:
9e:68:88:77:63:ef:3c:0f:c6:77:5a:9f:0e:52:af:2d:70:d6:
32:80:6d:84:98:b5:de:e4:81:8f:c9:d2:b3:85:89:e5:5e:98:
2b:1c:4f:c1:cf:c4:41:78:ef:a3:e3:4d:35:7b:4b:af:23:9b:
32:62:a6:bf:a5:fa:aa:56:b8:04:de:cd:7e:c9:37:cd:4c:86:
95:eb:19:90:f7:89:94:27:d6:93:66:29:1c:de:88:34:9e:73:
59:e2:5d:b8:e3:89:6d:be:6d:dc:6e:3e:37:46:26:0a:16:0f:
e3:ce:1e:b6:e9:85:d7:82:28:12:34:c8:a6:80:21:c4:8b:18:
aa:8b:57:35:34:04:bb:42:82:93:da:2e:70:ff:3d:ff:05:07:
db:02:53:47:d8:50:cd:12:66:cc:f7:99:cd:d0:52:71:61:b6:
7e:62:44:2e:2d:0f:8e:c1:84:1c:d1:bb:f8:11:6e:04:bf:bb:
7d:57:cd:77:0d:7c:e2:48:a2:09:c3:f6:c4:e3:c0:0f:8d:ad:
e0:f3:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:33 2025 by rpki-client