Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E65D902EC9CE11EF86304644C4F9AE02.roa
File: E65D902EC9CE11EF86304644C4F9AE02.roa (raw, json)
Hash identifier: j2Y9n4xeAKSSQxa4B022l22rtk9e4YdVpUlVm/3CnnE=
Subject key identifier: 12:18:A6:0C:17:5E:5D:EE:9F:9C:47:FF:B3:93:EB:AA:B4:93:69:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A39D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E65D902EC9CE11EF86304644C4F9AE02.roa
Signing time: Mon 27 Jan 2025 09:45:12 +0000
ROA not before: Mon 27 Jan 2025 09:45:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150008
IP address blocks: 14.192.0.0/22 maxlen: 24
36.50.124.0/23 maxlen: 24
43.225.24.0/24 maxlen: 24
43.225.25.0/24 maxlen: 24
43.225.26.0/24 maxlen: 24
43.225.27.0/24 maxlen: 24
43.228.92.0/22 maxlen: 24
43.249.224.0/22 maxlen: 24
45.112.28.0/22 maxlen: 24
45.112.48.0/24 maxlen: 24
45.112.49.0/24 maxlen: 24
45.112.50.0/24 maxlen: 24
45.112.51.0/24 maxlen: 24
45.127.56.0/22 maxlen: 24
45.249.76.0/24 maxlen: 24
45.249.77.0/24 maxlen: 24
45.249.78.0/24 maxlen: 24
45.249.79.0/24 maxlen: 24
103.24.124.0/24 maxlen: 24
103.24.125.0/24 maxlen: 24
103.24.126.0/24 maxlen: 24
103.24.127.0/24 maxlen: 24
103.41.96.0/22 maxlen: 24
103.42.200.0/24 maxlen: 24
103.42.201.0/24 maxlen: 24
103.44.0.0/24 maxlen: 24
103.44.1.0/24 maxlen: 24
103.44.2.0/24 maxlen: 24
103.69.28.0/23 maxlen: 24
103.70.129.0/24 maxlen: 24
103.70.130.0/24 maxlen: 24
103.95.173.0/24 maxlen: 24
103.99.108.0/24 maxlen: 24
103.99.109.0/24 maxlen: 24
103.99.110.0/24 maxlen: 24
103.99.111.0/24 maxlen: 24
103.102.18.0/23 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.103.0/24 maxlen: 24
103.117.36.0/23 maxlen: 24
103.154.206.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.159.250.0/23 maxlen: 24
103.161.243.0/24 maxlen: 24
103.162.128.0/23 maxlen: 24
103.164.200.0/23 maxlen: 24
103.168.82.0/23 maxlen: 24
103.171.190.0/24 maxlen: 24
103.171.191.0/24 maxlen: 24
103.172.202.0/23 maxlen: 24
103.174.80.0/23 maxlen: 24
103.174.160.0/23 maxlen: 24
103.182.117.0/24 maxlen: 24
103.183.202.0/24 maxlen: 24
103.183.203.0/24 maxlen: 24
103.186.254.0/23 maxlen: 24
103.204.35.0/24 maxlen: 24
103.206.104.0/22 maxlen: 24
103.213.202.0/23 maxlen: 24
103.217.236.0/24 maxlen: 24
103.217.237.0/24 maxlen: 24
103.217.238.0/24 maxlen: 24
103.217.239.0/24 maxlen: 24
103.220.234.0/23 maxlen: 24
103.233.73.0/24 maxlen: 24
103.236.193.0/24 maxlen: 24
103.239.36.0/24 maxlen: 24
103.239.37.0/24 maxlen: 24
103.239.38.0/24 maxlen: 24
103.239.39.0/24 maxlen: 24
103.248.208.0/22 maxlen: 24
103.252.144.0/22 maxlen: 24
103.255.144.0/22 maxlen: 24
106.0.36.0/23 maxlen: 24
182.18.177.0/24 maxlen: 24
202.65.129.0/24 maxlen: 24
