Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
File: B803EDC45E9711EF8BA65030C4F9AE02.roa (raw, json)
Hash identifier: qf5NB+ztGO047leVo2PXRKVTSjGsBtoThqvuiJ+BpyM=
Subject key identifier: 46:67:4B:E8:BF:92:40:1F:92:BE:19:1A:DC:57:80:C6:5A:D3:9D:76
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0AE3
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
Signing time: Fri 28 Feb 2025 03:10:36 +0000
ROA not before: Fri 28 Feb 2025 03:10:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67
Validity
Not Before: Feb 28 03:10:36 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67c1292c-14ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:4c:5e:98:de:88:9b:2d:3b:7c:c9:45:22:
03:4a:1b:4f:6c:e8:21:01:a1:75:ab:e8:f3:c3:e3:
ed:a5:75:93:b0:54:25:f5:fb:6d:11:ac:1a:e0:f4:
72:33:d5:2f:29:00:db:40:a4:1c:15:01:63:e3:27:
de:e6:c5:0b:6d:a8:1a:a8:3f:7e:9f:82:f3:b2:06:
ef:6c:ed:d0:71:f5:b0:4a:8b:d9:ed:33:91:c9:4b:
7f:ec:11:80:1a:5c:f4:59:67:93:9c:07:ae:a1:22:
71:f6:3d:aa:75:ec:26:ae:4a:87:7d:e3:8d:6d:3d:
1a:71:fb:3b:bf:cb:e7:87:22:47:54:27:4a:84:0d:
78:84:09:e0:f7:d0:9e:ff:42:21:f3:30:8a:e1:28:
22:44:11:65:52:b1:f2:53:04:8a:11:5d:0d:43:7c:
70:be:c5:00:07:b8:4a:61:b3:a9:e9:5e:a0:f4:10:
56:94:1a:f6:5e:3b:73:88:74:48:16:84:3e:e2:a3:
fc:73:c9:09:50:51:3b:ed:af:13:95:31:20:70:ff:
0e:be:d7:d4:50:05:89:b6:49:6f:fe:35:04:4c:8b:
7d:73:05:3c:9c:ad:82:6a:01:fe:e8:20:b8:ab:1b:
2d:0b:7f:e7:91:43:86:6f:d5:cd:14:0a:40:1a:69:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:4B:E8:BF:92:40:1F:92:BE:19:1A:DC:57:80:C6:5A:D3:9D:76
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.173.255.255
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
45:12:1e:44:81:51:01:66:ed:e0:fc:49:63:3b:08:78:0c:f6:
72:59:f2:0d:d0:a5:6b:f0:1c:a0:7a:43:23:3f:75:9d:e2:db:
e9:cc:72:54:be:70:9e:7f:0f:fd:ff:29:8c:2e:48:58:7b:ff:
c9:03:7c:a1:a3:93:29:f3:6d:4e:44:7e:0e:96:68:7e:1f:93:
e5:36:1e:55:5d:e4:e3:07:c7:51:c9:13:68:ed:47:5c:7c:73:
32:43:0f:4a:e5:94:d9:0e:0c:28:9c:96:c4:c2:1f:83:b0:35:
e1:e3:ff:47:d9:91:f9:93:ed:70:bd:bb:1b:c5:be:ee:b5:1a:
79:1a:3d:ec:f3:86:63:20:e5:05:7c:d1:94:e7:ed:86:28:b7:
f1:ca:66:bc:77:c9:61:9b:1f:fd:f9:fa:7a:cb:7d:c3:a9:dc:
34:1d:60:d0:79:d0:f7:39:f4:1c:cf:fc:22:5e:4a:80:34:f6:
1a:ac:f7:d6:a9:45:1a:76:81:88:aa:7f:c2:67:7f:04:3c:3c:
a5:1c:41:4d:0e:06:9e:7b:20:71:e9:42:a1:53:e4:ca:06:6b:
c5:91:dd:27:46:f0:5e:61:a8:58:3a:4b:26:7b:ee:4c:1c:33:
1d:a4:41:90:f8:f6:78:5a:a8:98:cb:3c:ee:22:e6:43:ce:f6:
8f:21:64:19
-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjUwMjI4MDMxMDM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MxMjkyYy0xNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnw5MXpjeiJstO3zJRSIDShtPbOghAaF1q+jzw+PtpXWTsFQl9fttEawa4PRy
M9UvKQDbQKQcFQFj4yfe5sULbagaqD9+n4LzsgbvbO3QcfWwSovZ7TORyUt/7BGA
Glz0WWeTnAeuoSJx9j2qdewmrkqHfeONbT0acfs7v8vnhyJHVCdKhA14hAng99Ce
/0Ih8zCK4SgiRBFlUrHyUwSKEV0NQ3xwvsUAB7hKYbOp6V6g9BBWlBr2XjtziHRI
FoQ+4qP8c8kJUFE77a8TlTEgcP8OvtfUUAWJtklv/jUETIt9cwU8nK2CagH+6CC4
qxstC3/nkUOGb9XNFApAGmmYiQIDAQABo4IDyjCCA8YwHQYDVR0OBBYEFEZnS+i/
kkAfkr4ZGtxXgMZa0512MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjgwM0VEQzQ1
RTk3MTFFRjhCQTY1MDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFSBggrBgEFBQcBBwEB
/wSCAUEwggE9MIIBKwQCAAEwggEjMAsDBAErgN4DAwArgAMEBSuBIDALAwMBK4ID
BAYrgoAwDAMEBSuC4AMEBiuDAAMEBSuD4DAMAwQCK4QMAwQCK4QQMAwDBAIrhBwD
BAIrhCADBAIrhCgDBAIrhDQDBAArhEQwDAMEBSuEYAMEBSuFADAMAwQHK4WAAwQF
K4XAAwQHK4YAAwQAK4c6AwQAK4e7AwQFK4fAMAwDBAErmEoDBAIrmFADBAErmFwD
BAUrmGAwCwMEBiuYwAMDASusMAwDBAFlIF4DBARlIGADBABlIIwDBAFlIQQwDAME
AGUhEQMEAmUhEAMEAWUhGgMEAWUhHgMEAGUhKQMEAmUhNAMEAWUhcjAMAwQEfJzQ
AwQEfJzgAwQBlm1aAwQClm2MAwQElm3AMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcN
AQELBQADggEBAEUSHkSBUQFm7eD8SWM7CHgM9nJZ8g3QpWvwHKB6QyM/dZ3i2+nM
clS+cJ5/D/3/KYwuSFh7/8kDfKGjkynzbU5Efg6WaH4fk+U2HlVd5OMHx1HJE2jt
R1x8czJDD0rllNkODCiclsTCH4OwNeHj/0fZkfmT7XC9uxvFvu61GnkaPezzhmMg
5QV80ZTn7YYot/HKZrx3yWGbH/35+nrLfcOp3DQdYNB50Pc59BzP/CJeSoA09hqs
99apRRp2gYiqf8JnfwQ8PKUcQU0OBp57IHHpQqFT5MoGa8WR3SdG8F5hqFg6SyZ7
7kwcMx2kQZD49nhaqJjLPO4i5kPO9o8hZBk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:36 2025 by rpki-client