Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
File: 75D2A3666E8011EF92BDE465C4F9AE02.roa (raw, json)
Hash identifier: S04wYcbd1lGcy0ITwr0o7tL3zqd2SscWZtEz6UykqrE=
Subject key identifier: EE:A6:95:F6:7F:E6:4C:4F:7E:2F:84:42:B1:25:43:9B:1A:22:69:0C
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1CE4
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
Signing time: Tue 28 Jan 2025 08:41:19 +0000
ROA not before: Tue 28 Jan 2025 08:41:19 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 132165
IP address blocks: 43.245.128.0/24 maxlen: 24
43.245.129.0/24 maxlen: 24
43.245.130.0/24 maxlen: 24
43.245.131.0/24 maxlen: 24
103.12.120.0/24 maxlen: 24
103.12.121.0/24 maxlen: 24
103.12.122.0/24 maxlen: 24
103.12.123.0/24 maxlen: 24
111.119.160.0/24 maxlen: 24
111.119.161.0/24 maxlen: 24
111.119.162.0/24 maxlen: 24
111.119.163.0/24 maxlen: 24
111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
111.119.166.0/24 maxlen: 24
111.119.167.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.193.0/24 maxlen: 24
113.203.195.0/24 maxlen: 24
113.203.200.0/24 maxlen: 24
113.203.201.0/24 maxlen: 24
113.203.202.0/24 maxlen: 24
113.203.203.0/24 maxlen: 24
113.203.204.0/24 maxlen: 24
113.203.205.0/24 maxlen: 24
113.203.207.0/24 maxlen: 24
115.42.64.0/24 maxlen: 24
115.42.65.0/24 maxlen: 24
115.42.66.0/24 maxlen: 24
115.42.67.0/24 maxlen: 24
115.42.70.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
118.103.232.0/24 maxlen: 24
118.103.233.0/24 maxlen: 24
118.103.234.0/24 maxlen: 24
118.103.235.0/24 maxlen: 24
118.103.236.0/24 maxlen: 24
118.103.237.0/24 maxlen: 24
118.103.238.0/24 maxlen: 24
118.103.239.0/24 maxlen: 24
2406:d00::/48 maxlen: 48
2406:d00:2222::/48 maxlen: 48
2406:d00:5555::/48 maxlen: 48
2406:d00:aaaa::/48 maxlen: 48
2406:d00:bbbb::/48 maxlen: 48
2406:d00:ccaa::/47 maxlen: 48
2406:d00:ccc0::/46 maxlen: 48
2406:d00:cccc::/46 maxlen: 48
2406:d00:cce0::/48 maxlen: 48
2406:d00:ccea::/48 maxlen: 48
2406:d00:ddc1::/48 maxlen: 48
2406:d00:ddcc::/48 maxlen: 48
2406:d00:ddd1::/48 maxlen: 48
2406:d00:dddd::/48 maxlen: 48
2406:d00:ddf1::/48 maxlen: 48
2406:d00:ddff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7396 (0x1ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Jan 28 08:41:19 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6798982e-0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:53:4d:9c:52:e9:a6:fb:81:0b:50:4e:7d:
4f:fd:00:1e:69:49:24:b0:2f:de:a8:f6:b8:9a:5d:
fd:bc:82:cc:ac:d5:3e:b4:e6:cd:e6:d6:5c:57:38:
48:62:6a:50:d3:c6:aa:c9:31:35:98:ff:15:51:9d:
4f:ec:7f:6a:8f:ef:bd:42:fd:5e:35:34:9f:1c:89:
cf:f3:85:fb:7c:04:80:40:c9:27:aa:b7:84:2e:53:
ab:36:c0:09:4c:82:e3:4b:58:ae:52:70:f6:12:6a:
6b:43:81:55:af:77:8b:90:3c:03:d8:ec:87:b6:b6:
14:38:f4:1a:f8:e8:b7:b5:d8:e4:62:9f:a0:ff:18:
d2:b0:2a:44:a5:ee:4f:00:5a:20:5a:b6:e8:dd:39:
50:00:9f:7c:a3:f7:b5:9b:d3:c4:a3:eb:42:84:e4:
3c:0b:3a:1b:10:df:ae:9d:f8:3a:6e:a9:a4:68:e4:
c1:2f:17:41:39:4c:a1:9c:b5:68:b9:28:3e:4a:ec:
94:25:a1:04:33:86:80:54:79:86:b9:a0:ec:9d:67:
cb:74:fe:99:eb:c3:14:45:d5:51:a0:ac:e7:74:d1:
99:ba:ad:c5:bf:4f:dd:5e:51:cd:6d:7c:4e:31:56:
84:2c:d6:5e:2c:51:09:74:35:3a:e8:78:83:c7:a3:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:95:F6:7F:E6:4C:4F:7E:2F:84:42:B1:25:43:9B:1A:22:69:0C
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/75D2A3666E8011EF92BDE465C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.128.0/22
103.12.120.0/22
111.119.160.0/21
113.203.192.0/23
113.203.195.0/24
113.203.200.0-113.203.205.255
113.203.207.0/24
115.42.64.0/22
115.42.70.0/24
118.103.226.0-118.103.239.255
IPv6:
2406:d00::/48
2406:d00:2222::/48
2406:d00:5555::/48
2406:d00:aaaa::/48
2406:d00:bbbb::/48
2406:d00:ccaa::/47
2406:d00:ccc0::/46
2406:d00:cccc::/46
2406:d00:cce0::/48
2406:d00:ccea::/48
2406:d00:ddc1::/48
2406:d00:ddcc::/48
2406:d00:ddd1::/48
2406:d00:dddd::/48
2406:d00:ddf1::/48
2406:d00:ddff::/48
Signature Algorithm: sha256WithRSAEncryption
c4:c1:0e:6b:b5:16:c7:7f:7c:d0:04:fc:99:ef:56:f9:60:de:
e3:84:da:b3:ce:b1:75:63:d3:4c:3b:8a:45:8b:0e:dd:98:33:
5e:9a:65:2b:41:9d:69:3d:53:10:6a:c0:38:b9:a8:74:80:a6:
14:1e:4b:1b:41:25:92:66:99:e0:ea:24:ea:b6:75:dc:be:1a:
2a:0b:d8:a7:38:76:19:a4:8e:87:64:ee:14:a0:73:a0:ec:51:
db:b6:1c:bd:0a:58:ad:12:72:d8:0d:c5:26:7b:56:24:1d:d3:
16:6f:d6:f0:a1:20:e8:38:09:30:92:18:84:dd:92:36:6d:14:
79:ec:a5:cc:b0:50:76:0b:a0:22:cb:eb:59:6f:4e:af:c4:45:
67:1a:d9:5b:70:b8:f2:46:55:d6:7a:a0:56:87:8a:bd:ef:fb:
80:bd:b3:2b:72:1d:22:d7:be:e4:cb:c9:9a:6e:7e:24:c2:35:
8e:b1:7d:d7:d5:4b:da:31:73:12:ec:b9:83:c4:36:96:f3:9b:
26:28:e8:42:51:76:da:b3:1e:c3:5c:2a:b9:7e:3d:9d:28:1c:
1d:c1:39:f6:75:f3:81:25:9e:26:9b:36:44:d3:28:8c:5b:fb:
76:1f:b8:7f:5f:3a:92:61:8e:1d:33:91:b4:eb:f0:f3:7f:5b:
a1:0b:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:43:45 2025 by rpki-client