Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43F06D32C8CC11EFB8AC782EC4F9AE02.roa
File: 43F06D32C8CC11EFB8AC782EC4F9AE02.roa (raw, json)
Hash identifier: pMNs8vJqJPppwNZRb95fXDOCk1T1dU7OzecA+fF7s8k=
Subject key identifier: A9:DD:E0:30:AA:E1:FF:84:A6:6C:9C:7F:0B:96:35:9B:4D:01:4C:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A3D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43F06D32C8CC11EFB8AC782EC4F9AE02.roa
Signing time: Tue 28 Jan 2025 11:53:51 +0000
ROA not before: Tue 28 Jan 2025 11:53:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.87.0/24 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.69.244.0/22 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.102.147.0/24 maxlen: 24
103.103.55.0/24 maxlen: 24
103.105.96.0/24 maxlen: 24
103.124.120.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.171.109.0/24 maxlen: 24
103.183.86.0/23 maxlen: 24
103.183.233.0/24 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.216.140.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2405:e100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41936 (0xa3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 28 11:53:51 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6798c54f-27e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:e8:cd:97:58:66:df:d9:c3:49:37:fe:cc:
23:ac:eb:4b:48:fb:4e:b5:da:fa:7a:7e:c6:39:f5:
da:e9:0a:22:a2:73:69:06:d7:f2:b0:cc:2f:b9:65:
0c:21:ed:60:66:a6:b7:17:8a:19:a1:a2:50:71:4e:
af:08:f8:00:bb:29:ab:90:6f:3c:12:83:b4:8c:ad:
e2:47:77:d6:e0:a6:d7:1b:f9:d4:85:0c:2e:0a:de:
dc:82:5a:0e:be:60:54:9e:f6:fc:c7:46:7f:23:b9:
71:72:92:d0:0f:a6:5e:a6:4b:7e:53:56:79:39:cb:
a1:2f:ef:fc:82:20:22:ed:86:4b:fd:b5:c0:53:b6:
6f:29:ef:c8:41:16:6a:6e:b1:e3:f1:87:12:c5:0d:
ec:de:f9:84:62:6e:f3:b7:b5:ea:c5:b2:1e:e3:8d:
2a:02:c8:c8:1a:3e:dc:a9:7a:d8:70:eb:c8:4f:73:
14:c7:ee:61:12:d2:9f:df:5f:cd:4b:29:f2:92:dd:
00:9f:f2:05:ca:a2:6a:92:7c:40:d4:93:b9:5a:72:
84:5c:1a:eb:87:65:09:a5:bc:53:f6:fe:e6:2b:39:
0b:08:9a:be:0b:52:4d:41:43:17:a6:2d:48:af:19:
cb:a9:0d:e3:be:5e:3a:19:d0:73:94:ca:b4:1e:f0:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:E0:30:AA:E1:FF:84:A6:6C:9C:7F:0B:96:35:9B:4D:01:4C:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43F06D32C8CC11EFB8AC782EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.0.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.68.87.0/24
103.69.24.0/22
103.69.244.0/22
103.70.80.0/22
103.91.73.0-103.91.74.255
103.94.83.0/24
103.100.4.0/22
103.102.147.0/24
103.103.55.0/24
103.105.96.0/24
103.124.120.0/23
103.153.12.0/24
103.164.141.0/24
103.165.88.0/23
103.165.102.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.171.109.0/24
103.183.86.0/23
103.183.233.0/24
103.190.8.0/23
103.198.172.0/22
103.216.140.0/24
103.216.142.0/23
103.217.132.0/22
103.224.144.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2001:df1:d240::/48
2001:df3:6ec0::/48
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
39:5b:9c:fb:f6:5a:0d:01:30:9e:ed:de:0b:e4:67:ad:dd:73:
5d:91:77:16:ba:57:29:27:0f:bb:37:c2:55:f7:9b:67:2c:07:
1b:89:5e:d3:12:03:65:88:2d:56:75:1a:d4:6c:83:02:ea:e5:
3a:3c:1a:40:d9:00:39:75:81:bc:3f:05:61:68:f2:06:07:91:
9b:da:9b:68:47:82:c7:f8:77:11:f5:1d:1d:82:32:4f:11:3f:
0c:ce:e9:74:71:87:a0:18:0f:3e:d8:8b:89:e6:50:25:6f:8c:
e2:ca:51:0d:3f:d3:23:5a:06:d0:8e:83:37:a4:01:b7:f8:5e:
74:d7:39:f2:b5:9d:3d:84:7b:67:a5:31:51:86:38:36:d3:14:
cd:45:78:61:9c:4f:0a:e4:77:63:4d:a3:b8:76:c2:5a:a5:a1:
ca:7b:89:88:67:75:f4:89:bb:f4:3c:3a:31:b0:dc:a4:68:ef:
f3:55:2c:f4:4f:69:4a:e3:3b:f3:91:4c:6e:af:b4:93:2a:b1:
ff:7a:8b:f6:aa:2b:c4:8e:42:c3:64:f9:fd:4a:b4:59:b3:53:
17:e6:c1:70:0e:2b:ba:d4:7d:9d:16:fb:a8:e9:66:0a:e2:35:
e6:5e:ba:d4:e0:43:9e:ff:1f:5d:95:4b:b0:fd:cc:c3:9a:68:
1f:c6:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:54 2025 by rpki-client