Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
File: 8949EA2ADC7C11EFAB540729C4F9AE02.roa (raw, json)
Hash identifier: W7EabXmutIsbkKbHMS8AIlp2/AchztW66gsIbck5Ycg=
Subject key identifier: 01:18:2B:21:E5:B9:09:B4:D1:67:67:7C:4A:0C:01:A1:08:1A:D0:4B
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 0850
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
Signing time: Thu 27 Mar 2025 23:26:37 +0000
ROA not before: Thu 27 Mar 2025 23:26:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9723
IP address blocks: 1.178.2.0/23 maxlen: 24
1.178.66.0/23 maxlen: 24
1.178.80.0/24 maxlen: 24
1.178.82.0/23 maxlen: 24
1.178.84.0/23 maxlen: 24
1.178.96.0/22 maxlen: 24
1.178.175.0/24 maxlen: 24
1.178.176.0/22 maxlen: 24
1.179.0.0/23 maxlen: 24
1.179.4.0/22 maxlen: 24
1.179.8.0/22 maxlen: 24
1.179.12.0/23 maxlen: 24
1.179.16.0/21 maxlen: 24
1.179.48.0/22 maxlen: 24
1.179.62.0/23 maxlen: 24
1.179.96.0/22 maxlen: 24
58.87.0.0/20 maxlen: 20
58.87.0.0/23 maxlen: 23
58.87.2.0/23 maxlen: 23
58.87.6.0/23 maxlen: 23
58.87.8.0/23 maxlen: 23
58.87.10.0/23 maxlen: 23
58.87.12.0/23 maxlen: 23
58.87.14.0/24 maxlen: 24
58.87.15.0/24 maxlen: 24
110.238.21.0/24 maxlen: 24
110.238.24.0/24 maxlen: 24
110.238.25.0/24 maxlen: 24
110.238.144.0/21 maxlen: 21
110.238.144.0/22 maxlen: 24
110.238.240.0/23 maxlen: 24
110.239.0.0/21 maxlen: 21
110.239.15.0/24 maxlen: 24
110.239.16.0/23 maxlen: 23
110.239.26.0/24 maxlen: 24
110.239.31.0/24 maxlen: 24
110.239.32.0/22 maxlen: 24
110.239.128.0/20 maxlen: 20
110.239.128.0/21 maxlen: 21
110.239.176.0/21 maxlen: 21
110.239.176.0/24 maxlen: 24
110.239.178.0/24 maxlen: 24
119.12.80.0/21 maxlen: 24
119.13.0.0/23 maxlen: 23
119.13.2.0/24 maxlen: 24
119.13.3.0/24 maxlen: 24
119.13.4.0/23 maxlen: 23
119.13.6.0/23 maxlen: 23
119.13.8.0/23 maxlen: 23
119.13.10.0/24 maxlen: 24
119.13.48.0/23 maxlen: 23
119.13.48.0/24 maxlen: 24
119.13.49.0/24 maxlen: 24
119.13.144.0/22 maxlen: 24
119.13.176.0/22 maxlen: 23
119.13.176.0/23 maxlen: 24
119.13.178.0/24 maxlen: 24
119.13.240.0/23 maxlen: 24
121.91.96.0/23 maxlen: 24
121.91.199.0/24 maxlen: 24
123.200.128.0/20 maxlen: 20
123.200.128.0/22 maxlen: 22
123.200.133.0/24 maxlen: 24
123.200.134.0/23 maxlen: 23
123.200.136.0/22 maxlen: 22
123.200.140.0/22 maxlen: 22
123.200.144.0/22 maxlen: 22
123.200.148.0/22 maxlen: 22
123.200.152.0/21 maxlen: 21
123.200.160.0/23 maxlen: 23
123.200.162.0/23 maxlen: 23
123.200.164.0/23 maxlen: 23
123.200.165.0/24 maxlen: 24
123.200.166.0/23 maxlen: 23
123.200.168.0/23 maxlen: 23
