Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/DFA52AEE43FF11EFA86B9536C4F9AE02.roa
File: DFA52AEE43FF11EFA86B9536C4F9AE02.roa (raw, json)
Hash identifier: qr0rnsAJCUBdZiHQo9gHezZTtCenaNEBGyRSfJQO9hk=
Subject key identifier: 62:16:85:A6:F2:59:F2:FC:CA:B1:A1:96:11:06:27:38:69:86:53:6F
Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial: 08C0
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/DFA52AEE43FF11EFA86B9536C4F9AE02.roa
Signing time: Sun 22 Dec 2024 20:28:37 +0000
ROA not before: Sun 22 Dec 2024 20:28:37 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45577
IP address blocks: 101.234.132.0/23 maxlen: 24
101.234.134.0/24 maxlen: 24
101.234.135.0/24 maxlen: 24
101.234.136.0/24 maxlen: 24
101.234.140.0/23 maxlen: 24
101.234.144.0/23 maxlen: 24
101.234.146.0/23 maxlen: 24
101.234.148.0/24 maxlen: 24
101.234.149.0/24 maxlen: 24
101.234.150.0/24 maxlen: 24
101.234.151.0/24 maxlen: 24
101.234.152.0/24 maxlen: 24
101.234.153.0/24 maxlen: 24
101.234.154.0/24 maxlen: 24
101.234.155.0/24 maxlen: 24
101.234.156.0/24 maxlen: 24
101.234.157.0/24 maxlen: 24
101.234.158.0/24 maxlen: 24
101.234.159.0/24 maxlen: 24
101.234.160.0/24 maxlen: 24
101.234.170.0/24 maxlen: 24
101.234.171.0/24 maxlen: 24
111.125.160.0/24 maxlen: 24
111.125.161.0/24 maxlen: 24
111.125.162.0/23 maxlen: 23
111.125.162.0/24 maxlen: 24
111.125.164.0/23 maxlen: 23
111.125.164.0/23 maxlen: 24
111.125.168.0/23 maxlen: 23
111.125.168.0/23 maxlen: 24
111.125.170.0/23 maxlen: 23
111.125.170.0/23 maxlen: 24
111.125.172.0/23 maxlen: 23
111.125.172.0/23 maxlen: 24
111.125.174.0/23 maxlen: 23
111.125.174.0/23 maxlen: 24
114.111.128.0/24 maxlen: 24
114.111.129.0/24 maxlen: 24
114.111.130.0/23 maxlen: 23
114.111.130.0/23 maxlen: 24
114.111.132.0/24 maxlen: 24
114.111.133.0/24 maxlen: 24
114.111.134.0/23 maxlen: 23
114.111.135.0/24 maxlen: 24
114.111.136.0/23 maxlen: 23
114.111.137.0/24 maxlen: 24
114.111.138.0/23 maxlen: 24
114.111.140.0/24 maxlen: 24
114.111.141.0/24 maxlen: 24
114.111.142.0/24 maxlen: 24
114.111.143.0/24 maxlen: 24
114.111.144.0/23 maxlen: 23
114.111.144.0/23 maxlen: 24
114.111.146.0/23 maxlen: 24
114.111.148.0/23 maxlen: 24
114.111.150.0/23 maxlen: 24
114.111.156.0/23 maxlen: 24
114.111.158.0/23 maxlen: 24
122.100.0.0/24 maxlen: 24
122.100.1.0/24 maxlen: 24
122.100.2.0/24 maxlen: 24
122.100.3.0/24 maxlen: 24
122.100.4.0/24 maxlen: 24
122.100.6.0/24 maxlen: 24
122.100.7.0/24 maxlen: 24
122.100.8.0/24 maxlen: 24
122.100.9.0/24 maxlen: 24
122.100.10.0/23 maxlen: 24
122.100.14.0/24 maxlen: 24
122.100.15.0/24 maxlen: 24
