Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
File: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (raw, json)
Hash identifier: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=
Subject key identifier: 81:5E:F7:D6:C9:D6:50:13:65:F2:B0:F4:AE:05:EA:07:ED:A1:A1:E0
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 346E
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
Signing time: Thu 28 Nov 2024 15:00:50 +0000
ROA not before: Thu 28 Nov 2024 15:00:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45143
IP address blocks: 14.100.128.0/17 maxlen: 24
111.65.31.0/24 maxlen: 24
111.65.32.0/24 maxlen: 24
111.65.33.0/24 maxlen: 24
111.65.34.0/24 maxlen: 24
111.65.35.0/24 maxlen: 24
111.65.36.0/24 maxlen: 24
111.65.37.0/24 maxlen: 24
111.65.38.0/24 maxlen: 24
111.65.39.0/24 maxlen: 24
111.65.40.0/24 maxlen: 24
111.65.41.0/24 maxlen: 24
111.65.42.0/24 maxlen: 24
111.65.43.0/24 maxlen: 24
111.65.44.0/24 maxlen: 24
111.65.45.0/24 maxlen: 24
111.65.46.0/24 maxlen: 24
111.65.47.0/24 maxlen: 24
111.65.48.0/24 maxlen: 24
111.65.49.0/24 maxlen: 24
111.65.50.0/24 maxlen: 24
111.65.51.0/24 maxlen: 24
111.65.52.0/24 maxlen: 24
111.65.53.0/24 maxlen: 24
111.65.54.0/24 maxlen: 24
111.65.55.0/24 maxlen: 24
111.65.56.0/24 maxlen: 24
111.65.57.0/24 maxlen: 24
111.65.58.0/24 maxlen: 24
111.65.59.0/24 maxlen: 24
111.65.60.0/24 maxlen: 24
111.65.61.0/24 maxlen: 24
111.65.62.0/24 maxlen: 24
111.65.63.0/24 maxlen: 24
111.65.64.0/24 maxlen: 24
111.65.65.0/24 maxlen: 24
111.65.66.0/24 maxlen: 24
111.65.67.0/24 maxlen: 24
111.65.68.0/24 maxlen: 24
111.65.69.0/24 maxlen: 24
111.65.70.0/24 maxlen: 24
111.65.71.0/24 maxlen: 24
111.65.72.0/24 maxlen: 24
111.65.73.0/24 maxlen: 24
111.65.74.0/24 maxlen: 24
111.65.75.0/24 maxlen: 24
111.65.76.0/24 maxlen: 24
111.65.77.0/24 maxlen: 24
111.65.78.0/24 maxlen: 24
111.65.79.0/24 maxlen: 24
180.255.128.0/17 maxlen: 24
202.78.56.0/24 maxlen: 24
202.78.57.0/24 maxlen: 24
202.78.58.0/24 maxlen: 24
2400:1c00:1::/48 maxlen: 48
2400:1c00:2::/48 maxlen: 48
2400:1c00:3::/48 maxlen: 48
2400:1c00:4::/48 maxlen: 48
2400:1c00:b::/48 maxlen: 48
2400:1c00:c::/48 maxlen: 48
2400:1c00:1a::/48 maxlen: 48
2400:1c00:1b::/48 maxlen: 48
2400:1c00:1c::/48 maxlen: 48
2400:1c00:1e::/48 maxlen: 48
2400:1c00:1f::/48 maxlen: 48
2400:1c00:20::/44 maxlen: 44
2400:1c00:30::/44 maxlen: 44
2400:1c00:40::/44 maxlen: 44
2400:1c00:50::/44 maxlen: 44
2400:1c00:64::/48 maxlen: 48
2400:1c00:66::/48 maxlen: 48
2400:1c00:70::/44 maxlen: 44
2400:1c00:80::/43 maxlen: 43
2400:1c00:a0::/43 maxlen: 43
2400:1c00:f0::/44 maxlen: 44
2400:1c00:100::/44 maxlen: 44
2400:1c00:110::/44 maxlen: 44
2400:1c00:120::/44 maxlen: 44
2400:1c00:130::/44 maxlen: 44
2400:1c00:140::/44 maxlen: 44
2400:1c00:150::/44 maxlen: 44
2400:1c00:160::/44 maxlen: 44
2400:1c00:190::/44 maxlen: 44
2400:1c00:1a0::/44 maxlen: 44
