Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/17C5C2EE0AC511F0B49A897EC4F9AE02.roa
File: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (raw, json)
Hash identifier: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=
Subject key identifier: B8:3D:04:D3:D2:87:2E:A8:6A:12:9F:23:6A:45:99:88:02:F9:95:64
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 18B8
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/17C5C2EE0AC511F0B49A897EC4F9AE02.roa
Signing time: Thu 27 Mar 2025 04:36:47 +0000
ROA not before: Thu 27 Mar 2025 04:36:47 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
112.213.192.0/19 maxlen: 19
112.213.224.0/19 maxlen: 19
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.64.0/20 maxlen: 20
119.161.80.0/20 maxlen: 20
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
175.45.125.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.137.96.0/20 maxlen: 20
202.137.192.0/21 maxlen: 21
202.174.224.0/19 maxlen: 19
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.22.206.0/24 maxlen: 24
203.28.186.0/24 maxlen: 24
203.29.177.0/24 maxlen: 24
203.55.11.0/24 maxlen: 24
203.55.250.0/24 maxlen: 24
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
211.26.193.0/24 maxlen: 24
218.100.80.0/22 maxlen: 22
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6328 (0x18b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D
Validity
Not Before: Mar 27 04:36:47 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67e4d5df-a294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:e3:18:8e:d4:ce:3b:90:9d:77:bb:c5:93:
bd:82:29:86:78:cb:ed:5e:0d:77:a1:ce:c2:a4:92:
6f:81:44:a6:52:a1:d2:c2:13:5c:1c:c7:31:47:1b:
ce:7a:c5:7d:93:06:4d:ef:6d:30:ae:0e:ee:f4:e7:
38:83:98:d5:d6:26:99:ed:6d:09:a9:cf:d2:1a:27:
66:19:a4:0a:f8:2f:fa:7c:92:16:6d:b1:05:ad:47:
5e:e2:b1:9c:c3:24:25:2c:d2:16:a6:25:a7:a1:26:
a6:13:89:95:28:70:c7:cb:aa:12:17:2c:22:f6:6d:
ae:20:30:a9:5a:2d:6d:0d:3f:1f:2a:fd:bf:c8:94:
fd:24:c8:da:9d:d5:a5:c4:33:96:98:4f:17:41:ba:
2b:7a:9f:c1:51:d5:80:94:f2:25:e8:91:44:a7:dc:
38:88:43:81:0b:8e:6a:1c:73:b4:8a:a2:45:e4:63:
94:04:03:09:11:06:3d:e7:9d:d0:46:93:cb:ce:1f:
8d:71:ed:80:f0:86:af:2b:51:d4:04:4c:b6:d1:d1:
b4:c4:57:6c:54:2a:4b:25:b5:0f:59:74:e7:b4:19:
01:32:7b:ac:cc:e2:bc:c9:bc:37:13:ae:25:61:76:
e2:66:a2:0e:e9:a5:0d:c8:5a:83:0b:fb:e1:ba:31:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:04:D3:D2:87:2E:A8:6A:12:9F:23:6A:45:99:88:02:F9:95:64
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/17C5C2EE0AC511F0B49A897EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.200.0/22
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
112.213.192.0/18
114.31.192.0/20
116.212.192.0/18
119.161.64.0/19
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.80.176.0/20
202.89.160.0/19
202.137.96.0/20
202.137.192.0/21
