Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
File: 1DDD352E2AD111EFAE5FF358C4F9AE02.roa (raw, json)
Hash identifier: yZlOLf1DubHeCOntL5hI4fm/PxawRZu+7UCy2ONx4h0=
Subject key identifier: DC:D7:A1:69:F0:5B:DA:DC:1E:4C:F2:B3:D5:BF:06:43:27:11:2F:75
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4923
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
Signing time: Sat 04 Jan 2025 09:40:49 +0000
ROA not before: Sat 04 Jan 2025 09:40:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45899
IP address blocks: 14.160.0.0/11 maxlen: 24
14.224.0.0/16 maxlen: 24
14.226.0.0/15 maxlen: 24
14.228.0.0/14 maxlen: 24
14.232.0.0/13 maxlen: 24
14.240.0.0/12 maxlen: 24
43.239.220.0/23 maxlen: 24
103.53.168.0/23 maxlen: 24
103.89.92.0/22 maxlen: 24
103.161.38.0/23 maxlen: 24
103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
113.160.0.0/11 maxlen: 24
123.16.0.0/16 maxlen: 24
123.17.0.0/16 maxlen: 24
123.18.0.0/15 maxlen: 24
123.20.0.0/14 maxlen: 24
123.24.0.0/14 maxlen: 24
123.28.0.0/15 maxlen: 24
123.30.0.0/18 maxlen: 24
123.30.64.0/22 maxlen: 24
123.30.68.0/23 maxlen: 24
123.30.74.0/23 maxlen: 24
123.30.76.0/22 maxlen: 24
123.30.80.0/21 maxlen: 24
123.30.88.0/23 maxlen: 24
123.30.90.0/23 maxlen: 24
123.30.92.0/23 maxlen: 24
123.30.96.0/21 maxlen: 24
123.30.106.0/23 maxlen: 24
123.30.110.0/24 maxlen: 24
123.30.112.0/21 maxlen: 24
123.30.120.0/22 maxlen: 24
123.30.124.0/23 maxlen: 24
123.30.126.0/24 maxlen: 24
123.30.130.0/23 maxlen: 24
123.30.141.0/24 maxlen: 24
123.30.144.0/22 maxlen: 24
123.30.148.0/23 maxlen: 24
123.30.151.0/24 maxlen: 24
123.30.152.0/23 maxlen: 24
123.30.161.0/24 maxlen: 24
123.30.166.0/23 maxlen: 24
123.30.168.0/21 maxlen: 24
123.30.176.0/20 maxlen: 24
123.30.192.0/21 maxlen: 24
123.30.201.0/24 maxlen: 24
123.30.202.0/23 maxlen: 24
123.30.204.0/22 maxlen: 24
123.30.208.0/20 maxlen: 24
123.30.224.0/22 maxlen: 24
123.30.228.0/23 maxlen: 24
123.30.231.0/24 maxlen: 24
123.30.232.0/21 maxlen: 24
123.30.240.0/23 maxlen: 24
123.30.243.0/24 maxlen: 24
123.30.245.0/24 maxlen: 24
123.30.246.0/23 maxlen: 24
123.30.248.0/23 maxlen: 24
123.30.251.0/24 maxlen: 24
123.30.252.0/24 maxlen: 24
123.30.254.0/23 maxlen: 24
123.31.0.0/21 maxlen: 24
123.31.8.0/23 maxlen: 24
123.31.13.0/24 maxlen: 24
123.31.14.0/23 maxlen: 24
123.31.16.0/21 maxlen: 24
123.31.25.0/24 maxlen: 24
123.31.26.0/24 maxlen: 24
123.31.48.0/20 maxlen: 24
123.31.64.0/18 maxlen: 24
123.31.128.0/17 maxlen: 24
157.119.246.0/23 maxlen: 24
203.160.0.0/23 maxlen: 24
203.162.0.0/21 maxlen: 24
203.162.8.0/22 maxlen: 24
203.162.12.0/24 maxlen: 24
203.162.14.0/23 maxlen: 24
203.162.16.0/20 maxlen: 24
203.162.32.0/23 maxlen: 24
203.162.35.0/24 maxlen: 24
203.162.38.0/23 maxlen: 24
203.162.40.0/21 maxlen: 24
203.162.48.0/24 maxlen: 24
203.162.50.0/24 maxlen: 24
203.162.52.0/24 maxlen: 24
203.162.54.0/23 maxlen: 24
203.162.57.0/24 maxlen: 24
203.162.58.0/24 maxlen: 24
203.162.60.0/22 maxlen: 24
203.162.64.0/22 maxlen: 24
203.162.70.0/23 maxlen: 24
203.162.72.0/22 maxlen: 24
203.162.82.0/23 maxlen: 24
