Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/EB05C3DAB12A11EDA0A33462C4F9AE02.roa
File: EB05C3DAB12A11EDA0A33462C4F9AE02.roa (raw, json)
Hash identifier: GujHFCYemvaBLbUE7OzcCEnL2zp8w3BjUit+PWI+/yY=
Subject key identifier: C9:9F:C7:83:DF:B1:A2:1C:76:84:29:9F:4E:D1:DB:BC:A6:BA:E2:1E
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0986
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/EB05C3DAB12A11EDA0A33462C4F9AE02.roa
Signing time: Mon 20 Feb 2023 14:29:01 +0000
ROA not before: Mon 20 Feb 2023 14:29:01 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Feb 20 14:29:01 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63f383ad-8834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:94:1d:e7:ff:c3:e5:88:0f:1c:a2:bc:99:
44:c1:68:c7:f9:a3:85:f4:20:2a:43:3e:d3:d0:8c:
a7:3c:eb:ea:c7:7c:97:16:83:2d:74:e6:19:a3:af:
cf:d1:ad:eb:6c:3d:c2:37:02:e0:1f:c8:e0:01:ee:
22:f6:7b:fc:f2:2b:1b:29:ff:9b:a3:68:52:ca:5f:
1e:84:8e:12:e6:88:36:3b:44:ba:f6:9f:7e:5d:7e:
ce:e5:f0:d7:bd:f6:71:c1:98:fd:54:9b:73:fe:80:
5b:7e:1a:bc:30:cd:06:17:93:3a:d2:e3:55:fe:7d:
eb:1b:ca:4b:b6:f2:97:bc:35:9b:ba:a7:56:52:6e:
92:58:70:95:3e:87:1b:08:47:f2:2c:33:91:ff:4f:
5d:ca:f9:ad:b1:65:e0:c6:f7:23:42:e9:d1:05:c9:
40:42:de:06:e9:2a:bd:4d:4d:72:06:68:d5:6e:38:
3c:6c:a4:59:93:d8:91:e0:5e:9b:cd:33:57:03:5c:
f0:13:af:a5:16:d0:2d:5b:2e:ca:20:e2:a1:ae:3b:
27:b1:c7:97:31:00:ce:c6:a5:d7:a6:de:79:8e:05:
bf:fb:7a:a2:08:ea:11:5e:49:e2:90:b3:e9:22:a1:
11:f8:7a:3f:d0:a8:82:ee:4b:4c:ea:0e:cc:3c:97:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:C7:83:DF:B1:A2:1C:76:84:29:9F:4E:D1:DB:BC:A6:BA:E2:1E
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/EB05C3DAB12A11EDA0A33462C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0-103.11.62.255
113.203.209.0-113.203.220.255
113.203.222.0-113.203.226.255
113.203.228.0/23
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.243.0-113.203.244.255
113.203.246.0/24
113.203.252.0/22
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.139.255
180.178.144.0/24
180.178.149.0/24
180.178.160.0-180.178.162.255
180.178.172.0-180.178.177.255
180.178.179.0-180.178.187.255
223.29.224.0/24
223.29.236.0/22
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:e1:b8:c3:4d:d6:02:8a:5a:86:a3:d5:a1:11:56:f5:d8:e1:
3a:51:63:eb:ab:8b:1e:5c:54:ad:b5:7b:b3:56:9d:a8:50:3c:
90:84:5e:1f:d0:81:24:46:2c:cc:4b:c9:e9:cb:55:27:6e:11:
e8:bf:e2:01:fe:7f:58:ac:5d:27:4e:20:46:ee:69:09:1e:22:
dd:2c:a2:47:d4:38:43:46:06:24:e4:d1:7c:87:5c:0a:3c:f7:
07:08:72:59:b8:c5:fa:bb:70:07:c2:c1:2b:11:7c:41:7f:d2:
ed:b2:e9:48:e7:54:12:f0:c7:a9:16:17:48:87:c0:1f:86:c9:
d8:19:a3:a2:c0:c0:88:47:ad:61:3f:73:e4:2f:a4:4b:3b:d1:
e3:11:b5:69:8b:e2:5f:63:c8:dd:b4:99:c1:c3:39:81:fb:4d:
81:1c:a1:6f:2c:6b:92:61:be:dc:cc:c2:a7:f9:63:e6:f3:66:
8f:09:68:f5:f3:a2:af:ca:a5:93:b2:2c:a4:f3:76:7c:7f:06:
ff:1d:4c:80:9d:fc:69:85:7f:d8:a7:bb:25:ca:69:bd:d6:76:
97:b6:ad:65:e5:63:ec:11:09:e2:bf:40:30:73:50:5f:8a:a9:
12:12:79:ce:0a:35:df:c8:fb:a4:9a:65:2d:80:e7:00:6a:9e:
e6:66:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:05:12 2025 by rpki-client