Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/54E25E7ADE8911EFB9002A83C4F9AE02.roa
File: 54E25E7ADE8911EFB9002A83C4F9AE02.roa (raw, json)
Hash identifier: wYEqzZ8I58ZmmtjcMwLLK+8/Tv90fNeebFa6jLRoXOE=
Subject key identifier: 17:EF:7E:79:6E:30:EF:E7:CA:CB:51:53:40:3E:CD:D6:6C:F6:7C:8A
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0C38
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/54E25E7ADE8911EFB9002A83C4F9AE02.roa
Signing time: Wed 29 Jan 2025 21:40:25 +0000
ROA not before: Wed 29 Jan 2025 21:40:25 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
111.92.131.0/24 maxlen: 24
111.92.132.0/24 maxlen: 24
111.92.133.0/24 maxlen: 24
111.92.134.0/24 maxlen: 24
111.92.135.0/24 maxlen: 24
111.92.136.0/24 maxlen: 24
111.92.137.0/24 maxlen: 24
111.92.138.0/24 maxlen: 24
111.92.139.0/24 maxlen: 24
111.92.140.0/24 maxlen: 24
111.92.141.0/24 maxlen: 24
111.92.142.0/24 maxlen: 24
111.92.143.0/24 maxlen: 24
111.92.144.0/24 maxlen: 24
111.92.145.0/24 maxlen: 24
111.92.146.0/24 maxlen: 24
111.92.147.0/24 maxlen: 24
111.92.148.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.150.0/24 maxlen: 24
111.92.151.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Jan 29 21:40:25 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=679aa049-1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:5a:d9:2e:47:e2:72:0f:4d:c1:8c:53:34:
1e:6a:bf:ff:b7:9d:6f:eb:fd:4c:fc:c0:66:ef:a6:
86:01:ab:c7:07:96:a3:97:25:d5:fc:06:93:75:b3:
18:da:96:35:2f:ed:f8:83:df:f6:6e:12:a0:bb:44:
82:98:73:5f:86:36:a3:46:65:75:ad:00:2b:2f:b6:
59:93:8d:51:f9:23:5c:f3:c5:49:ff:46:67:6f:2c:
bd:44:39:74:40:01:6f:d1:a2:b7:74:82:e4:0a:4f:
36:99:f6:fa:4c:29:ce:47:64:63:c8:fa:3e:01:62:
c6:4f:11:df:50:c3:ad:31:45:b5:d4:d5:0e:cd:98:
30:4f:cf:61:92:9f:de:8b:47:83:df:4e:98:bd:08:
ee:99:63:d6:05:fa:b0:a6:06:72:9c:86:3f:6a:7f:
89:64:54:30:a8:d8:04:76:66:f0:4c:77:3b:8f:aa:
c6:97:6c:e8:b8:b8:54:b9:34:e6:fb:e2:96:21:8b:
05:5f:79:71:86:d4:82:5c:44:46:5c:cc:33:83:b7:
3c:e2:5b:f5:f5:1e:52:fc:c7:7d:27:ea:2c:d5:a6:
91:72:63:47:af:5f:46:4e:54:39:d0:b2:e3:fd:6a:
76:83:05:8a:33:57:e6:77:41:82:3f:5d:18:13:86:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:7E:79:6E:30:EF:E7:CA:CB:51:53:40:3E:CD:D6:6C:F6:7C:8A
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/54E25E7ADE8911EFB9002A83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/23
14.192.131.0/24
14.192.133.0/24