203.162.84.0/22 maxlen: 24
203.162.88.0/21 maxlen: 24
203.162.97.0/24 maxlen: 24
203.162.98.0/23 maxlen: 24
203.162.104.0/21 maxlen: 24
203.162.112.0/20 maxlen: 24
203.162.128.0/20 maxlen: 24
203.162.144.0/21 maxlen: 24
203.162.152.0/24 maxlen: 24
203.162.154.0/24 maxlen: 24
203.162.156.0/22 maxlen: 24
203.162.160.0/23 maxlen: 24
203.162.162.0/24 maxlen: 24
203.162.164.0/22 maxlen: 24
203.162.168.0/21 maxlen: 24
203.162.176.0/21 maxlen: 24
203.162.184.0/21 maxlen: 24
203.162.192.0/18 maxlen: 24
203.210.128.0/17 maxlen: 24
221.132.0.0/20 maxlen: 24
221.132.16.0/23 maxlen: 24
221.132.18.0/23 maxlen: 24
221.132.20.0/22 maxlen: 24
221.132.24.0/21 maxlen: 24
221.132.32.0/19 maxlen: 24
222.252.0.0/15 maxlen: 24
222.254.0.0/16 maxlen: 24
222.255.0.0/19 maxlen: 24
222.255.32.0/22 maxlen: 24
222.255.36.0/23 maxlen: 24
222.255.39.0/24 maxlen: 24
222.255.40.0/21 maxlen: 24
222.255.48.0/20 maxlen: 24
222.255.64.0/21 maxlen: 24
222.255.72.0/21 maxlen: 24
222.255.80.0/20 maxlen: 24
222.255.96.0/22 maxlen: 24
222.255.100.0/23 maxlen: 24
222.255.104.0/21 maxlen: 24
222.255.112.0/21 maxlen: 24
222.255.120.0/24 maxlen: 24
222.255.123.0/24 maxlen: 24
222.255.124.0/22 maxlen: 24
222.255.128.0/18 maxlen: 24
222.255.192.0/20 maxlen: 24
222.255.208.0/23 maxlen: 24
222.255.212.0/22 maxlen: 24
222.255.216.0/21 maxlen: 24
222.255.224.0/21 maxlen: 24
222.255.232.0/23 maxlen: 24
222.255.236.0/24 maxlen: 24
222.255.238.0/24 maxlen: 24
222.255.240.0/20 maxlen: 24
2001:df3:d8c0::/48 maxlen: 48
2001:df4:c340::/48 maxlen: 48
2001:ee0::/32 maxlen: 35
2001:ee0::/36 maxlen: 39
2001:ee0::/40 maxlen: 48
2001:ee0:100::/40 maxlen: 48
2001:ee0:200::/40 maxlen: 48
2001:ee0:400::/40 maxlen: 48
2001:ee0:500::/40 maxlen: 48
2001:ee0:600::/40 maxlen: 48
2001:ee0:700::/40 maxlen: 48
2001:ee0:800::/40 maxlen: 48
2001:ee0:900::/40 maxlen: 48
2001:ee0:a00::/40 maxlen: 48
2001:ee0:b00::/40 maxlen: 48
2001:ee0:c00::/40 maxlen: 48
2001:ee0:d00::/40 maxlen: 48
2001:ee0:e00::/40 maxlen: 48
2001:ee0:f00::/40 maxlen: 48
2001:ee0:1000::/36 maxlen: 48
2001:ee0:2000::/36 maxlen: 48
2001:ee0:3000::/36 maxlen: 48
2001:ee0:4000::/36 maxlen: 48
2001:ee0:5000::/36 maxlen: 48
2001:ee0:6000::/36 maxlen: 48
2001:ee0:7000::/36 maxlen: 48
2001:ee0:8000::/36 maxlen: 48
2001:ee0:9000::/36 maxlen: 48
2001:ee0:a000::/36 maxlen: 48
2001:ee0:b000::/36 maxlen: 48
2001:ee0:c000::/36 maxlen: 48
2001:ee0:d000::/36 maxlen: 48
2001:ee0:e000::/36 maxlen: 48
2001:ee0:f000::/36 maxlen: 48
2001:ee1::/32 maxlen: 48
2001:ee2::/32 maxlen: 48
2001:ee3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18723 (0x4923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jan 4 09:40:49 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67790221-2e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:f6:4f:e5:80:19:1e:f2:a1:2b:4d:d7:60:
00:70:56:7a:37:f5:35:34:c4:15:3a:81:7a:07:9d:
17:5b:0a:4c:f6:3f:c5:50:77:c9:c2:35:d2:56:b5:
4c:96:ee:25:6e:17:84:71:a5:1b:db:57:6e:fe:e2:
d2:cb:88:4d:09:11:31:bd:84:7c:86:15:53:51:32:
cf:69:93:a1:61:d3:4c:6b:bd:67:e3:0b:5e:ff:d1:
