Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A27BE45EDD7511EFB5B2297BC4F9AE02.roa
File: A27BE45EDD7511EFB5B2297BC4F9AE02.roa (raw, json)
Hash identifier: OJdDRM844eJhA8mculO5C0uQUtzod2CMI2ylrIY4x10=
Subject key identifier: 4E:6E:AE:06:A5:41:39:BF:CE:CF:6F:35:AB:D1:4B:16:5C:D4:49:50
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A3D7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A27BE45EDD7511EFB5B2297BC4F9AE02.roa
Signing time: Tue 28 Jan 2025 12:44:38 +0000
ROA not before: Tue 28 Jan 2025 12:44:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
45.125.116.0/22 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.16.44.0/23 maxlen: 24
103.16.46.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.43.200.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.109.108.0/22 maxlen: 24
103.157.118.0/23 maxlen: 24
103.191.26.0/23 maxlen: 24
103.199.144.0/22 maxlen: 24
103.231.216.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41943 (0xa3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 28 12:44:38 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6798d136-d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:45:6c:30:bc:1c:02:11:f4:0b:5b:27:e4:
c7:c7:97:25:da:7b:05:c6:bd:04:d4:7f:8c:51:16:
3b:e0:be:fd:98:62:07:e2:1e:70:dd:e3:ba:1a:39:
37:91:79:9c:7f:12:7a:3e:52:37:d5:1c:ed:47:4e:
08:ec:14:51:95:71:c6:bc:44:d7:ad:11:c1:20:2e:
6e:86:d0:b8:44:6b:92:31:2e:5f:dd:fb:5b:54:08:
9e:7a:08:9d:8b:37:46:e0:3a:6d:87:7c:09:28:65:
64:b6:5c:69:37:81:0e:0f:a3:a7:c7:b7:d2:fe:5d:
d0:e2:a1:40:74:a2:ee:fb:d7:d8:21:66:11:02:bb:
25:aa:3b:ec:3a:1a:69:eb:2b:9f:67:40:dc:71:65:
97:6c:74:dc:92:fe:8b:f5:11:86:b8:cf:b0:09:05:
1a:c8:06:d6:f7:ec:75:d6:92:d6:81:07:e2:d1:b6:
a0:32:26:7a:55:8d:dd:ea:96:3e:18:30:8e:20:2c:
f3:30:f4:f7:18:4f:9b:22:24:7a:6a:81:86:cc:0b:
8b:34:1b:9b:c9:02:6e:84:a5:94:4a:3b:bc:79:f6:
39:ce:b4:d9:60:26:25:d8:1b:3d:4b:51:62:86:09:
b6:eb:71:18:c7:0f:80:ca:a1:1d:f5:97:92:09:9f:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:AE:06:A5:41:39:BF:CE:CF:6F:35:AB:D1:4B:16:5C:D4:49:50
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A27BE45EDD7511EFB5B2297BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
45.125.116.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.16.44.0-103.16.46.255
103.38.240.0/22
103.43.200.0/22
103.94.100.0/23
103.109.108.0/22
103.157.118.0/23
103.191.26.0/23
103.199.144.0/22
103.231.216.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
62:f5:19:3c:fb:4a:a9:66:6e:0c:a6:48:51:76:87:ca:98:45:
e7:02:8d:41:bf:d4:35:8a:2a:8d:d4:d9:46:7e:19:23:46:28:
78:ba:a4:30:6c:9e:a4:02:ab:30:64:f9:fd:c0:a3:aa:6d:5a:
c8:d4:a8:4e:bf:4b:47:3c:28:3a:f9:c3:9c:4e:0b:ff:1b:dd:
e2:37:b7:2b:ea:ce:85:3a:b1:0a:ce:72:9e:ea:92:6e:8a:7c:
74:13:d7:e2:9a:29:36:99:39:c3:fa:d4:07:d3:a2:40:7d:5d:
1a:99:2d:79:d6:55:db:f1:8c:2d:fb:9e:3e:d7:5f:46:1e:eb:
05:d3:04:18:c3:4c:36:5e:f6:87:fd:5c:1b:fe:1b:28:ed:61:
b2:4d:5e:45:8b:b4:5e:ad:20:cf:a3:3f:96:81:ff:00:31:4d:
f3:b7:9e:cc:8d:3d:d9:80:2a:93:c1:77:62:03:04:56:05:fe:
51:06:1d:b9:8b:58:11:0a:01:2b:21:9b:03:3e:51:db:0f:64:
c5:28:8c:4e:ad:79:86:6e:82:62:ea:70:e7:17:99:82:1a:02:
bd:50:fe:e2:65:be:a9:7f:3c:a9:43:f4:00:0d:d6:26:66:d4:
98:ee:1a:ef:6e:0f:68:3c:a6:97:0e:b8:86:34:6d:37:29:9c:
9d:31:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:05 2025 by rpki-client