2406:5800:800::/38 maxlen: 48
2406:5800:c00::/38 maxlen: 56
2406:5800:ff00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Validity
Not Before: Dec 22 20:28:37 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67687675-d359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:e6:d8:1a:ce:84:c8:f0:81:9d:10:7a:14:
f6:eb:9b:d4:c1:e5:a6:74:a0:4d:bb:7f:e8:d1:1f:
10:fa:60:5c:40:87:c1:1c:3b:72:94:65:65:60:a6:
f4:9d:08:64:9e:13:c4:1b:d5:c1:1b:8c:7c:86:f6:
0e:f5:24:6c:35:e9:5c:c3:9b:6a:2d:77:b7:8b:6b:
13:1f:98:fc:3e:c3:a2:39:62:73:fc:6e:2c:87:fe:
76:b7:c6:42:09:0f:51:72:96:96:31:5a:d0:8a:27:
e4:c4:9a:88:e5:d7:12:0a:f8:a8:fd:4e:b5:8f:da:
a6:84:33:e6:1f:ec:2a:60:ad:19:91:db:d6:0a:3c:
36:ba:65:99:63:8b:87:45:bf:bf:d3:ea:c9:97:f1:
42:5e:5c:b8:5a:84:63:65:aa:b3:26:de:d6:03:0d:
ce:ae:e0:42:9d:ec:1c:e1:11:43:59:a1:3a:41:33:
34:a9:22:8b:cd:08:6f:fc:26:09:2b:bc:12:a2:ed:
3c:52:5a:80:cb:5e:f2:36:42:94:63:f9:5c:b4:77:
88:7c:61:98:33:0e:84:01:43:a6:85:06:1a:ae:f0:
55:ad:39:df:90:9f:5c:8f:be:9f:7c:7f:e1:ce:99:
60:8f:47:69:fe:9e:aa:94:db:d6:53:50:21:3b:91:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:85:A6:F2:59:F2:FC:CA:B1:A1:96:11:06:27:38:69:86:53:6F
X509v3 Authority Key Identifier:
keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/DFA52AEE43FF11EFA86B9536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.234.132.0-101.234.136.255
101.234.140.0/23
101.234.144.0-101.234.160.255
101.234.170.0/23
111.125.160.0-111.125.165.255
111.125.168.0/21
114.111.128.0-114.111.151.255
114.111.156.0/22
122.100.0.0-122.100.4.255
122.100.6.0-122.100.11.255
122.100.14.0/23
IPv6:
2406:5800:800::/37
2406:5800:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
d7:5a:e1:c4:26:56:9c:d3:50:58:d7:cb:4a:c8:b9:ca:a4:b5:
1b:0e:0c:18:f8:67:a0:a0:7a:1a:04:1d:cf:f4:a6:d1:a6:7e:
df:5b:79:98:2b:64:01:f4:54:b0:f8:74:5c:c2:77:97:c2:4e:
e5:9d:96:ef:f9:ec:07:91:4f:4a:d0:28:3b:16:c7:95:a3:a7:
98:aa:b9:c6:61:d0:c7:88:61:b8:93:1b:c4:bf:ba:86:e0:a7:
d9:0d:7f:f2:1e:49:00:c6:74:95:35:c5:fe:f2:ae:04:f2:6e:
9c:aa:5d:c6:35:b2:95:4a:69:d5:1e:5e:c0:44:57:f6:dd:ac:
36:9f:79:43:46:0d:ab:15:2e:c0:e5:e2:f8:f4:7c:2d:17:24:
41:bf:77:31:27:6f:4c:01:d4:88:44:05:b1:e0:5c:4b:a3:e0:
49:f3:65:14:ab:44:fb:19:3a:2c:6e:4f:05:fd:ee:04:d8:91:
80:79:c2:3e:f4:ea:c6:93:8e:4d:e1:25:63:5d:f5:74:b2:34:
e7:09:7c:b0:be:48:67:ae:b7:88:75:f3:9b:b7:7f:4d:95:11:
e7:99:08:95:c3:2b:d3:73:50:06:65:07:ad:2e:41:88:d1:df:
9b:1a:e2:55:d8:3c:57:48:95:e0:b8:9f:70:a5:14:31:ba:29:
07:b3:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:32 2025 by rpki-client