2400:1c00:1b0::/44 maxlen: 44
2400:1c00:1d0::/44 maxlen: 44
2400:1c00:1e0::/44 maxlen: 44
2400:1c00:220::/44 maxlen: 44
2400:1c00:230::/44 maxlen: 44
2400:1c00:310::/45 maxlen: 45
2400:1c00:318::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13422 (0x346e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Nov 28 15:00:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=674885a1-99fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:c4:ab:88:b3:3e:f7:6c:d7:8c:8c:9b:3d:
c6:b1:78:a0:fc:2a:2c:66:c5:a4:ec:16:1d:82:b5:
13:72:ad:d1:ac:50:03:89:c1:00:d1:59:d4:37:1e:
67:0a:3f:e1:d2:f6:ab:28:a1:8b:04:ed:aa:3b:2b:
26:7b:9d:65:7b:27:7e:0f:81:49:68:32:bc:ac:58:
9a:c4:20:ef:97:c1:2b:e9:1c:23:4c:24:de:1a:39:
eb:ac:0f:74:fb:cd:3f:ef:fc:0a:cb:4b:99:c9:9a:
9e:a9:78:64:fe:8e:01:6c:38:23:8d:bd:c7:57:a4:
97:27:6a:7e:5c:af:8d:12:be:d9:60:44:54:4c:c8:
7e:da:a8:77:1f:47:58:ca:ba:ce:df:fe:81:42:d3:
8a:f7:8c:eb:69:71:c4:66:b8:f0:87:3c:60:06:3b:
bb:c8:8a:5f:cc:a8:eb:1d:6b:35:36:00:16:b3:27:
37:bc:ed:58:92:26:80:ca:35:0e:b8:7c:1c:5d:00:
4e:b1:22:d9:3f:22:8b:b8:7f:3c:a4:95:27:fc:60:
71:01:64:17:66:30:f6:53:c6:a6:52:94:8b:02:f2:
2b:03:c5:76:7d:db:90:9e:e6:b6:c8:41:b3:7d:ca:
43:74:fd:8e:86:28:34:45:61:75:92:75:e7:47:e4:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:F7:D6:C9:D6:50:13:65:F2:B0:F4:AE:05:EA:07:ED:A1:A1:E0
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.128.0/17
111.65.31.0-111.65.79.255
180.255.128.0/17
202.78.56.0-202.78.58.255
IPv6:
2400:1c00:1::-2400:1c00:4:ffff:ffff:ffff:ffff:ffff
2400:1c00:b::-2400:1c00:c:ffff:ffff:ffff:ffff:ffff
2400:1c00:1a::-2400:1c00:1c:ffff:ffff:ffff:ffff:ffff
2400:1c00:1e::-2400:1c00:5f:ffff:ffff:ffff:ffff:ffff
2400:1c00:64::/48
2400:1c00:66::/48
2400:1c00:70::-2400:1c00:bf:ffff:ffff:ffff:ffff:ffff
2400:1c00:f0::-2400:1c00:16f:ffff:ffff:ffff:ffff:ffff
2400:1c00:190::-2400:1c00:1bf:ffff:ffff:ffff:ffff:ffff
2400:1c00:1d0::-2400:1c00:1ef:ffff:ffff:ffff:ffff:ffff
2400:1c00:220::/43
2400:1c00:310::/44
Signature Algorithm: sha256WithRSAEncryption
18:82:fe:20:ca:b9:7d:0b:11:54:0f:00:93:56:6a:82:54:d1:
a8:12:33:3e:ed:94:30:c3:48:8f:46:02:ba:4a:fc:df:70:78:
b7:15:69:b9:5e:be:79:c2:8b:5b:3a:da:db:23:ce:a3:bb:3c:
7c:96:3f:ba:55:8b:49:43:6e:d9:96:6c:4f:7f:26:16:37:79:
4b:cd:85:43:a0:27:41:c0:47:c4:2a:02:31:df:f3:de:87:c4:
b6:d2:40:77:c1:6d:fd:71:fc:ff:ae:93:79:20:00:cb:c9:0a:
b0:c0:ff:3d:8b:05:04:ef:bf:71:0d:9d:75:0a:fc:1d:66:5e:
26:f3:3b:c8:83:2d:e0:34:6c:7d:01:01:56:22:cd:ab:be:32:
5c:55:5e:ac:1d:50:d3:57:d2:01:f2:e9:b1:8c:5e:32:f8:ea:
75:2d:8b:13:f1:ea:6a:39:aa:7f:3d:b8:d7:92:55:9b:b9:10:
01:12:7f:02:31:c3:7d:84:b7:05:86:f2:c6:c5:a2:58:b0:35:
bd:35:4c:76:92:59:af:d7:25:e8:f2:1d:0e:73:f5:e6:93:ef:
1e:14:fd:f3:62:e2:b8:e4:44:c7:fc:d5:76:df:a8:8c:5c:c3:
e4:17:05:ea:91:08:e5:ae:14:ff:cd:84:f0:38:f8:a5:0b:6e:
44:03:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:16 2025 by rpki-client