Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CBCB218CD86F11E9A6AF7518C4F9AE02.roa
File: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (raw, json)
Hash identifier: Kfa6XdLuOY2ZzknoO6wqzCD6UgRD1RzCwrhSTnLHyfU=
Subject key identifier: CE:5F:89:A8:FD:EA:CA:D6:2B:FB:8F:7A:7B:40:B4:C6:6D:62:9A:6D
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 349F
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CBCB218CD86F11E9A6AF7518C4F9AE02.roa
Signing time: Thu 23 Jan 2025 05:13:35 +0000
ROA not before: Thu 23 Jan 2025 05:13:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 55423
IP address blocks: 58.82.128.0/18 maxlen: 18
58.82.128.0/21 maxlen: 24
58.82.136.0/21 maxlen: 24
58.82.144.0/21 maxlen: 24
58.82.152.0/21 maxlen: 24
58.82.160.0/20 maxlen: 20
58.82.160.0/21 maxlen: 24
58.82.168.0/21 maxlen: 24
58.82.176.0/20 maxlen: 20
58.82.176.0/21 maxlen: 24
58.82.184.0/21 maxlen: 21
58.82.184.0/24 maxlen: 24
103.247.60.0/22 maxlen: 24
182.50.80.0/22 maxlen: 22
182.50.80.0/24 maxlen: 24
182.50.83.0/24 maxlen: 24
182.50.86.0/24 maxlen: 24
182.50.88.0/22 maxlen: 22
182.50.88.0/24 maxlen: 24
203.130.152.0/24 maxlen: 24
203.156.64.0/24 maxlen: 24
203.156.119.0/24 maxlen: 24
203.156.120.0/21 maxlen: 21
2404:4a00:1::/64 maxlen: 64
2404:4a00:2::/64 maxlen: 64
2404:4a00:3::/64 maxlen: 64
2404:4a00:4::/64 maxlen: 64
2404:4a00:1000::/48 maxlen: 48
2404:4a00:2094::/48 maxlen: 48
2404:4a00:5542::/48 maxlen: 48
2404:4a00:5542:3::/64 maxlen: 64
2404:4a00:5542:3a1::/64 maxlen: 64
2404:4a00:5542:3001::/64 maxlen: 64
2404:4a00:5542:3002::/64 maxlen: 64
2404:4a00:5542:3003::/64 maxlen: 64
2404:4a00:6000::/64 maxlen: 64
2404:4a00:6500::/64 maxlen: 64
2404:4a00:6501::/64 maxlen: 64
2404:4a00:6a00::/64 maxlen: 64
2404:4a00:7000::/64 maxlen: 64
2404:4a00:7500::/64 maxlen: 64
2404:4a00:7a00::/64 maxlen: 64
2404:4a00:8000::/64 maxlen: 64
2404:4a00:8500::/64 maxlen: 64
2404:4a00:8a00::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13471 (0x349f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Jan 23 05:13:35 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6791cfff-88e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:24:92:67:d3:bf:07:6b:6a:6b:54:17:60:
7f:d0:b3:d5:6c:96:35:9d:82:8d:37:cf:10:73:ac:
be:14:23:30:9f:2d:18:45:f1:dd:54:23:ca:c8:fc:
fc:00:c4:df:f1:69:52:9d:75:2f:5d:fa:66:ad:d3:
d1:dc:83:bc:6d:55:e6:a4:e6:8e:c8:7b:ca:a7:d3:
76:ba:e8:06:7e:44:a8:b0:e9:b3:9d:a2:a5:2e:ef:
07:1a:a9:b4:16:6f:4a:d5:49:86:33:d8:95:5f:83:
88:70:f7:8e:63:15:11:f6:03:62:d5:ec:91:fd:5b:
8a:4f:4a:38:58:d4:36:98:33:df:94:c4:6b:d7:23:
c3:c2:1c:e1:52:54:b4:d1:24:c9:65:74:a3:5f:f5:
bb:c6:6f:e2:9c:b7:ae:6c:9f:a4:6b:cf:d3:d0:5d:
c5:05:12:72:02:e8:34:16:ff:a1:83:cd:6d:2c:68:
3b:db:b0:bf:cb:26:d3:21:ab:bc:a4:54:56:9b:e4:
ec:b6:ec:9c:82:db:23:0b:16:5d:57:29:84:6c:29:
0c:89:53:0f:f7:d9:75:24:d1:dd:b2:a7:6d:99:52:
54:96:74:83:66:89:f3:59:c0:2f:49:95:22:02:57:
b1:24:fc:d5:9d:42:ac:03:4c:5c:56:7a:7b:38:8d:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:89:A8:FD:EA:CA:D6:2B:FB:8F:7A:7B:40:B4:C6:6D:62:9A:6D
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CBCB218CD86F11E9A6AF7518C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.82.128.0/18
103.247.60.0/22
182.50.80.0/22
182.50.86.0/24
182.50.88.0/22
203.130.152.0/24
203.156.64.0/24
203.156.119.0-203.156.127.255
IPv6:
2404:4a00:1::/64
2404:4a00:2::/64
2404:4a00:3::/64
2404:4a00:4::/64
2404:4a00:1000::/48
2404:4a00:2094::/48
2404:4a00:5542::/48
2404:4a00:6000::/64
2404:4a00:6500::/64
2404:4a00:6501::/64
2404:4a00:6a00::/64
2404:4a00:7000::/64
2404:4a00:7500::/64
2404:4a00:7a00::/64
2404:4a00:8000::/64
2404:4a00:8500::/64
2404:4a00:8a00::/64
Signature Algorithm: sha256WithRSAEncryption
28:64:c9:4a:ac:a5:6e:8c:25:cd:87:db:ea:0d:58:c7:9a:2e:
6b:f9:80:04:77:d1:88:6c:e4:73:f5:ef:39:b9:ca:03:a8:c8:
91:be:1c:e8:fe:42:f7:e7:c7:67:e9:65:b4:b8:d7:86:ac:18:
c6:ac:5a:f0:06:f4:73:8e:fa:be:2b:87:48:af:37:a6:0d:61:
0b:22:a6:01:0e:61:cc:c2:f2:f7:f0:eb:13:ff:c6:2b:8a:64:
d9:74:14:12:41:44:72:e6:e3:28:92:54:ac:f2:93:a8:4d:f7:
08:82:08:a4:72:84:38:45:a4:d7:48:63:4e:c6:8d:a8:2f:6b:
56:c8:58:8a:92:cf:29:90:36:20:ae:3f:dd:f5:5d:a0:a1:99:
72:8d:41:7f:46:00:0c:81:0f:aa:2c:76:23:3d:4d:b4:99:82:
1d:f4:3c:05:91:a1:09:d4:18:25:d8:4d:e3:57:02:55:35:38:
de:02:c4:da:02:d3:ed:88:ec:dc:46:b1:dd:17:58:6e:8f:a7:
6b:48:e0:03:61:3b:15:ad:1c:49:d3:0f:79:6a:13:81:fa:b5:
6e:6f:d3:c5:8e:0f:50:a5:cd:4d:15:0b:e9:88:a7:37:32:1f:
e7:d5:90:71:6e:a8:c3:a1:d2:a0:d9:a3:00:70:af:d5:e2:03:
9b:e1:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:57 2025 by rpki-client