123.200.170.0/23 maxlen: 23
123.200.172.0/24 maxlen: 24
123.200.174.0/24 maxlen: 24
123.200.175.0/24 maxlen: 24
123.200.176.0/23 maxlen: 23
123.200.179.0/24 maxlen: 24
123.200.180.0/23 maxlen: 23
123.200.182.0/23 maxlen: 23
123.200.184.0/22 maxlen: 22
123.200.186.0/23 maxlen: 23
123.200.187.0/24 maxlen: 24
123.200.188.0/23 maxlen: 23
123.200.200.0/23 maxlen: 24
123.200.208.0/21 maxlen: 21
123.200.216.0/21 maxlen: 21
123.200.240.0/23 maxlen: 24
202.83.64.0/19 maxlen: 19
202.83.64.0/22 maxlen: 22
202.83.68.0/23 maxlen: 23
202.83.70.0/23 maxlen: 23
202.83.72.0/24 maxlen: 24
202.83.73.0/24 maxlen: 24
202.83.74.0/23 maxlen: 23
202.83.76.0/22 maxlen: 22
202.83.80.0/23 maxlen: 23
202.83.82.0/24 maxlen: 24
202.83.83.0/24 maxlen: 24
202.83.84.0/22 maxlen: 22
202.83.88.0/23 maxlen: 23
202.83.90.0/23 maxlen: 23
202.83.92.0/23 maxlen: 23
202.83.94.0/24 maxlen: 24
202.83.95.0/24 maxlen: 24
202.183.96.0/20 maxlen: 20
202.183.96.0/24 maxlen: 24
202.183.97.0/24 maxlen: 24
202.183.98.0/24 maxlen: 24
202.183.100.0/23 maxlen: 23
202.183.102.0/23 maxlen: 23
202.183.102.0/24 maxlen: 24
202.183.104.0/22 maxlen: 22
202.183.108.0/24 maxlen: 24
202.183.110.0/24 maxlen: 24
202.183.111.0/24 maxlen: 24
202.183.112.0/20 maxlen: 20
202.183.112.0/23 maxlen: 23
202.183.114.0/23 maxlen: 23
202.183.116.0/23 maxlen: 23
202.183.118.0/24 maxlen: 24
202.183.119.0/24 maxlen: 24
202.183.120.0/22 maxlen: 22
202.183.124.0/23 maxlen: 23
202.183.126.0/24 maxlen: 24
202.183.127.0/24 maxlen: 24
210.56.64.0/24 maxlen: 24
210.56.68.0/23 maxlen: 24
210.56.70.0/23 maxlen: 24
220.157.64.0/24 maxlen: 24
220.157.70.0/24 maxlen: 24
220.157.71.0/24 maxlen: 24
220.157.74.0/23 maxlen: 24
220.157.79.0/24 maxlen: 24
220.157.80.0/23 maxlen: 24
220.157.82.0/23 maxlen: 24
220.157.84.0/23 maxlen: 24
220.157.86.0/23 maxlen: 24
220.157.90.0/24 maxlen: 24
220.157.91.0/24 maxlen: 24
220.157.92.0/24 maxlen: 24
220.157.93.0/24 maxlen: 24
220.157.94.0/24 maxlen: 24
220.157.95.0/24 maxlen: 24
2407:6800::/32 maxlen: 32
2407:6800:0:200::/56 maxlen: 56
2407:6800:0:300::/56 maxlen: 56
2407:6800:0:400::/56 maxlen: 56
2407:6800:0:500::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE
Validity
Not Before: Mar 27 23:26:37 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67e5dead-1b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:26:4a:fa:c6:0d:fb:bb:c8:e4:b5:21:88:
7a:09:7c:6d:36:11:ba:29:4d:ce:68:20:86:e1:1b:
fa:9e:c0:15:14:d5:aa:0b:b4:58:e2:9b:c2:32:42:
93:21:df:3d:a1:b5:2f:cd:ef:5a:79:ce:82:66:6e:
