Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
File: 3D6EE0CACCE011EFA944933EC4F9AE02.roa (raw, json)
Hash identifier: iiFINSWyUF4hdPpE30UvKnEK4qDRUDda2n7DCpd48+Y=
Subject key identifier: 94:23:67:30:D6:AB:13:C7:89:E7:6B:36:CD:ED:4A:FC:4E:BA:49:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
Signing time: Tue 07 Jan 2025 10:14:55 +0000
ROA not before: Tue 07 Jan 2025 10:14:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24554
IP address blocks: 36.255.108.0/22 maxlen: 24
36.255.180.0/22 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.224.172.0/22 maxlen: 24
43.241.116.0/22 maxlen: 24
45.116.44.0/22 maxlen: 24
45.117.48.0/22 maxlen: 22
45.117.48.0/24 maxlen: 24
45.117.49.0/24 maxlen: 24
45.117.50.0/24 maxlen: 24
45.117.51.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.117.148.0/22 maxlen: 22
45.117.148.0/24 maxlen: 24
45.117.149.0/24 maxlen: 24
45.117.150.0/24 maxlen: 24
45.117.151.0/24 maxlen: 24
45.117.248.0/22 maxlen: 22
45.117.248.0/24 maxlen: 24
45.117.249.0/24 maxlen: 24
45.117.250.0/24 maxlen: 24
45.117.251.0/24 maxlen: 24
58.146.96.0/19 maxlen: 24
103.29.208.0/22 maxlen: 24
103.51.208.0/22 maxlen: 24
103.53.60.0/22 maxlen: 22
103.53.60.0/24 maxlen: 24
103.53.61.0/24 maxlen: 24
103.53.62.0/24 maxlen: 24
103.53.63.0/24 maxlen: 24
103.53.232.0/22 maxlen: 22
103.53.232.0/24 maxlen: 24
103.53.233.0/24 maxlen: 24
103.53.234.0/24 maxlen: 24
103.53.235.0/24 maxlen: 24
103.54.104.0/22 maxlen: 24
103.57.172.0/22 maxlen: 24
103.195.76.0/22 maxlen: 24
103.200.100.0/22 maxlen: 24
103.200.212.0/22 maxlen: 24
103.203.60.0/22 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
120.138.0.0/22 maxlen: 24
180.148.32.0/19 maxlen: 24
182.237.128.0/18 maxlen: 24
183.87.0.0/21 maxlen: 22
183.87.0.0/24 maxlen: 24
183.87.1.0/24 maxlen: 24
183.87.2.0/24 maxlen: 24
183.87.3.0/24 maxlen: 24
183.87.4.0/24 maxlen: 24
183.87.5.0/24 maxlen: 24
183.87.6.0/24 maxlen: 24
183.87.7.0/24 maxlen: 24
183.87.8.0/22 maxlen: 22
183.87.8.0/24 maxlen: 24
183.87.9.0/24 maxlen: 24
183.87.10.0/24 maxlen: 24
183.87.11.0/24 maxlen: 24
183.87.16.0/22 maxlen: 22
183.87.16.0/24 maxlen: 24
183.87.17.0/24 maxlen: 24
183.87.18.0/24 maxlen: 24
183.87.19.0/24 maxlen: 24
183.87.20.0/22 maxlen: 22
183.87.20.0/24 maxlen: 24
183.87.21.0/24 maxlen: 24
183.87.22.0/24 maxlen: 24
183.87.23.0/24 maxlen: 24
183.87.24.0/22 maxlen: 22
183.87.24.0/24 maxlen: 24
183.87.25.0/24 maxlen: 24
183.87.26.0/24 maxlen: 24
183.87.27.0/24 maxlen: 24
183.87.28.0/22 maxlen: 22
183.87.28.0/24 maxlen: 24
183.87.29.0/24 maxlen: 24
183.87.30.0/24 maxlen: 24
183.87.31.0/24 maxlen: 24
183.87.224.0/20 maxlen: 24
202.177.224.0/22 maxlen: 22
202.177.224.0/24 maxlen: 24
202.177.225.0/24 maxlen: 24
202.177.226.0/24 maxlen: 24
202.177.227.0/24 maxlen: 24
202.177.228.0/22 maxlen: 22
202.177.228.0/24 maxlen: 24
202.177.229.0/24 maxlen: 24
202.177.230.0/24 maxlen: 24
202.177.231.0/24 maxlen: 24
202.177.232.0/22 maxlen: 22
202.177.232.0/24 maxlen: 24
202.177.233.0/24 maxlen: 24
202.177.234.0/24 maxlen: 24
202.177.235.0/24 maxlen: 24
202.177.236.0/22 maxlen: 22
202.177.236.0/24 maxlen: 24
202.177.237.0/24 maxlen: 24
202.177.238.0/24 maxlen: 24
202.177.239.0/24 maxlen: 24
202.177.240.0/22 maxlen: 22
202.177.240.0/24 maxlen: 24
202.177.241.0/24 maxlen: 24
202.177.242.0/24 maxlen: 24
202.177.243.0/24 maxlen: 24
202.177.244.0/22 maxlen: 22
