Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D86BCC00CCE011EFB8DCCB73C4F9AE02.roa
File: D86BCC00CCE011EFB8DCCB73C4F9AE02.roa (raw, json)
Hash identifier: CRAgQL6w98RETw9PyrCjGeSKhrdCYbxuR+yV92hWrKU=
Subject key identifier: C9:78:96:75:4B:37:EE:55:BF:4E:05:0D:91:0C:E0:A3:30:7E:BE:A6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A320
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D86BCC00CCE011EFB8DCCB73C4F9AE02.roa
Signing time: Mon 20 Jan 2025 05:57:36 +0000
ROA not before: Mon 20 Jan 2025 05:57:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.14.0/24 maxlen: 24
103.163.194.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41760 (0xa320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 20 05:57:36 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=678de5d0-f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:32:a9:5c:b8:27:7a:e4:66:b0:54:23:d9:
5b:e3:48:ac:43:68:f5:91:78:eb:da:d2:84:9b:37:
24:4f:c7:93:06:ee:e4:da:24:9d:3f:02:d6:42:be:
76:87:92:c8:a4:67:65:b9:41:79:1d:97:ae:a8:2d:
e7:c9:e2:be:aa:37:bd:c1:94:3f:bc:7b:84:56:96:
4b:ce:0e:fe:71:5e:20:e5:f1:3b:71:f6:e6:13:07:
fc:e9:8f:6a:77:f7:d9:bb:9e:44:e6:d9:8e:36:c4:
6f:7a:ba:91:c4:b7:c6:e8:f9:67:f1:8c:47:27:af:
58:46:03:c2:88:e4:71:36:0c:f6:44:11:11:91:9a:
1c:32:45:88:03:00:db:95:3f:cc:a9:5e:4e:26:e1:
0a:f3:b4:7c:46:ff:86:86:7d:1e:f6:4f:02:cb:c2:
9b:ac:40:85:ca:2f:9b:00:2d:a6:d5:03:6c:d2:6c:
87:65:46:15:a3:ce:bf:c0:bb:5c:b4:4e:92:3b:3b:
e9:10:b1:5d:e3:c0:67:7b:b0:2b:f9:3a:fb:20:a2:
46:bd:47:7d:f6:5f:b5:52:7b:cb:03:00:93:b4:d4:
6d:42:4d:53:0a:71:28:19:a5:f7:5e:40:12:11:ed:
df:43:d6:64:6a:51:ff:95:f3:df:2e:45:96:a0:1f:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:96:75:4B:37:EE:55:BF:4E:05:0D:91:0C:E0:A3:30:7E:BE:A6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D86BCC00CCE011EFB8DCCB73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.14.0/24
103.163.194.0/23
103.176.240.0/23
103.179.212.0/23
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
103.239.171.0/24
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
98:31:f1:5b:7b:8c:c9:f7:eb:fe:d6:fb:eb:2a:4b:8d:56:8d:
43:b7:b4:2a:88:72:41:04:fe:e5:c1:24:5b:2c:2d:f5:2c:e4:
7b:aa:2c:50:3a:e0:1b:aa:92:ca:c1:ad:ae:f4:e2:9e:3a:2c:
0b:e7:98:2b:8e:e5:07:65:49:82:fe:97:d6:df:98:e4:0c:8c:
11:86:44:5a:e6:cd:17:48:b8:73:99:22:e6:ef:80:da:80:73:
e9:ad:ee:59:ee:42:ed:b3:fa:3c:70:42:67:af:85:c4:80:69:
fc:bf:c9:bf:7d:77:a8:80:ec:81:cd:ee:10:f9:0b:d3:dd:a5:
a1:51:14:f0:1e:11:34:5c:e7:50:62:17:74:d5:76:a7:d4:94:
c1:85:4d:cd:3d:bd:d0:85:ba:eb:0a:46:89:55:7b:48:2f:5f:
78:f1:42:81:1f:62:4e:13:c9:21:f4:73:73:53:d9:6d:ec:78:
17:3a:23:41:43:8a:df:4d:c5:6e:0d:65:21:c6:56:a6:89:a4:
a6:7e:59:56:b3:2a:2a:ba:45:73:1f:6d:63:b6:d6:63:82:11:
58:56:ef:5c:65:97:16:7d:f6:98:13:df:bd:11:8d:95:49:1c:
0c:96:11:bc:13:19:3a:c0:43:71:ad:15:1a:98:a9:c8:ef:d5:
29:78:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:25 2025 by rpki-client