202.65.130.0/24 maxlen: 24
202.65.133.0/24 maxlen: 24
202.65.134.0/24 maxlen: 24
202.65.138.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.65.144.0/24 maxlen: 24
202.65.147.0/24 maxlen: 24
202.65.148.0/24 maxlen: 24
202.65.154.0/24 maxlen: 24
202.65.155.0/24 maxlen: 24
202.65.158.0/24 maxlen: 24
202.65.159.0/24 maxlen: 24
2001:df7:cb80::/48 maxlen: 48
2400:3b01::/32 maxlen: 32
2400:3b01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41885 (0xa39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 27 09:45:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679755a8-dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:ae:49:46:81:44:38:77:d6:d6:06:a4:33:
51:46:b6:f5:78:59:28:da:4a:87:73:99:bd:a4:29:
af:82:a5:cc:ab:69:07:c4:69:73:9b:fe:f1:66:15:
4b:72:8b:ce:9d:5d:02:79:ce:3e:09:43:e6:88:80:
42:cd:60:da:e4:00:03:cb:d1:fc:1d:e3:3d:cf:20:
0c:e9:e3:ab:c1:0e:89:0e:24:4b:d4:4f:69:d3:09:
e1:19:b6:a1:6f:54:ca:53:e5:d1:e8:48:4c:aa:7a:
e3:bd:52:fe:61:21:4d:da:67:b9:20:1f:50:98:cf:
17:87:5a:1e:3d:b9:26:ab:9f:cb:f7:33:8f:89:8c:
68:52:21:93:48:44:14:ea:df:9f:42:70:83:f4:d0:
6c:74:c7:05:d8:f6:05:37:73:9a:a1:5a:ad:5a:2b:
60:cd:f3:37:97:08:5a:37:8b:00:bc:43:b6:ce:3e:
ea:9a:05:d3:0a:07:be:a3:a8:b5:d4:5c:e3:8b:91:
4e:7e:40:69:39:24:1c:03:15:17:85:24:76:5e:6f:
63:32:e2:0b:90:58:4e:be:d3:93:b8:7d:d0:54:95:
99:37:55:87:ac:f6:42:13:48:25:09:b9:75:c2:fa:
8d:a7:7d:29:8b:41:21:f8:fb:06:9e:f3:91:8f:44:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:A6:0C:17:5E:5D:EE:9F:9C:47:FF:B3:93:EB:AA:B4:93:69:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E65D902EC9CE11EF86304644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.0.0/22
36.50.124.0/23
43.225.24.0/22
43.228.92.0/22
43.249.224.0/22
45.112.28.0/22
45.112.48.0/22
45.127.56.0/22
45.249.76.0/22
103.24.124.0/22
103.41.96.0/22
103.42.200.0/23
103.44.0.0-103.44.2.255
103.69.28.0/23
103.70.129.0-103.70.130.255
103.95.173.0/24
103.99.108.0/22
103.102.18.0/23
103.105.101.0/24
103.105.103.0/24
103.117.36.0/23
103.154.206.0/24
103.157.12.0/23
103.159.250.0/23
103.161.243.0/24
103.162.128.0/23
103.164.200.0/23
103.168.82.0/23
103.171.190.0/23
103.172.202.0/23
103.174.80.0/23
103.174.160.0/23
103.182.117.0/24
103.183.202.0/23
103.186.254.0/23
103.204.35.0/24
103.206.104.0/22
103.213.202.0/23
103.217.236.0/22
103.220.234.0/23
103.233.73.0/24
103.236.193.0/24
103.239.36.0/22
103.248.208.0/22
103.252.144.0/22
103.255.144.0/22
106.0.36.0/23
182.18.177.0/24
202.65.129.0-202.65.130.255
202.65.133.0-202.65.134.255
202.65.138.0/24
202.65.142.0/24
202.65.144.0/24
202.65.147.0-202.65.148.255
202.65.154.0/23
202.65.158.0/23
IPv6:
2001:df7:cb80::/48
2400:3b01::/32
