Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
File: 3E8B52A4C34F11EE8EFD7916C4F9AE02.roa (raw, json)
Hash identifier: f0SOms2ZrdCaFYCzLHwN4+3Eln+pTqX3SM8ow6/9roA=
Subject key identifier: 64:DA:25:93:90:30:90:E2:43:9E:A4:9B:7E:0F:CF:63:5E:69:70:8C
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 3482
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
Signing time: Tue 17 Dec 2024 00:45:01 +0000
ROA not before: Tue 17 Dec 2024 00:45:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4741
IP address blocks: 203.149.0.0/18 maxlen: 18
203.149.0.0/19 maxlen: 19
203.149.0.0/20 maxlen: 20
203.149.0.0/22 maxlen: 22
203.149.0.0/24 maxlen: 24
203.149.6.0/24 maxlen: 24
203.149.8.0/24 maxlen: 24
203.149.10.0/24 maxlen: 24
203.149.16.0/20 maxlen: 20
203.149.20.0/24 maxlen: 24
203.149.21.0/24 maxlen: 24
203.149.29.0/24 maxlen: 24
203.149.31.0/24 maxlen: 24
203.149.32.0/19 maxlen: 19
203.149.32.0/24 maxlen: 24
203.149.37.0/24 maxlen: 24
203.149.38.0/24 maxlen: 24
203.149.44.0/24 maxlen: 24
203.149.45.0/24 maxlen: 24
203.149.46.0/23 maxlen: 23
203.149.48.0/20 maxlen: 20
203.149.62.0/24 maxlen: 24
210.246.64.0/18 maxlen: 18
210.246.64.0/19 maxlen: 19
210.246.64.0/20 maxlen: 20
210.246.80.0/20 maxlen: 20
210.246.96.0/19 maxlen: 19
210.246.96.0/20 maxlen: 20
210.246.112.0/20 maxlen: 20
210.246.128.0/17 maxlen: 17
210.246.128.0/18 maxlen: 18
210.246.128.0/20 maxlen: 20
210.246.144.0/20 maxlen: 20
210.246.150.0/24 maxlen: 24
210.246.151.0/24 maxlen: 24
210.246.152.0/24 maxlen: 24
210.246.154.0/24 maxlen: 24
210.246.155.0/24 maxlen: 24
210.246.176.0/20 maxlen: 20
210.246.192.0/18 maxlen: 18
210.246.192.0/20 maxlen: 20
210.246.253.0/24 maxlen: 24
2403:c000::/32 maxlen: 32
2403:c000:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13442 (0x3482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Dec 17 00:45:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6760c98d-b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:87:96:22:10:d7:69:16:1b:a4:53:43:70:
6e:5a:81:89:f8:99:03:f7:82:1d:a3:90:35:95:dd:
96:4a:9f:1f:9e:d4:e2:ff:c7:87:c9:f7:25:83:64:
8a:b4:cc:4b:ae:5f:b2:a9:6b:aa:14:d9:d9:c6:74:
e8:11:1b:b7:51:ef:9b:d7:99:13:4b:4d:de:1b:e6:
3a:03:ee:c2:a3:37:81:1d:24:7a:e5:1d:e6:87:c7:
eb:4d:7d:ab:bb:9c:d9:48:27:b0:8f:50:e4:d7:85:
bf:d5:c6:15:66:63:8b:0c:e0:87:52:63:43:02:42:
ed:e8:f9:de:f4:3c:96:44:18:ae:ed:13:ce:81:48:
5c:ad:5b:0c:14:95:64:07:f7:55:13:08:c4:95:71:
36:93:f1:2a:69:a2:40:2d:aa:c4:95:50:f8:5c:78:
ef:e1:37:25:6b:21:60:80:0c:ef:4c:ce:83:cf:bf:
0e:d8:4a:43:9d:ae:c9:73:25:fc:76:64:df:fc:46:
11:8f:9a:fc:4a:b3:b8:00:4b:97:c5:c1:49:1a:a4:
a8:a8:e2:17:73:67:56:5e:31:52:42:ce:d1:6a:19:
ef:9e:d8:f0:66:86:da:49:af:0d:2c:b9:d9:28:cd:
40:2a:2c:99:e0:b6:c8:bb:55:1a:39:90:4b:dd:9c:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:25:93:90:30:90:E2:43:9E:A4:9B:7E:0F:CF:63:5E:69:70:8C
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.149.0.0/18
210.246.64.0-210.246.255.255
IPv6:
2403:c000::/32
Signature Algorithm: sha256WithRSAEncryption
8e:53:11:ab:69:ab:47:4d:3a:64:c4:9c:d9:5a:5e:04:eb:47:
10:83:86:ab:6c:61:47:f2:9c:66:5b:42:c3:15:4e:d0:8c:53:
7e:28:b3:c2:74:8c:16:3e:d8:06:03:a1:74:d9:b9:9e:03:ef:
1f:d9:8f:8a:0d:a0:0b:64:b8:1a:cc:17:f4:bb:9d:9a:3b:b0:
9c:83:ce:5b:d6:4a:24:ab:c1:b2:10:40:f2:5c:10:8d:31:9e:
ba:90:76:54:b4:81:b2:97:7d:0b:af:cc:a4:64:2e:37:a6:ca:
c6:f5:7f:a4:29:b1:4a:a7:8e:9f:06:f0:8f:15:e1:98:25:ef:
64:0c:7d:4c:c5:c4:b4:0c:f5:99:3c:7a:43:5b:41:8b:8c:17:
86:0f:f7:bc:fa:1c:e5:6e:1c:79:50:aa:31:6a:f0:3b:f5:26:
e5:3d:0f:9a:8f:4b:8e:52:81:70:dc:2b:f3:12:b1:72:ee:92:
59:23:b1:86:48:32:17:69:dc:36:cd:f2:13:8c:cd:a5:95:d6:
62:23:31:45:48:ab:e1:57:bd:16:e1:be:1c:83:65:9f:19:d0:
80:5a:d3:7f:7e:b0:d2:35:a7:6a:ca:0e:b8:eb:05:5d:c3:67:
5e:09:27:39:e4:54:a1:64:55:d3:8f:cf:f4:34:87:53:6f:8c:
f3:fa:19:ca
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjQxMjE3MDA0NTAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYwYzk4ZC1iMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArX2HliIQ12kWG6RTQ3BuWoGJ+JkD94Ido5A1ld2WSp8fntTi/8eHyfclg2SK
tMxLrl+yqWuqFNnZxnToERu3Ue+b15kTS03eG+Y6A+7CozeBHSR65R3mh8frTX2r
u5zZSCewj1Dk14W/1cYVZmOLDOCHUmNDAkLt6Pne9DyWRBiu7RPOgUhcrVsMFJVk
B/dVEwjElXE2k/EqaaJALarElVD4XHjv4TclayFggAzvTM6Dz78O2EpDna7JcyX8
dmTf/EYRj5r8SrO4AEuXxcFJGqSoqOIXc2dWXjFSQs7RahnvntjwZobaSa8NLLnZ
KM1AKiyZ4LbIu1UaOZBL3ZwAmQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGTaJZOQ
MJDiQ56km34Pz2NeaXCMMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvM0U4QjUyQTRD
MzRGMTFFRThFRkQ3OTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMBkEAgABMBMDBAbLlQAwCwMEBtL2QAMDANL2MA0EAgACMAcDBQAkA8AAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOUxGraatHTTpkxJzZWl4E60cQg4arbGFH8pxmW0LD
FU7QjFN+KLPCdIwWPtgGA6F02bmeA+8f2Y+KDaALZLgazBf0u52aO7Ccg85b1kok
q8GyEEDyXBCNMZ66kHZUtIGyl30Lr8ykZC43psrG9X+kKbFKp46fBvCPFeGYJe9k
DH1MxcS0DPWZPHpDW0GLjBeGD/e8+hzlbhx5UKoxavA79SblPQ+aj0uOUoFw3Cvz
ErFy7pJZI7GGSDIXadw2zfITjM2lldZiIzFFSKvhV70W4b4cg2WfGdCAWtN/frDS
Nadqyg646wVdw2deCSc55FShZFXTj8/0NIdTb4zz+hnK
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:57 2025 by rpki-client