202.177.244.0/24 maxlen: 24
202.177.245.0/24 maxlen: 24
202.177.246.0/24 maxlen: 24
202.177.247.0/24 maxlen: 24
202.177.248.0/22 maxlen: 22
202.177.248.0/24 maxlen: 24
202.177.249.0/24 maxlen: 24
202.177.250.0/24 maxlen: 24
202.177.251.0/24 maxlen: 24
202.177.252.0/22 maxlen: 22
202.177.252.0/24 maxlen: 24
202.177.253.0/24 maxlen: 24
202.177.254.0/24 maxlen: 24
202.177.255.0/24 maxlen: 24
2402:b00::/32 maxlen: 32
2402:b00::/40 maxlen: 48
2402:b00:100::/40 maxlen: 48
2402:b00:200::/40 maxlen: 48
2402:b00:fffb::/48 maxlen: 48
2402:b00:fffc::/48 maxlen: 48
2402:b00:fffd::/48 maxlen: 48
2402:b00:fffe::/48 maxlen: 48
2402:b00:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41382 (0xa1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 7 10:14:55 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677cfe9e-e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:ee:25:84:6b:ee:ae:c9:d3:cf:64:37:a0:
dd:da:37:8e:0d:6c:08:d8:b8:ef:e5:5a:67:85:5c:
5a:e7:cf:9e:9b:30:10:67:e1:3d:f3:5a:51:ca:60:
d9:41:47:32:7e:52:7d:7c:e8:a3:6e:b5:82:45:2b:
0b:d0:53:bc:13:92:1d:94:7e:92:72:c9:f3:7a:e6:
2b:9f:8b:09:f1:46:74:e2:8d:c5:76:1c:73:e4:c9:
c3:c4:36:90:8a:6f:c4:23:3e:db:4e:73:1b:39:ec:
2a:fd:b7:7a:dd:d8:7b:13:42:57:8f:d3:32:9e:60:
f8:59:fa:e0:e9:61:e0:36:df:78:30:83:e5:a8:4b:
92:68:2b:bd:3b:81:8c:1b:f1:f3:68:fe:d3:48:e5:
2d:d1:3c:47:1b:98:6d:76:aa:93:61:61:be:78:84:
bb:f1:bd:31:65:fc:76:03:78:66:46:cd:d4:5f:19:
09:3f:e0:1b:7c:88:99:93:12:21:b0:2d:d9:8a:ea:
ec:2d:fb:38:cf:04:e9:d0:61:c4:5a:d3:8d:37:d3:
87:cc:ef:73:08:1a:d3:3b:40:05:87:cc:57:d6:aa:
ec:ea:02:77:9a:c8:54:ef:97:d9:3c:8b:dc:8d:a3:
06:67:dc:7c:0f:d1:4d:bf:13:5e:2d:a7:1b:23:8d:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:67:30:D6:AB:13:C7:89:E7:6B:36:CD:ED:4A:FC:4E:BA:49:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6EE0CACCE011EFA944933EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.108.0/22
36.255.180.0-36.255.187.255
43.224.172.0/22
43.241.116.0/22
45.116.44.0/22
45.117.48.0/22
45.117.108.0/22
45.117.148.0/22
45.117.248.0/22
58.146.96.0/19
103.29.208.0/22
103.51.208.0/22
103.53.60.0/22
103.53.232.0/22
103.54.104.0/22
103.57.172.0/22
103.195.76.0/22
103.200.100.0/22
103.200.212.0/22
103.203.60.0/22
103.214.230.0/23
103.215.96.0/23
103.234.212.0/22
103.234.240.0/22
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
120.138.0.0/22
180.148.32.0/19
182.237.128.0/18
183.87.0.0-183.87.11.255
183.87.16.0/20
183.87.224.0/20
202.177.224.0/19
IPv6:
2402:b00::/32
Signature Algorithm: sha256WithRSAEncryption
81:7a:18:a8:9f:cc:63:7d:d5:0e:26:d0:38:b3:cc:09:69:b9:
3a:6d:65:b1:8a:09:a8:04:1b:3d:46:0a:b4:d4:51:c2:2c:14:
2a:2a:9c:a7:4d:17:3c:b8:d0:37:16:64:80:16:31:d8:86:e8:
da:7c:e6:6c:e6:f8:52:57:31:f2:35:46:c0:1f:cf:70:05:13:
c3:45:90:f7:b5:a2:cc:c9:7d:ec:26:6e:92:58:26:d9:56:9c:
3a:65:d7:17:a9:72:ec:4a:ec:4e:83:a6:b2:29:46:14:9d:b7:
dc:88:50:15:e8:b2:76:44:ed:72:e4:3c:23:15:b8:7e:4e:fc:
f8:eb:a9:d5:30:2c:b3:69:b6:ce:2b:d5:75:9c:15:3a:d3:a4:
c8:56:84:9c:7a:71:f5:47:35:b9:3d:93:2c:e7:da:2f:3f:cd:
3a:b6:68:af:bf:ab:73:a7:c9:f8:e9:3d:9e:2d:08:05:70:95:
cc:17:0d:fa:aa:01:76:ba:16:0d:ae:42:d5:27:96:df:fb:68:
3f:e9:c2:0b:d9:36:15:18:dc:ac:fa:3c:f4:3a:44:40:10:c5:
e1:1f:d6:e8:3b:c9:ed:b7:0b:4e:14:3e:53:97:57:ee:c3:55:
b6:e5:91:c8:f1:d9:9f:bd:4a:39:e0:32:eb:07:6d:86:80:59:
5a:4e:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:22 2025 by rpki-client