e4:79:3f:b5:83:57:bd:21:1f:6a:c0:27:37:43:24:
6b:90:fe:98:cd:e8:d1:31:33:44:86:b7:4c:1c:6f:
e9:80:62:38:ae:bd:1c:90:e8:1e:e5:3f:0f:de:75:
00:de:17:0f:ca:f5:97:f6:8b:c0:f9:17:86:50:35:
51:97:86:e5:c1:91:56:56:55:e6:ac:3a:77:35:84:
13:7b:d5:0c:8d:69:39:65:9f:d8:0b:d9:db:fa:3a:
0a:be:82:40:3a:79:d5:5d:24:8a:c8:1f:b3:a0:42:
9e:2c:85:1c:92:cd:80:5b:46:b5:16:21:3b:52:b1:
d4:df:44:03:04:19:bd:da:6e:c9:d5:e0:e0:82:34:
90:a1:48:e8:73:39:9d:52:30:6b:ad:07:b7:a2:6a:
d7:36:a5:1f:c2:3f:c1:72:01:5d:d2:e5:9d:59:a6:
e1:d2:6e:c6:b2:9d:e1:da:3f:13:52:d2:fa:8c:95:
a2:d4:bc:1e:7d:7d:1e:f0:c5:6f:2e:95:ba:2e:5a:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:2B:21:E5:B9:09:B4:D1:67:67:7C:4A:0C:01:A1:08:1A:D0:4B
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.178.2.0/23
1.178.66.0/23
1.178.80.0/24
1.178.82.0-1.178.85.255
1.178.96.0/22
1.178.175.0-1.178.179.255
1.179.0.0/23
1.179.4.0-1.179.13.255
1.179.16.0/21
1.179.48.0/22
1.179.62.0/23
1.179.96.0/22
58.87.0.0/20
110.238.21.0/24
110.238.24.0/23
110.238.144.0/21
110.238.240.0/23
110.239.0.0/21
110.239.15.0-110.239.17.255
110.239.26.0/24
110.239.31.0-110.239.35.255
110.239.128.0/20
110.239.176.0/21
119.12.80.0/21
119.13.0.0-119.13.10.255
119.13.48.0/23
119.13.144.0/22
119.13.176.0/22
119.13.240.0/23
121.91.96.0/23
121.91.199.0/24
123.200.128.0-123.200.172.255
123.200.174.0-123.200.177.255
123.200.179.0-123.200.189.255
123.200.200.0/23
123.200.208.0/20
123.200.240.0/23
202.83.64.0/19
202.183.96.0/19
210.56.64.0/24
210.56.68.0/22
220.157.64.0/24
220.157.70.0/23
220.157.74.0/23
220.157.79.0-220.157.87.255
220.157.90.0-220.157.95.255
IPv6:
2407:6800::/32
Signature Algorithm: sha256WithRSAEncryption
16:b4:00:3f:8f:1d:83:b1:a7:89:21:4c:8f:ce:26:18:5e:f6:
3b:b9:66:db:48:ea:ee:c3:39:51:f5:22:4a:16:89:cf:26:f0:
06:2b:27:6d:e8:4a:c0:63:f3:f8:c8:1f:07:db:50:aa:a0:7b:
0a:65:8d:9f:82:9f:9e:20:49:bb:63:3e:84:ea:bd:ac:d9:a8:
da:32:ec:5a:e2:1b:06:2a:33:25:04:1b:53:24:9d:b1:93:00:
ad:62:eb:cd:fd:39:d8:fa:79:10:bd:52:7f:f3:ca:ac:53:78:
81:ac:f3:a9:af:f8:d1:05:4d:58:3d:d7:cf:0a:fe:05:cc:ca:
f6:c1:cc:17:d9:ae:d0:19:3b:41:cf:de:13:57:a0:28:67:e6:
5a:0a:c8:b9:36:bc:96:8f:ee:43:b5:02:18:5e:4a:44:3e:79:
0c:5a:f8:a4:b2:80:d2:95:42:11:4c:94:ae:bd:b8:e3:5e:07:
37:95:25:ce:8a:89:1d:4f:29:f4:0a:04:74:6c:86:f5:b4:12:
ed:e6:b3:74:2b:37:98:1a:e5:76:37:23:f7:5a:e4:d9:3f:8d:
20:c4:6c:58:81:ce:fb:ee:b3:d5:50:79:8a:34:2f:28:0b:4b:
ac:1d:f9:e9:6c:6b:5f:df:64:62:f0:9a:2c:be:5c:7d:2d:dc:
c5:c0:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:02 2025 by rpki-client