Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/45E2A394F8C411EF90719439C4F9AE02.roa
File: 45E2A394F8C411EF90719439C4F9AE02.roa (raw, json)
Hash identifier: UyHJ5zMsNoUwrMxvS7HMZVq3pqEtoMHdCMs3xvByukw=
Subject key identifier: 12:D9:BB:22:37:8B:FF:DD:26:0A:5B:45:3B:C0:62:23:C5:32:50:7B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 24FC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/45E2A394F8C411EF90719439C4F9AE02.roa
Signing time: Thu 20 Mar 2025 12:37:23 +0000
ROA not before: Thu 20 Mar 2025 12:37:23 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.62.0/24 maxlen: 24
115.167.63.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
175.110.80.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9468 (0x24fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Mar 20 12:37:23 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67dc0c03-dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:52:d5:a4:a8:ce:df:18:95:cb:62:54:5b:
80:98:a7:12:fe:15:79:7a:97:6f:c6:56:63:2c:88:
83:5b:44:8c:7e:7d:e5:44:f7:e3:b0:89:37:d9:83:
77:8f:34:9e:da:9b:ae:bc:89:46:a7:84:db:93:e5:
b9:dd:dc:70:67:7a:ee:d4:5e:63:98:3b:06:74:bf:
98:61:ac:29:1c:74:ce:25:f9:49:35:95:7d:1e:b5:
ff:0f:54:7b:81:ae:4d:67:d2:25:bb:b2:53:a6:ac:
2b:da:e4:6b:1a:70:e7:2e:a7:9c:f4:64:c9:f5:af:
ce:44:6f:a2:ce:e9:f5:e6:65:e6:33:0c:39:ef:e1:
aa:21:20:c0:cf:b5:ab:f6:8c:a0:99:91:5d:ef:e1:
92:3c:03:80:9d:f5:23:97:00:49:cf:4b:70:55:7f:
56:25:1b:42:9b:42:c8:1e:3b:f1:96:be:d0:43:08:
e3:54:18:9e:8b:43:b3:e6:5b:79:88:5a:4c:c4:d9:
bb:30:4c:00:25:14:62:81:d0:f0:76:a1:73:33:f9:
6d:da:c8:76:5a:be:16:79:84:97:2e:4d:e4:5d:6a:
f5:15:c1:47:3d:90:bb:fd:ec:50:78:37:f7:12:14:
ef:4b:25:74:b4:12:4b:18:86:b4:8e:98:de:09:24:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:BB:22:37:8B:FF:DD:26:0A:5B:45:3B:C0:62:23:C5:32:50:7B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/45E2A394F8C411EF90719439C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.224.0-113.203.226.255
113.203.228.0/24
113.203.233.0/24
115.167.9.0/24
115.167.48.0/24
115.167.50.0/24
115.167.62.0/23
115.167.76.0/24
175.110.80.0/22
202.92.18.0/24
202.92.20.0/24
223.29.225.0-223.29.226.255
223.29.230.0/24
223.29.235.0/24
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:2c:e1:96:fd:05:b4:ff:ad:e1:03:46:79:d9:ee:69:03:51:
29:1e:80:ce:83:82:e8:c5:c0:cc:b4:f4:70:47:fe:70:6c:73:
72:48:2b:d4:a0:0a:e1:1f:26:34:d3:e1:34:0d:0c:d7:f5:b4:
c7:01:d5:67:6f:0f:e8:ac:f6:5c:08:22:4a:35:4e:c4:07:f6:
6d:02:f8:83:e2:03:43:74:19:f5:66:94:e6:ab:02:43:a6:9e:
19:c0:49:4d:07:d2:43:eb:3f:7b:bb:03:63:2b:b5:79:70:c5:
35:6f:11:7e:80:94:87:ed:d5:45:b1:ac:29:c9:90:17:52:0b:
a5:3e:26:52:6d:92:44:13:66:87:7f:8f:9c:af:59:f5:e9:1e:
21:69:4e:3e:15:75:d2:50:21:16:89:f5:fc:29:52:90:4c:75:
b7:25:df:47:29:7c:64:ab:78:a3:ee:93:99:59:c9:82:16:34:
77:e3:52:e6:32:48:66:be:04:e8:a4:8b:f8:32:37:ea:27:b0:
a0:2a:c2:65:d8:3a:97:74:f6:fb:cb:79:af:ea:62:11:bb:7c:
21:65:77:e0:03:34:65:7e:0a:d3:12:24:0b:1e:cf:9f:3e:7a:
71:e2:eb:cf:10:29:9a:50:37:15:13:bd:ad:45:3c:cd:e5:60:
ef:f7:a4:f5
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgICJPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMzIwMTIzNzIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RjMGMwMy1kYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCdS1aSozt8YlctiVFuAmKcS/hV5epdvxlZjLIiDW0SMfn3lRPfjsIk32YN3
jzSe2puuvIlGp4Tbk+W53dxwZ3ru1F5jmDsGdL+YYawpHHTOJflJNZV9HrX/D1R7
ga5NZ9Ilu7JTpqwr2uRrGnDnLqec9GTJ9a/ORG+izun15mXmMww57+GqISDAz7Wr
9oygmZFd7+GSPAOAnfUjlwBJz0twVX9WJRtCm0LIHjvxlr7QQwjjVBiei0Oz5lt5
iFpMxNm7MEwAJRRigdDwdqFzM/lt2sh2Wr4WeYSXLk3kXWr1FcFHPZC7/exQeDf3
EhTvSyV0tBJLGIa0jpjeCSR/uQIDAQABo4IC+jCCAvYwHQYDVR0OBBYEFBLZuyI3
i//dJgpbRTvAYiPFMlB7MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDVFMkEzOTRG
OEM0MTFFRjkwNzE5NDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYMGCCsGAQUFBwEHAQH/
BHQwcjBwBAIAATBqMAwDBAVxy+ADBABxy+IDBABxy+QDBABxy+kDBABzpwkDBABz
pzADBABzpzIDBAFzpz4DBABzp0wDBAKvblADBADKXBIDBADKXBQwDAMEAN8d4QME
AN8d4gMEAN8d5gMEAN8d6wMEAd8d7jANBgkqhkiG9w0BAQsFAAOCAQEASyzhlv0F
tP+t4QNGednuaQNRKR6AzoOC6MXAzLT0cEf+cGxzckgr1KAK4R8mNNPhNA0M1/W0
xwHVZ28P6Kz2XAgiSjVOxAf2bQL4g+IDQ3QZ9WaU5qsCQ6aeGcBJTQfSQ+s/e7sD
Yyu1eXDFNW8RfoCUh+3VRbGsKcmQF1ILpT4mUm2SRBNmh3+PnK9Z9ekeIWlOPhV1
0lAhFon1/ClSkEx1tyXfRyl8ZKt4o+6TmVnJghY0d+NS5jJIZr4E6KSL+DI36iew
oCrCZdg6l3T2+8t5r+piEbt8IWV34AM0ZX4K0xIkCx7Pnz56ceLrzxApmlA3FRO9
rUU8zeVg7/ek9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:01 2025 by rpki-client