202.174.224.0/19
202.189.64.0/20
203.12.251.0/24
203.18.212.0/23
203.22.206.0/24
203.28.186.0/24
203.29.177.0/24
203.55.11.0/24
203.55.250.0/24
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
211.26.193.0/24
218.100.80.0/22
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
22:cf:fb:23:53:d5:a7:3a:04:3e:0c:24:9b:6e:c9:f2:b0:6f:
16:d9:db:07:f2:13:ac:04:d0:1f:9e:23:4a:a6:48:50:c2:b1:
f8:b2:d9:26:db:03:56:0c:d1:9f:29:00:d5:02:08:b9:d1:7b:
6d:b1:f3:70:78:38:83:28:de:59:d1:f6:56:d8:d2:4c:32:4d:
67:7d:a9:23:d9:31:10:30:e4:29:1a:32:26:d8:f7:7f:1d:e9:
44:8b:64:1d:79:41:e8:1c:f4:6b:a6:b5:7a:26:a1:15:f6:9b:
b2:2d:27:75:88:95:b4:ca:df:b3:1b:71:be:b9:33:29:b0:1f:
f1:74:e5:2d:b1:cc:2c:d2:cd:87:36:37:f7:ad:25:21:b1:8a:
b8:a8:62:69:81:c2:0d:9c:4f:7b:4c:9e:3e:70:d0:af:76:1c:
01:f9:db:47:0a:7b:dc:fe:24:cb:78:ee:b9:fc:8c:7c:cc:3f:
a6:aa:78:21:3d:1d:c9:06:a3:32:27:bd:f6:d8:9f:7a:d6:93:
7d:40:d7:05:89:3c:66:44:ae:2e:84:d1:a1:71:18:0c:aa:0b:
a0:13:93:3e:b2:13:60:96:fc:c0:35:87:ea:e4:42:7c:69:87:
b9:77:b6:ea:46:9a:7f:33:64:76:18:2d:6b:0f:54:44:dc:33:
09:73:a1:b7
-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgICGLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjUwMzI3MDQzNjQ3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0ZDVkZi1hMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWfjGI7UzjuQnXe7xZO9gimGeMvtXg13oc7CpJJvgUSmUqHSwhNcHMcxRxvO
esV9kwZN720wrg7u9Oc4g5jV1iaZ7W0Jqc/SGidmGaQK+C/6fJIWbbEFrUde4rGc
wyQlLNIWpiWnoSamE4mVKHDHy6oSFywi9m2uIDCpWi1tDT8fKv2/yJT9JMjandWl
xDOWmE8XQborep/BUdWAlPIl6JFEp9w4iEOBC45qHHO0iqJF5GOUBAMJEQY9553Q
RpPLzh+Nce2A8IavK1HUBEy20dG0xFdsVCpLJbUPWXTntBkBMnuszOK8ybw3E64l
YXbiZqIO6aUNyFqDC/vhujGz8wIDAQABo4ID4DCCA9wwHQYDVR0OBBYEFLg9BNPS
hy6oahKfI2pFmYgC+ZVkMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMTdDNUMyRUUw
QUM1MTFGMEI0OUE4OTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFoBggrBgEFBQcBBwEB
/wSCAVcwggFTMIIBIwQCAAEwggEbAwQADolqAwQCG2rIAwQCK/G8AwQCK/z8AwMA
Mf8DBABnJXgDBAJn6ZQDBAJn/xADBAJuBXQDBAZw1cADBARyH8ADBAZ01MADBAV3
oUADBAV5NoADBAd5TwADBAV7Z8ADBAZ8/kADBAavLUADBAW0lEADBAHKPoowDAME
AMo+jQMEAMo+jgMEAMo+kwMEAso+mAMEBMpQsAMEBcpZoAMEBMqJYAMEA8qJwAME
Bcqu4AMEBMq9QAMEAMsM+wMEAcsS1AMEAMsWzgMEAMscugMEAMsdsQMEAMs3CwME
AMs3+gMEBctZQAMEAstcHAMEBcuBgAMEBcuZ4AMEBsuhQAMEBcu8gAMEANIyxgME
ANMawQMEAtpkUAMEA98bYDAqBAIAAjAkAwUAJAJ4AAMFACQD1gADBgAkA/wAAwMF
ACQEsAADBQAkBLwAMA0GCSqGSIb3DQEBCwUAA4IBAQAiz/sjU9WnOgQ+DCSbbsny
sG8W2dsH8hOsBNAfniNKpkhQwrH4stkm2wNWDNGfKQDVAgi50XttsfNweDiDKN5Z
0fZW2NJMMk1nfakj2TEQMOQpGjIm2Pd/HelEi2QdeUHoHPRrprV6JqEV9puyLSd1
iJW0yt+zG3G+uTMpsB/xdOUtscws0s2HNjf3rSUhsYq4qGJpgcINnE97TJ4+cNCv
dhwB+dtHCnvc/iTLeO65/Ix8zD+mqnghPR3JBqMyJ7322J961pN9QNcFiTxmRK4u
hNGhcRgMqgugE5M+shNglvzANYfq5EJ8aYe5d7bqRpp/M2R2GC1rD1RE3DMJc6G3
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:32:04 2025 by rpki-client