Signature Algorithm: sha256WithRSAEncryption
98:aa:ef:fa:38:d2:ab:7c:08:02:14:5f:a7:74:b6:66:14:5b:
0b:d7:8a:f1:32:0f:f5:ad:7d:ec:f1:4a:a0:55:60:fe:a3:72:
11:c4:bc:f8:73:9e:08:aa:8b:33:58:46:b3:7e:85:93:96:43:
08:cf:89:04:34:12:31:cc:38:40:11:99:97:0a:ca:fd:85:b3:
43:b2:26:8b:33:da:2e:91:42:19:4c:07:0e:bb:7c:f4:4f:5e:
2b:82:41:5d:cf:89:65:45:ba:be:f1:f4:30:76:4f:a9:6f:8c:
a5:14:a9:af:44:80:d5:f9:78:65:df:ea:a9:e1:5c:68:10:90:
1c:d4:0b:c9:31:09:a4:0f:ca:42:2e:b5:7e:13:d9:f9:90:a5:
89:6c:e9:12:1a:7a:de:b7:d1:18:45:72:2c:05:61:ee:91:8c:
b2:6c:6e:0d:ec:49:93:36:78:b1:f9:04:04:38:50:09:9d:c1:
5b:3e:38:a9:fe:a7:f7:6a:93:3f:b7:3a:28:7a:08:3b:af:38:
5c:1b:19:36:c2:de:dd:38:51:df:ad:c0:b6:8b:ed:35:a7:36:
2f:76:19:09:98:0d:36:35:72:53:69:08:de:e2:5d:5c:a5:4d:
a1:0a:0d:35:4e:08:a6:91:ce:cb:d0:cb:a3:3a:07:ce:2d:8c:
be:0c:82:cb
-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgIDAKOdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDEyNzA5NDUxMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc5NzU1YTgtZGQyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANC5rklGgUQ4d9bWBqQzUUa29XhZKNpKh3OZvaQpr4KlzKtpB8Rpc5v+8WYV
S3KLzp1dAnnOPglD5oiAQs1g2uQAA8vR/B3jPc8gDOnjq8EOiQ4kS9RPadMJ4Rm2
oW9UylPl0ehITKp6471S/mEhTdpnuSAfUJjPF4daHj25Jqufy/czj4mMaFIhk0hE
FOrfn0Jwg/TQbHTHBdj2BTdzmqFarVorYM3zN5cIWjeLALxDts4+6poF0woHvqOo
tdRc44uRTn5AaTkkHAMVF4Ukdl5vYzLiC5BYTr7Tk7h90FSVmTdVh6z2QhNIJQm5
dcL6jad9KYtBIfj7Bp7zkY9Ej+UCAwEAAaOCBCgwggQkMB0GA1UdDgQWBBQSGKYM
F15d7p+cR/+zk+uqtJNplDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U2NUQ5MDJF
QzlDRTExRUY4NjMwNDY0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBsAYIKwYBBQUHAQcB
Af8EggGfMIIBmzCCAX8EAgABMIIBdwMEAg7AAAMEASQyfAMEAivhGAMEAivkXAME
Aiv54AMEAi1wHAMEAi1wMAMEAi1/OAMEAi35TAMEAmcYfAMEAmcpYAMEAWcqyDAL
AwMCZywDBABnLAIDBAFnRRwwDAMEAGdGgQMEAGdGggMEAGdfrQMEAmdjbAMEAWdm
EgMEAGdpZQMEAGdpZwMEAWd1JAMEAGeazgMEAWedDAMEAWef+gMEAGeh8wMEAWei
gAMEAWekyAMEAWeoUgMEAWervgMEAWesygMEAWeuUAMEAWeuoAMEAGe2dQMEAWe3
ygMEAWe6/gMEAGfMIwMEAmfOaAMEAWfVygMEAmfZ7AMEAWfc6gMEAGfpSQMEAGfs
wQMEAmfvJAMEAmf40AMEAmf8kAMEAmf/kAMEAWoAJAMEALYSsTAMAwQAykGBAwQA
ykGCMAwDBADKQYUDBADKQYYDBADKQYoDBADKQY4DBADKQZAwDAMEAMpBkwMEAMpB
lAMEAcpBmgMEAcpBnjAWBAIAAjAQAwcAIAEN98uAAwUAJAA7ATANBgkqhkiG9w0B
AQsFAAOCAQEAmKrv+jjSq3wIAhRfp3S2ZhRbC9eK8TIP9a197PFKoFVg/qNyEcS8
+HOeCKqLM1hGs36Fk5ZDCM+JBDQSMcw4QBGZlwrK/YWzQ7ImizPaLpFCGUwHDrt8
9E9eK4JBXc+JZUW6vvH0MHZPqW+MpRSpr0SA1fl4Zd/qqeFcaBCQHNQLyTEJpA/K
Qi61fhPZ+ZCliWzpEhp63rfRGEVyLAVh7pGMsmxuDexJkzZ4sfkEBDhQCZ3BWz44
qf6n92qTP7c6KHoIO684XBsZNsLe3ThR363AtovtNac2L3YZCZgNNjVyU2kI3uJd
XKVNoQoNNU4IppHOy9DLozoHzi2MvgyCyw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:42 2025 by rpki-client