Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: 9u6HisXxIF8OgEhr4QA5UVJmCWQdnRov4QSiuihu/dQ=
Subject key identifier: 65:8A:61:FF:11:7E:E8:B2:27:F0:A9:1F:FC:50:A1:1A:26:3E:C0:33
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 283E
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Tue 24 Dec 2024 12:59:27 +0000
ROA not before: Tue 24 Dec 2024 12:59:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2400:adc0:200::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10302 (0x283e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Dec 24 12:59:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676ab02e-d296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:f1:e0:6c:73:59:e0:6f:9e:01:cb:15:e5:
9b:c2:cd:5b:b5:92:0c:85:88:de:1f:58:d9:99:62:
dc:73:42:50:42:35:9e:4b:26:fd:b5:df:1b:16:59:
cf:5d:9e:e8:7c:42:31:37:a0:39:d2:61:11:07:80:
92:2f:0e:b3:a4:1a:7f:d5:41:7c:11:a9:5b:a1:f5:
94:f3:74:28:dc:fc:7e:5f:fb:cd:81:01:a3:25:12:
e2:8b:fa:1f:b9:e1:86:49:8f:72:ef:dc:fa:8e:64:
e0:e0:28:77:33:40:46:1f:92:4a:39:93:75:f6:35:
65:b7:bc:5e:b2:32:70:cf:83:05:ab:74:a7:42:87:
53:e7:54:03:f4:8b:3c:31:9b:50:5b:50:14:04:5f:
89:cb:39:ae:05:bd:50:30:98:4d:77:25:64:50:49:
9c:71:dc:72:06:43:dc:61:ca:69:e9:72:f7:65:f2:
6c:a8:96:5c:0f:8a:5c:2d:3b:63:ae:96:44:8b:e9:
77:73:82:fe:c1:42:0b:a9:0c:6a:85:64:95:63:50:
7e:9d:ec:e5:8d:e5:e1:ec:d4:21:d4:86:4f:12:79:
cc:d0:d3:08:db:de:00:d9:00:bb:b2:6e:98:ce:74:
d7:e0:bd:d8:91:1e:49:a6:21:8b:a2:a3:a0:44:99:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:61:FF:11:7E:E8:B2:27:F0:A9:1F:FC:50:A1:1A:26:3E:C0:33
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:200::/48
2400:adc0:4005::/48
2400:adc0:4013::/48
2400:adc0:4203::/48
2400:adc0:4302::/48
2400:adc0:4500::/48
2400:adc0:4611::/48
2400:adc0:4700::/48
2400:adc0:4710::/47
2400:adc0:c001::/48
2400:adc0:c030::/48
2400:adc0:c102::/48
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adca::/39
2400:addb:800::/39
2400:addd:2800::/39
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
Signature Algorithm: sha256WithRSAEncryption
71:1c:59:ba:d4:03:bc:82:fd:30:32:33:5d:d1:7d:54:9e:62:
ac:c3:57:6b:c1:4a:8b:3e:89:8a:cb:0e:b3:9f:17:4c:60:48:
8a:5b:f7:49:37:a6:89:54:90:e4:30:ab:19:75:51:63:9f:c1:
1c:62:02:a3:71:7f:f4:2f:5c:65:bd:5d:df:3d:78:b6:7d:be:
e6:3b:48:c3:28:2a:54:f7:52:86:07:c6:29:5b:29:d7:f2:f7:
47:86:85:be:35:c0:45:c8:57:69:7c:af:ae:57:f4:f7:f7:db:
0d:86:ce:a9:15:d7:57:5a:a9:29:6a:3e:69:06:99:56:68:fd:
ce:d3:0f:e7:40:56:93:3e:0d:11:0f:75:a2:ac:71:66:c2:9a:
38:a4:95:37:fb:85:55:9f:4b:7b:b8:85:7b:7c:95:dd:00:64:
c4:b0:19:2b:0a:fd:5a:67:be:5e:46:d5:22:dd:3e:40:e0:a8:
a8:6c:23:8f:6b:13:6a:ba:fa:4c:68:fc:f8:f9:16:b6:2c:c4:
7e:f0:40:c2:e4:88:02:b3:2b:d7:28:b6:26:9a:66:05:57:7d:
f2:f3:34:1e:69:5b:f4:1e:1e:e4:10:2f:f3:b0:95:3a:4e:04:
e6:e0:8e:7f:78:e1:d6:1c:d4:11:00:a9:3f:bc:fe:17:1d:5a:
fe:ac:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:44 2025 by rpki-client