Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B5B50E117711EEA0E5E040C4F9AE02.roa
File: B3B5B50E117711EEA0E5E040C4F9AE02.roa (raw, json)
Hash identifier: nQhhZUF5JMtMkPOaK5/t/80G84B3KX7W5B6XvFVgcbQ=
Subject key identifier: C1:62:2B:A6:F2:45:3B:DC:00:AE:27:15:DC:AB:7E:4E:E3:74:47:FD
Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Certificate serial: 3486
Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B5B50E117711EEA0E5E040C4F9AE02.roa
Signing time: Fri 06 Dec 2024 02:56:52 +0000
ROA not before: Fri 06 Dec 2024 02:56:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 10030
IP address blocks: 103.3.20.0/22 maxlen: 22
183.171.0.0/16 maxlen: 16
183.171.7.0/24 maxlen: 24
183.171.16.0/24 maxlen: 24
183.171.17.0/24 maxlen: 24
183.171.18.0/24 maxlen: 24
183.171.19.0/24 maxlen: 24
183.171.20.0/24 maxlen: 24
183.171.21.0/24 maxlen: 24
183.171.22.0/24 maxlen: 24
183.171.23.0/24 maxlen: 24
183.171.24.0/24 maxlen: 24
183.171.25.0/24 maxlen: 24
183.171.26.0/24 maxlen: 24
183.171.27.0/24 maxlen: 24
183.171.28.0/24 maxlen: 24
183.171.29.0/24 maxlen: 24
183.171.30.0/24 maxlen: 24
183.171.31.0/24 maxlen: 24
183.171.40.0/24 maxlen: 24
183.171.49.0/24 maxlen: 24
183.171.50.0/24 maxlen: 24
183.171.51.0/24 maxlen: 24
183.171.52.0/24 maxlen: 24
183.171.53.0/24 maxlen: 24
183.171.54.0/24 maxlen: 24
183.171.55.0/24 maxlen: 24
183.171.56.0/24 maxlen: 24
183.171.57.0/24 maxlen: 24
183.171.64.0/24 maxlen: 24
183.171.65.0/24 maxlen: 24
183.171.66.0/24 maxlen: 24
183.171.67.0/24 maxlen: 24
183.171.68.0/24 maxlen: 24
183.171.69.0/24 maxlen: 24
183.171.70.0/24 maxlen: 24
183.171.71.0/24 maxlen: 24
183.171.72.0/24 maxlen: 24
183.171.73.0/24 maxlen: 24
183.171.74.0/24 maxlen: 24
183.171.75.0/24 maxlen: 24
183.171.76.0/24 maxlen: 24
183.171.77.0/24 maxlen: 24
183.171.78.0/24 maxlen: 24
183.171.79.0/24 maxlen: 24
183.171.80.0/24 maxlen: 24
183.171.81.0/24 maxlen: 24
183.171.82.0/24 maxlen: 24
183.171.83.0/24 maxlen: 24
183.171.84.0/24 maxlen: 24
183.171.85.0/24 maxlen: 24
183.171.86.0/24 maxlen: 24
183.171.87.0/24 maxlen: 24
183.171.88.0/24 maxlen: 24
183.171.89.0/24 maxlen: 24
183.171.90.0/24 maxlen: 24
183.171.91.0/24 maxlen: 24
183.171.92.0/24 maxlen: 24
183.171.93.0/24 maxlen: 24
183.171.94.0/24 maxlen: 24
183.171.95.0/24 maxlen: 24
183.171.96.0/24 maxlen: 24
183.171.97.0/24 maxlen: 24
183.171.98.0/24 maxlen: 24
183.171.99.0/24 maxlen: 24
183.171.100.0/24 maxlen: 24
183.171.101.0/24 maxlen: 24
183.171.102.0/24 maxlen: 24
183.171.103.0/24 maxlen: 24
183.171.104.0/24 maxlen: 24
183.171.105.0/24 maxlen: 24
183.171.106.0/24 maxlen: 24
183.171.107.0/24 maxlen: 24
183.171.108.0/24 maxlen: 24
183.171.109.0/24 maxlen: 24
183.171.110.0/24 maxlen: 24
183.171.111.0/24 maxlen: 24
183.171.112.0/24 maxlen: 24
183.171.113.0/24 maxlen: 24