14.192.136.0/23
14.192.143.0-14.192.151.255
14.192.155.0-14.192.159.255
43.247.120.0-43.247.122.255
103.20.132.0/24
103.20.134.0/23
111.92.128.0-111.92.151.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
04:aa:53:c7:b1:b1:ac:be:27:be:30:32:ec:5b:f4:75:c7:93:
63:81:1d:36:88:c4:50:d6:c8:1b:7d:b9:c0:8c:cb:5b:e4:e8:
93:d6:ce:4f:bc:42:14:b4:5c:1f:70:fc:09:07:e0:db:a0:a5:
5a:d3:6b:d1:47:e5:70:72:72:d6:eb:92:5c:5a:ef:ab:6f:5f:
d1:df:ae:b7:1b:91:fb:5a:53:32:10:30:ad:d6:b2:b6:89:a9:
8d:01:0b:c5:ce:37:49:29:7c:27:b3:51:b3:5e:f8:57:43:03:
30:48:eb:0e:15:8f:63:78:24:77:d0:29:60:1c:ab:0e:3f:88:
f3:9e:49:73:fa:4b:16:bd:7e:75:db:57:a0:38:21:c2:f5:53:
46:34:2e:e9:eb:d8:34:c8:7e:86:52:09:b1:19:b7:c2:60:b8:
e5:c4:48:1c:15:3e:1e:67:c8:fe:20:a9:6d:73:cb:a2:79:0b:
99:eb:96:05:5e:d4:27:96:fa:9e:f1:4d:db:3a:ca:07:8f:e7:
b0:12:f1:f2:40:e2:26:24:d0:26:18:48:db:a8:c4:07:46:1b:
72:c0:b7:bd:77:bd:c9:8f:d8:2a:fc:65:dc:b1:72:0c:f6:30:
db:7e:51:33:76:c9:c6:29:ca:71:2d:eb:22:ea:60:24:2e:05:
91:9f:cd:ad
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUwMTI5MjE0MDI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzlhYTA0OS0xMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuda2S5H4nIPTcGMUzQear//t51v6/1M/MBm76aGAavHB5ajlyXV/AaTdbMY
2pY1L+34g9/2bhKgu0SCmHNfhjajRmV1rQArL7ZZk41R+SNc88VJ/0Znbyy9RDl0
QAFv0aK3dILkCk82mfb6TCnOR2RjyPo+AWLGTxHfUMOtMUW11NUOzZgwT89hkp/e
i0eD306YvQjumWPWBfqwpgZynIY/an+JZFQwqNgEdmbwTHc7j6rGl2zouLhUuTTm
++KWIYsFX3lxhtSCXERGXMwzg7c84lv19R5S/Md9J+os1aaRcmNHr19GTlQ50LLj
/Wp2gwWKM1fmd0GCP10YE4aqUQIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFBfvfnlu
MO/nystRU0A+zdZs9nyKMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNTRFMjVFN0FE
RTg5MTFFRkI5MDAyQTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYQGCCsGAQUFBwEHAQH/
BHUwczBiBAIAATBcAwQBDsCAAwQADsCDAwQADsCFAwQBDsCIMAwDBAAOwI8DBAMO
wJAwDAMEAA7AmwMEBQ7AgDAMAwQDK/d4AwQAK/d6AwQAZxSEAwQBZxSGMAwDBAdv
XIADBANvXJAwDQQCAAIwBwMFACQDeYAwDQYJKoZIhvcNAQELBQADggEBAASqU8ex
say+J74wMuxb9HXHk2OBHTaIxFDWyBt9ucCMy1vk6JPWzk+8QhS0XB9w/AkH4Nug
pVrTa9FH5XByctbrklxa76tvX9HfrrcbkftaUzIQMK3WsraJqY0BC8XON0kpfCez
UbNe+FdDAzBI6w4Vj2N4JHfQKWAcqw4/iPOeSXP6Sxa9fnXbV6A4IcL1U0Y0Lunr
2DTIfoZSCbEZt8JguOXESBwVPh5nyP4gqW1zy6J5C5nrlgVe1CeW+p7xTds6ygeP
57AS8fJA4iYk0CYYSNuoxAdGG3LAt713vcmP2Cr8Zdyxcgz2MNt+UTN2ycYpynEt
6yLqYCQuBZGfza0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:23 2025 by rpki-client