Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51AB0F68CF4311EF89301558C4F9AE02.roa
File: 51AB0F68CF4311EF89301558C4F9AE02.roa (raw, json)
Hash identifier: eeI54z6Jb5t+HGyqbU7nHjE2h3Hvy/btuSZoxXGWWiw=
Subject key identifier: 70:9A:D0:46:31:94:C9:6F:B4:E7:C0:AF:4B:CE:E3:B4:2F:7E:40:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A252
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51AB0F68CF4311EF89301558C4F9AE02.roa
Signing time: Mon 13 Jan 2025 05:53:09 +0000
ROA not before: Mon 13 Jan 2025 05:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138296
IP address blocks: 103.2.190.0/23 maxlen: 24
103.31.140.0/23 maxlen: 24
103.31.142.0/23 maxlen: 24
103.31.220.0/23 maxlen: 24
103.41.32.0/22 maxlen: 24
103.93.192.0/22 maxlen: 24
103.111.70.0/24 maxlen: 24
103.115.154.0/23 maxlen: 24
103.119.82.0/23 maxlen: 24
103.119.172.0/23 maxlen: 24
103.123.154.0/23 maxlen: 24
103.123.224.0/22 maxlen: 24
103.124.22.0/23 maxlen: 24
103.124.122.0/23 maxlen: 24
103.127.116.0/23 maxlen: 24
103.127.252.0/24 maxlen: 24
103.132.100.0/23 maxlen: 24
103.134.4.0/22 maxlen: 24
103.143.8.0/23 maxlen: 23
103.143.8.0/24 maxlen: 24
103.143.9.0/24 maxlen: 24
103.157.178.0/23 maxlen: 24
103.157.222.0/23 maxlen: 24
103.158.48.0/23 maxlen: 24
103.163.190.0/23 maxlen: 24
103.167.176.0/23 maxlen: 24
103.171.210.0/23 maxlen: 24
103.172.86.0/23 maxlen: 24
103.172.156.0/23 maxlen: 24
103.173.120.0/23 maxlen: 24
103.173.205.0/24 maxlen: 24
103.173.244.0/24 maxlen: 24
103.173.245.0/24 maxlen: 24
103.174.244.0/23 maxlen: 24
103.175.60.0/23 maxlen: 24
103.179.46.0/23 maxlen: 24
103.179.232.0/24 maxlen: 24
103.179.236.0/23 maxlen: 24
103.181.54.0/23 maxlen: 24
103.190.212.0/24 maxlen: 24
103.190.213.0/24 maxlen: 24
103.195.80.0/23 maxlen: 24
103.204.132.0/22 maxlen: 24
103.206.26.0/23 maxlen: 24
103.207.90.0/23 maxlen: 24
103.208.90.0/23 maxlen: 24
103.209.72.0/23 maxlen: 24
103.212.172.0/23 maxlen: 24
103.215.184.0/23 maxlen: 24
103.217.138.0/23 maxlen: 24
103.218.106.0/23 maxlen: 24
103.218.180.0/23 maxlen: 24
103.218.184.0/23 maxlen: 24
103.218.186.0/23 maxlen: 24
103.220.232.0/23 maxlen: 24
103.225.30.0/23 maxlen: 24
103.225.116.0/23 maxlen: 24
103.227.104.0/23 maxlen: 24
103.228.72.0/23 maxlen: 24
103.229.90.0/23 maxlen: 24
103.244.24.0/23 maxlen: 24
103.244.94.0/23 maxlen: 24
110.44.10.0/24 maxlen: 24
110.44.11.0/24 maxlen: 24
2001:df2:380::/48 maxlen: 48
2400:4fe0::/32 maxlen: 32
2404:58c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41554 (0xa252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 13 05:53:09 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6784aa45-cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:e4:50:6d:a8:07:98:83:f0:e1:47:6d:c0:
4b:b5:4d:69:c9:da:43:f7:a9:6b:f3:8f:a6:9a:21:
cd:bb:99:84:4c:29:b5:65:5c:b0:6d:2d:8c:8d:90:
1c:4b:16:c4:21:ac:e7:67:25:f1:ef:8f:f5:00:10:
36:58:b8:38:ac:f1:b9:43:3a:c7:63:5b:64:95:ae:
4d:4c:f0:73:a2:3c:43:6a:86:ed:c0:39:fd:62:68:
9a:e6:26:be:4e:f4:a1:42:5d:cc:ed:87:87:e8:ef:
05:9e:82:50:8c:28:9a:c5:b2:e9:99:0f:38:7d:ab:
41:ae:62:be:85:0c:20:c8:47:c8:df:bd:18:58:f4:
fe:93:09:45:af:a7:c3:df:83:77:7b:21:aa:a6:ac:
c1:e1:c0:a1:79:0d:cf:b5:54:c2:9b:bf:73:e4:fe:
e1:72:a0:c3:cd:16:3b:3b:7c:e1:14:88:23:38:20:
53:8d:7a:c9:49:39:59:b0:21:2a:e4:46:a1:2c:75:
b5:12:5a:c9:4e:cc:d6:d3:49:e0:d2:45:b3:a9:88:
87:e6:10:de:0c:4b:55:50:5e:ac:8d:8e:b3:37:eb:
c5:c0:33:d9:6b:d5:88:37:01:71:64:32:eb:45:70:
ee:a3:f1:ad:3c:43:8e:79:0f:af:48:be:e7:f2:0c:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:D0:46:31:94:C9:6F:B4:E7:C0:AF:4B:CE:E3:B4:2F:7E:40:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51AB0F68CF4311EF89301558C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.190.0/23
103.31.140.0/22
103.31.220.0/23
103.41.32.0/22
103.93.192.0/22
103.111.70.0/24
103.115.154.0/23
103.119.82.0/23
103.119.172.0/23
103.123.154.0/23
103.123.224.0/22
103.124.22.0/23
103.124.122.0/23
103.127.116.0/23
103.127.252.0/24
103.132.100.0/23
103.134.4.0/22
103.143.8.0/23
103.157.178.0/23
103.157.222.0/23
103.158.48.0/23
103.163.190.0/23
103.167.176.0/23
103.171.210.0/23
103.172.86.0/23
103.172.156.0/23
103.173.120.0/23
103.173.205.0/24
103.173.244.0/23
103.174.244.0/23
103.175.60.0/23
103.179.46.0/23
103.179.232.0/24
103.179.236.0/23
103.181.54.0/23
103.190.212.0/23
103.195.80.0/23
103.204.132.0/22
103.206.26.0/23
103.207.90.0/23
103.208.90.0/23
103.209.72.0/23
103.212.172.0/23
103.215.184.0/23
103.217.138.0/23
103.218.106.0/23
103.218.180.0/23
103.218.184.0/22
103.220.232.0/23
103.225.30.0/23
103.225.116.0/23
103.227.104.0/23
103.228.72.0/23
103.229.90.0/23
103.244.24.0/23
103.244.94.0/23
110.44.10.0/23
IPv6:
2001:df2:380::/48
2400:4fe0::/32
2404:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
57:37:5d:00:cd:e8:67:b2:f0:7a:3c:26:71:70:5a:be:ad:aa:
bb:c4:c3:5c:2b:d3:4e:de:ff:84:6c:ec:9d:7f:98:fc:f2:b1:
a5:ba:e4:20:a9:39:d4:b9:8a:1d:c1:9b:a6:ae:f2:28:19:31:
1e:9b:87:e3:bc:27:a1:69:e0:17:ea:e0:c8:ef:08:2f:44:c5:
d0:26:12:c5:de:8d:63:74:c4:69:6c:93:c7:26:8c:12:f4:ca:
f8:fc:36:57:57:f4:f7:08:28:6b:2b:75:0e:de:4b:35:ef:dd:
43:cf:d0:24:12:55:15:43:10:54:91:d1:79:b3:9d:70:a9:02:
05:80:58:e2:a8:ef:38:81:c7:15:4d:6f:8c:61:96:f1:c6:0c:
77:bf:2a:e0:03:6f:14:8c:a9:80:e3:c0:f2:bb:b8:cc:2b:31:
aa:ee:eb:7f:d3:5e:17:90:94:55:b2:be:d1:1e:36:78:12:c5:
c3:45:9c:1a:de:8f:56:70:4a:49:f9:38:3c:80:f8:84:27:00:
1d:23:9e:70:fd:56:52:a7:b9:1c:bb:7b:95:1f:a4:f8:85:ae:
37:b9:f9:23:f9:40:98:11:ed:08:74:ef:98:7b:62:32:64:29:
b3:d1:5c:d1:5c:35:f9:2d:b8:db:bb:29:8a:e1:56:b0:a5:04:
a5:50:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:49 2025 by rpki-client