183.171.114.0/24 maxlen: 24
183.171.115.0/24 maxlen: 24
183.171.116.0/24 maxlen: 24
183.171.117.0/24 maxlen: 24
183.171.118.0/24 maxlen: 24
183.171.119.0/24 maxlen: 24
183.171.120.0/24 maxlen: 24
183.171.121.0/24 maxlen: 24
183.171.122.0/24 maxlen: 24
183.171.123.0/24 maxlen: 24
183.171.124.0/24 maxlen: 24
183.171.125.0/24 maxlen: 24
183.171.126.0/24 maxlen: 24
183.171.127.0/24 maxlen: 24
183.171.128.0/24 maxlen: 24
183.171.129.0/24 maxlen: 24
183.171.130.0/24 maxlen: 24
183.171.131.0/24 maxlen: 24
183.171.132.0/24 maxlen: 24
183.171.133.0/24 maxlen: 24
183.171.134.0/24 maxlen: 24
183.171.135.0/24 maxlen: 24
183.171.136.0/24 maxlen: 24
183.171.137.0/24 maxlen: 24
183.171.138.0/24 maxlen: 24
183.171.139.0/24 maxlen: 24
183.171.140.0/24 maxlen: 24
183.171.141.0/24 maxlen: 24
183.171.142.0/24 maxlen: 24
183.171.143.0/24 maxlen: 24
183.171.156.0/24 maxlen: 24
183.171.158.0/24 maxlen: 24
183.171.160.0/24 maxlen: 24
183.171.161.0/24 maxlen: 24
183.171.162.0/24 maxlen: 24
183.171.163.0/24 maxlen: 24
183.171.164.0/24 maxlen: 24
183.171.165.0/24 maxlen: 24
183.171.166.0/24 maxlen: 24
183.171.167.0/24 maxlen: 24
183.171.168.0/24 maxlen: 24
183.171.169.0/24 maxlen: 24
183.171.170.0/24 maxlen: 24
183.171.171.0/24 maxlen: 24
183.171.172.0/24 maxlen: 24
183.171.173.0/24 maxlen: 24
183.171.174.0/24 maxlen: 24
183.171.175.0/24 maxlen: 24
183.171.176.0/24 maxlen: 24
183.171.177.0/24 maxlen: 24
183.171.183.0/24 maxlen: 24
183.171.184.0/24 maxlen: 24
183.171.186.0/24 maxlen: 24
183.171.187.0/24 maxlen: 24
183.171.188.0/23 maxlen: 23
183.171.190.0/24 maxlen: 24
183.171.191.0/24 maxlen: 24
183.171.192.0/24 maxlen: 24
183.171.193.0/24 maxlen: 24
183.171.194.0/24 maxlen: 24
183.171.195.0/24 maxlen: 24
183.171.196.0/24 maxlen: 24
183.171.197.0/24 maxlen: 24
183.171.198.0/24 maxlen: 24
183.171.199.0/24 maxlen: 24
183.171.200.0/24 maxlen: 24
183.171.201.0/24 maxlen: 24
183.171.202.0/24 maxlen: 24
183.171.204.0/24 maxlen: 24
183.171.205.0/24 maxlen: 24
183.171.207.0/24 maxlen: 24
183.171.208.0/21 maxlen: 21
183.171.223.0/24 maxlen: 24
183.171.224.0/24 maxlen: 24
183.171.225.0/24 maxlen: 24
183.171.226.0/24 maxlen: 24
183.171.227.0/24 maxlen: 24
183.171.228.0/24 maxlen: 24
183.171.229.0/24 maxlen: 24
183.171.232.0/21 maxlen: 21
183.171.233.0/24 maxlen: 24
183.171.234.0/24 maxlen: 24
183.171.235.0/24 maxlen: 24
183.171.236.0/24 maxlen: 24
183.171.240.0/20 maxlen: 20
183.171.240.0/24 maxlen: 24
183.171.241.0/24 maxlen: 24
183.171.242.0/24 maxlen: 24
183.171.243.0/24 maxlen: 24
183.171.244.0/23 maxlen: 23
183.171.248.0/24 maxlen: 24
183.171.249.0/24 maxlen: 24
183.171.255.0/24 maxlen: 24
203.82.64.0/19 maxlen: 19
203.82.66.0/24 maxlen: 24
203.82.67.0/24 maxlen: 24
203.82.70.0/23 maxlen: 23
203.82.70.0/24 maxlen: 24
203.82.71.0/24 maxlen: 24
203.82.75.0/24 maxlen: 24