7f:22:bb:60:b7:af:ef:fe:e9:b1:1f:0a:82:c3:b3:
86:18:68:fb:08:91:1e:b5:7e:48:e6:fd:52:9d:8a:
8b:a5:bc:12:76:e4:e0:06:16:4b:95:22:c9:58:a3:
b9:ab:86:4f:a6:bd:79:29:24:b2:19:65:d1:c7:51:
3f:cf:0f:f2:1f:33:58:48:3a:29:35:84:2a:a3:60:
53:cb:b4:ba:63:01:67:18:0b:59:51:f4:ec:10:4f:
a4:e1:ef:59:e2:84:c2:07:ca:9b:96:f8:bb:31:47:
d2:eb:97:78:65:16:68:2e:d9:66:b7:dd:79:b0:8d:
81:74:80:3b:63:81:f1:3f:00:d6:39:01:34:00:98:
ec:44:49:b3:ec:d2:67:fe:0b:f7:40:73:f4:fe:9d:
cb:35:20:8a:b6:d7:10:88:b3:9d:40:64:e4:c0:e5:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:A1:69:F0:5B:DA:DC:1E:4C:F2:B3:D5:BF:06:43:27:11:2F:75
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1DDD352E2AD111EFAE5FF358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.160.0.0/11
14.224.0.0/16
14.226.0.0-14.255.255.255
43.239.220.0/23
103.53.168.0/23
103.89.92.0/22
103.161.38.0/23
103.171.92.0/23
113.160.0.0/11
123.16.0.0-123.30.69.255
123.30.74.0-123.30.93.255
123.30.96.0/21
123.30.106.0/23
123.30.110.0/24
123.30.112.0-123.30.126.255
123.30.130.0/23
123.30.141.0/24
123.30.144.0-123.30.149.255
123.30.151.0-123.30.153.255
123.30.161.0/24
123.30.166.0-123.30.199.255
123.30.201.0-123.30.229.255
123.30.231.0-123.30.241.255
123.30.243.0/24
123.30.245.0-123.30.249.255
123.30.251.0-123.30.252.255
123.30.254.0-123.31.9.255
123.31.13.0-123.31.23.255
123.31.25.0-123.31.26.255
123.31.48.0-123.31.255.255
157.119.246.0/23
203.160.0.0/23
203.162.0.0-203.162.12.255
203.162.14.0-203.162.33.255
203.162.35.0/24
203.162.38.0-203.162.48.255
203.162.50.0/24
203.162.52.0/24
203.162.54.0/23
203.162.57.0-203.162.58.255
203.162.60.0-203.162.67.255
203.162.70.0-203.162.75.255
203.162.82.0-203.162.95.255
203.162.97.0-203.162.99.255
203.162.104.0-203.162.152.255
203.162.154.0/24
203.162.156.0-203.162.162.255
203.162.164.0-203.162.255.255
203.210.128.0/17
221.132.0.0/18
222.252.0.0-222.255.37.255
222.255.39.0-222.255.101.255
222.255.104.0-222.255.120.255
222.255.123.0-222.255.209.255
222.255.212.0-222.255.233.255
222.255.236.0/24
222.255.238.0/24
222.255.240.0/20
IPv6:
2001:df3:d8c0::/48
2001:df4:c340::/48
2001:ee0::/30
Signature Algorithm: sha256WithRSAEncryption
0d:1d:af:9b:60:19:d1:b9:3d:d5:2e:74:72:67:67:3c:d5:04:
d2:88:6f:f7:0f:2d:85:f7:60:d3:3f:b5:8d:94:11:c7:af:a4:
85:f2:70:e6:cb:52:2a:d7:1e:36:0c:ad:c3:7c:27:1b:97:89:
68:fc:5a:5a:a3:c3:70:ec:3f:f4:0e:56:83:49:6e:fc:8d:69:
87:2e:19:52:a2:7d:fd:3f:f9:19:dd:0c:ad:91:ce:8c:12:5a:
94:b6:9b:b9:ff:f6:70:56:f8:4a:4f:87:7a:e1:8f:fe:88:94:
bf:b8:aa:e6:1d:a9:1f:5e:b5:6e:be:2a:e1:de:13:56:a1:ee:
0f:9e:92:7e:a7:bc:2f:ae:29:d4:2c:bf:71:9e:d9:86:99:c0:
3e:9b:0c:7c:48:83:3e:b0:db:88:cf:92:b1:ba:51:7e:45:00:
ca:63:95:01:ab:5b:f0:87:84:cd:c6:00:a0:35:a0:67:66:e2:
23:e1:ec:db:3e:a3:74:71:0e:8a:db:4a:d1:4f:0e:8b:b1:33:
f8:6e:b5:7d:8e:c2:cd:96:6d:c0:04:23:6f:ef:26:10:40:5f:
f5:14:7a:06:06:7d:19:6d:0e:6e:9b:c1:d3:8d:53:d0:5c:44:
7e:88:a2:e9:1d:60:e2:31:58:c3:1f:33:b0:b9:a0:a0:82:13:
83:dd:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:12 2025 by rpki-client