Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
File: B803EDC45E9711EF8BA65030C4F9AE02.roa (raw, json)
Hash identifier: u6M4KdbwNmsFC5v3h5AVL6+1owkS01tx+CKD5jlB+7E=
Subject key identifier: 91:C0:A5:7B:20:00:85:C1:E1:89:B4:9C:CB:D8:3F:E4:36:36:82:F0
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0A94
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
Signing time: Thu 12 Dec 2024 09:11:24 +0000
ROA not before: Thu 12 Dec 2024 09:11:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Dec 12 09:11:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=675aa8bc-6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:67:a1:da:60:24:9f:e3:3d:2d:bd:34:80:
35:53:c5:80:e5:12:f3:6f:a9:e4:a0:cb:c0:2c:e1:
90:9b:51:2d:60:25:c3:e5:96:15:43:fa:af:67:f5:
3e:65:4d:41:64:60:3e:2e:6f:f5:fe:7c:b1:70:43:
e3:82:e5:e7:f5:b5:31:a2:d8:e0:24:a9:c3:21:fc:
a1:78:9a:46:6d:be:5b:8d:ed:80:d9:3e:a6:33:e5:
08:24:e3:96:ad:6f:d2:2c:b8:2b:05:73:b4:e3:b8:
eb:fd:29:d4:44:4c:b0:7e:de:99:61:03:15:c0:d0:
ee:25:89:4a:af:91:f4:11:5d:cc:a1:42:9e:9f:38:
b9:20:ed:e9:f3:87:0f:ea:a0:94:7a:79:f4:2f:a2:
6e:1c:6e:cd:a0:fa:19:e4:12:82:ec:05:8e:e7:cd:
13:98:1c:a1:cf:1e:29:33:93:7b:86:7c:aa:16:f6:
d8:60:5b:10:94:ff:34:3a:f9:69:40:7a:18:77:58:
48:56:ce:c2:3a:c7:93:c5:69:24:3a:72:57:a5:d0:
6e:6b:31:8b:39:55:4a:7a:be:22:8a:30:f2:28:70:
29:b1:ee:36:bb:b8:15:ee:b8:d4:7a:d1:44:05:33:
c4:b5:ef:32:81:24:8b:17:4f:ec:83:a5:f9:37:64:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:A5:7B:20:00:85:C1:E1:89:B4:9C:CB:D8:3F:E4:36:36:82:F0
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.160.0-43.133.223.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.173.255.255
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:91:45:60:8e:e9:c3:c5:b7:76:3b:dd:48:fd:55:f2:bd:
a6:f0:2d:9b:61:02:7e:63:79:8a:56:18:45:96:cb:ce:6b:ca:
b2:80:3a:6d:ed:b2:b8:f6:54:23:cb:2e:00:b1:13:58:34:6f:
b8:3e:92:79:ad:cb:6a:57:64:b1:67:24:d8:46:c2:6c:06:b7:
f3:4c:e9:ff:36:3b:a5:f5:17:fd:4b:2c:a9:01:18:38:eb:c8:
24:2a:ac:e7:7a:89:8a:8f:1c:d7:d0:5b:34:fa:52:8e:e1:49:
41:3a:5e:96:78:c3:9c:34:c9:5e:31:90:80:b9:ea:92:32:e6:
ae:5c:4e:d0:31:4b:87:21:72:7c:38:e3:cc:7e:6a:e2:ec:4a:
f6:be:03:8f:5e:53:31:cc:46:ec:67:f3:96:18:ea:d7:c9:4f:
a9:3d:b0:19:7e:ca:88:d4:2d:b0:dd:25:25:dc:cc:68:4f:3c:
90:c6:de:a8:b5:b6:8c:58:5f:8d:36:09:f6:44:26:ac:8b:1a:
65:53:50:e9:2e:0d:31:da:32:92:d3:16:2d:0d:8a:e1:cf:22:
d1:ea:48:13:f5:ea:9d:2b:63:77:f4:20:77:ae:5f:98:31:d9:
06:82:36:42:b4:40:27:92:f3:58:95:58:88:17:11:07:95:53:
e0:8e:9d:ae
-----BEGIN CERTIFICATE-----
MIIGoDCCBYigAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjQxMjEyMDkxMTI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVhYThiYy02ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyahnodpgJJ/jPS29NIA1U8WA5RLzb6nkoMvALOGQm1EtYCXD5ZYVQ/qvZ/U+
ZU1BZGA+Lm/1/nyxcEPjguXn9bUxotjgJKnDIfyheJpGbb5bje2A2T6mM+UIJOOW
rW/SLLgrBXO047jr/SnUREywft6ZYQMVwNDuJYlKr5H0EV3MoUKenzi5IO3p84cP
6qCUenn0L6JuHG7NoPoZ5BKC7AWO580TmByhzx4pM5N7hnyqFvbYYFsQlP80Ovlp
QHoYd1hIVs7COseTxWkkOnJXpdBuazGLOVVKer4iijDyKHApse42u7gV7rjUetFE
BTPEte8ygSSLF0/sg6X5N2Tq6wIDAQABo4IDxDCCA8AwHQYDVR0OBBYEFJHApXsg
AIXB4Ym0nMvYP+Q2NoLwMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjgwM0VEQzQ1
RTk3MTFFRjhCQTY1MDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFMBggrBgEFBQcBBwEB
/wSCATswggE3MIIBJQQCAAEwggEdMAsDBAErgN4DAwArgDALAwMBK4IDBAYrgoAw
DAMEBSuC4AMEBiuDAAMEBSuD4DAMAwQCK4QMAwQCK4QQMAwDBAIrhBwDBAIrhCAD
BAIrhCgDBAIrhDQDBAArhEQwDAMEBSuEYAMEBSuFADAMAwQFK4WgAwQFK4XAAwQH
K4YAAwQAK4c6AwQAK4e7AwQFK4fAMAwDBAErmEoDBAIrmFADBAErmFwDBAUrmGAw
CwMEBiuYwAMDASusMAwDBAFlIF4DBARlIGADBABlIIwDBAFlIQQwDAMEAGUhEQME
AmUhEAMEAWUhGgMEAWUhHgMEAGUhKQMEAmUhNAMEAWUhcjAMAwQEfJzQAwQEfJzg
AwQBlm1aAwQClm2MAwQElm3AMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcNAQELBQAD
ggEBAKOvkUVgjunDxbd2O91I/VXyvabwLZthAn5jeYpWGEWWy85ryrKAOm3tsrj2
VCPLLgCxE1g0b7g+knmty2pXZLFnJNhGwmwGt/NM6f82O6X1F/1LLKkBGDjryCQq
rOd6iYqPHNfQWzT6Uo7hSUE6XpZ4w5w0yV4xkIC56pIy5q5cTtAxS4chcnw448x+
auLsSva+A49eUzHMRuxn85YY6tfJT6k9sBl+yojULbDdJSXczGhPPJDG3qi1toxY
X402CfZEJqyLGmVTUOkuDTHaMpLTFi0NiuHPItHqSBP16p0rY3f0IHeuX5gx2QaC
NkK0QCeS81iVWIgXEQeVU+COna4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:11:48 2025 by rpki-client