203.82.76.0/24 maxlen: 24
203.82.77.0/24 maxlen: 24
203.82.82.0/24 maxlen: 24
203.82.86.0/24 maxlen: 24
203.82.91.0/24 maxlen: 24
203.82.93.0/24 maxlen: 24
203.82.94.0/24 maxlen: 24
203.82.95.0/24 maxlen: 24
2404:160::/32 maxlen: 32
2404:160:8000::/44 maxlen: 44
2404:160:8010::/44 maxlen: 44
2404:160:8020::/44 maxlen: 44
2404:160:8030::/44 maxlen: 44
2404:160:8040::/42 maxlen: 42
2404:160:8100::/42 maxlen: 42
2404:160:8140::/42 maxlen: 42
2404:160:a000::/42 maxlen: 42
2404:160:a400::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13446 (0x3486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Validity
Not Before: Dec 6 02:56:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=675267f4-ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:bc:cb:4d:c2:bc:c4:78:cb:f0:59:e9:b1:
dd:1c:ba:34:3c:a2:81:91:a6:26:ac:66:c6:65:1e:
3b:f0:e8:6f:8c:91:39:9c:ef:0d:75:e6:ad:35:ce:
9c:ba:16:db:db:7f:b7:41:77:1e:8b:3b:19:69:41:
a3:8c:0f:d7:11:96:43:ee:d0:47:64:a6:3a:7b:eb:
eb:9a:ed:5e:40:b4:8c:78:44:2e:7d:89:5a:30:09:
54:e5:ed:e1:c5:d4:4b:e4:ba:65:c8:46:68:91:4e:
8e:a6:27:be:86:f0:4b:2a:21:22:32:32:0f:a7:19:
d2:89:7a:2d:8b:3c:9e:56:0c:64:66:dc:e2:1e:63:
96:3c:66:c5:5d:62:5e:36:e4:eb:c7:22:fe:71:ee:
21:62:b1:8a:a0:b5:be:8b:fb:93:de:e9:d8:95:43:
65:22:40:10:13:af:86:03:d4:a0:0a:3c:4f:ea:bc:
81:bd:2f:a9:eb:63:0f:2b:47:1c:cf:6c:8d:f3:fc:
7f:6b:c2:5f:e5:79:33:f2:60:1d:1a:eb:3a:57:e6:
7f:1c:9a:97:ec:1d:6f:2a:1e:97:11:81:cd:93:c5:
38:14:26:f9:df:fb:18:90:9d:09:24:51:ab:07:ee:
f8:54:ec:1a:e5:26:ca:38:97:b9:6f:c0:c9:b6:05:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:2B:A6:F2:45:3B:DC:00:AE:27:15:DC:AB:7E:4E:E3:74:47:FD
X509v3 Authority Key Identifier:
keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/B3B5B50E117711EEA0E5E040C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.20.0/22
183.171.0.0/16
203.82.64.0/19
IPv6:
2404:160::/32
Signature Algorithm: sha256WithRSAEncryption
15:11:51:3a:0a:9e:72:71:2c:18:34:b3:23:6b:08:dc:16:b3:
d2:ff:3d:2f:d5:4b:72:d0:a5:b8:dc:5b:0b:4e:ad:af:aa:49:
9b:e1:51:c8:56:91:47:f6:4c:6d:66:38:40:08:ff:f5:24:fa:
fc:ee:05:d2:c0:9f:dc:cb:df:67:3e:bf:4c:a8:59:fa:53:98:
36:fa:e5:e0:7e:5b:80:76:f9:b2:75:bb:ae:a8:0f:79:ea:ee:
f1:4f:2a:91:85:16:75:1e:4d:e0:fd:8e:02:0b:0a:22:62:ff:
de:63:a6:07:40:eb:63:c3:17:3f:ef:9b:ed:7c:7a:cf:32:69:
f5:36:88:ce:cc:17:3a:fc:7c:e7:3f:ba:77:1d:26:a2:32:e6:
ba:dd:6d:f0:07:56:bf:02:8e:39:2c:ef:74:81:70:cd:17:9d:
98:04:68:12:ec:df:7a:59:8f:0a:dc:76:bd:4d:46:a4:a2:18:
c5:88:b4:69:9b:e1:ac:36:0c:13:e6:a2:2c:db:ee:ac:5d:53:
bd:d2:71:5f:93:86:c7:c9:c6:99:fb:29:86:27:75:4f:7b:08:
bc:7a:92:a2:9c:e7:55:29:66:d1:ed:73:e5:e5:45:d3:f9:0f:
e6:e9:f2:37:cc:71:06:50:8c:29:ec:cf:5d:5c:5b:ea:ab:b9:
a0:c0:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:51 2025 by rpki-client