Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCEB557AB13E11EF9EADFD72C4F9AE02.roa
File: CCEB557AB13E11EF9EADFD72C4F9AE02.roa (raw, json)
Hash identifier: dauMPcLiDP6wbCKb7PUTkZxfTxnAaKpgjhiq1jQkmyo=
Subject key identifier: 04:42:4D:F7:F7:0E:CE:E2:90:61:40:CF:80:17:B3:46:B9:C3:FB:98
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E71
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCEB557AB13E11EF9EADFD72C4F9AE02.roa
Signing time: Tue 03 Dec 2024 06:21:16 +0000
ROA not before: Tue 03 Dec 2024 06:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133301
IP address blocks: 45.249.168.0/22 maxlen: 24
103.17.110.0/24 maxlen: 24
103.85.204.0/22 maxlen: 24
103.157.166.0/23 maxlen: 24
103.159.150.0/23 maxlen: 24
103.165.20.0/23 maxlen: 24
103.176.128.0/23 maxlen: 24
103.194.69.0/24 maxlen: 24
103.198.128.0/24 maxlen: 24
2001:df6:3880::/48 maxlen: 50
2001:df6:4400::/48 maxlen: 48
2406:a340::/32 maxlen: 34
2407:4840::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40561 (0x9e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 3 06:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674ea35b-53b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:f7:5b:38:01:dd:0f:a0:2a:91:27:d9:c6:
21:e2:bb:15:49:9f:96:2a:11:41:ee:71:e6:70:6d:
5f:bf:ff:86:de:ec:6f:6b:fc:be:c5:7d:9b:74:e7:
53:3f:f7:90:a4:6d:2e:3a:02:1d:b7:52:06:c8:b2:
94:28:f2:36:e7:e7:cd:89:7c:08:fd:6f:76:d8:f7:
1c:a7:41:d6:ce:cd:1b:29:86:6a:96:ff:87:62:b2:
f6:7e:8e:54:af:a0:b4:49:40:a8:62:87:07:b5:de:
91:a8:e2:8a:21:1c:33:fe:ca:a8:da:43:93:45:b7:
ea:29:8a:19:ae:44:e0:0b:5c:35:6e:86:f2:c0:7b:
ce:5e:15:de:05:00:b0:c0:d1:06:d2:3e:66:36:18:
03:95:e0:77:23:d4:59:78:d9:9f:88:7b:b5:b0:5d:
ff:85:23:68:4f:0a:57:1b:42:41:ab:eb:26:68:fb:
f0:d9:87:76:6e:fa:50:f3:9c:ec:ba:9e:07:6c:12:
b6:28:c6:d5:3b:4d:b6:00:38:4c:a6:8b:d8:e6:db:
02:37:b0:62:05:fc:e5:68:c5:49:97:ef:a8:cd:ad:
52:cc:22:9e:a4:47:0a:34:3e:71:0c:0e:d2:98:51:
60:b9:49:a9:71:d4:6f:41:50:2e:a5:08:db:8e:06:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:4D:F7:F7:0E:CE:E2:90:61:40:CF:80:17:B3:46:B9:C3:FB:98
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCEB557AB13E11EF9EADFD72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.168.0/22
103.17.110.0/24
103.85.204.0/22
103.157.166.0/23
103.159.150.0/23
103.165.20.0/23
103.176.128.0/23
103.194.69.0/24
103.198.128.0/24
IPv6:
2001:df6:3880::/48
2001:df6:4400::/48
2406:a340::/32
2407:4840::/32
Signature Algorithm: sha256WithRSAEncryption
31:40:42:fc:0e:ad:9b:49:8e:44:02:93:7c:78:71:d9:84:16:
ce:35:f7:7c:f7:2a:22:96:df:e2:bc:32:ba:db:22:5f:93:ce:
4f:87:97:90:16:9f:5f:74:76:95:4b:e0:86:50:92:d0:31:07:
9f:db:4b:85:e3:da:d7:33:44:7b:88:dc:53:57:b5:83:f5:7e:
53:17:79:8c:69:1b:cc:36:f0:e2:78:10:c0:f6:98:f4:fe:87:
ff:a5:12:c2:fd:57:3e:6a:bc:09:d2:dc:aa:3c:0d:37:53:e6:
56:e0:b4:4c:fd:a7:fa:ca:2c:ed:34:19:89:5a:ed:e4:fc:e2:
11:32:dd:c5:a2:c6:62:84:cc:3c:bc:1c:80:8b:05:1e:d3:9a:
91:8c:56:b2:e7:76:ae:ea:ee:d3:e2:c7:db:4a:7c:2d:12:fa:
f5:fc:d4:86:a9:55:63:43:76:30:75:68:f7:b9:8d:85:27:80:
70:da:97:0d:8e:e8:fe:f5:e7:47:e8:4f:e4:8e:cf:a2:f2:72:
d2:84:24:a2:82:8e:11:8b:ad:83:00:b2:87:2b:b9:c1:a4:39:
01:46:45:2b:22:aa:86:1d:1a:fa:8f:41:3e:fa:80:7b:5e:17:
8e:8b:74:98:a7:a9:b9:fd:cb:f8:dd:01:c5:9b:a6:f8:03:b5:
89:9c:8d:24
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIDAJ5xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTIwMzA2MjExNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc0ZWEzNWItNTNiNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEa91s4Ad0PoCqRJ9nGIeK7FUmflioRQe5x5nBtX7//ht7sb2v8vsV9m3Tn
Uz/3kKRtLjoCHbdSBsiylCjyNufnzYl8CP1vdtj3HKdB1s7NGymGapb/h2Ky9n6O
VK+gtElAqGKHB7XekajiiiEcM/7KqNpDk0W36imKGa5E4AtcNW6G8sB7zl4V3gUA
sMDRBtI+ZjYYA5XgdyPUWXjZn4h7tbBd/4UjaE8KVxtCQavrJmj78NmHdm76UPOc
7LqeB2wStijG1TtNtgA4TKaL2ObbAjewYgX85WjFSZfvqM2tUswinqRHCjQ+cQwO
0phRYLlJqXHUb0FQLqUI244GpVcCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQEQk33
9w7O4pBhQM+AF7NGucP7mDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDRUI1NTdB
QjEzRTExRUY5RUFERkQ3MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHcGCCsGAQUFBwEHAQH/
BGgwZjA8BAIAATA2AwQCLfmoAwQAZxFuAwQCZ1XMAwQBZ52mAwQBZ5+WAwQBZ6UU
AwQBZ7CAAwQAZ8JFAwQAZ8aAMCYEAgACMCADBwAgAQ32OIADBwAgAQ32RAADBQAk
BqNAAwUAJAdIQDANBgkqhkiG9w0BAQsFAAOCAQEAMUBC/A6tm0mORAKTfHhx2YQW
zjX3fPcqIpbf4rwyutsiX5POT4eXkBafX3R2lUvghlCS0DEHn9tLhePa1zNEe4jc
U1e1g/V+Uxd5jGkbzDbw4ngQwPaY9P6H/6USwv1XPmq8CdLcqjwNN1PmVuC0TP2n
+sos7TQZiVrt5PziETLdxaLGYoTMPLwcgIsFHtOakYxWsud2ruru0+LH20p8LRL6
9fzUhqlVY0N2MHVo97mNhSeAcNqXDY7o/vXnR+hP5I7PovJy0oQkooKOEYutgwCy
hyu5waQ5AUZFKyKqhh0a+o9BPvqAe14Xjot0mKepuf3L+N0BxZum+AO1iZyNJA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:44 2025 by rpki-client