Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
File: 8949EA2ADC7C11EFAB540729C4F9AE02.roa (raw, json)
Hash identifier: rqQXvOazBp5gQwSE6Sbqe8unAeYOVpyjljm6l7YbXHo=
Subject key identifier: E1:FA:37:C4:23:25:8D:EF:4B:76:6F:E2:1A:83:65:82:85:9E:EB:BF
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 0829
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
Signing time: Mon 27 Jan 2025 07:01:31 +0000
ROA not before: Mon 27 Jan 2025 07:01:31 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9723
IP address blocks: 1.178.2.0/23 maxlen: 24
1.178.66.0/23 maxlen: 24
1.178.80.0/24 maxlen: 24
1.178.82.0/23 maxlen: 24
1.178.84.0/23 maxlen: 24
1.178.96.0/22 maxlen: 24
1.178.175.0/24 maxlen: 24
1.178.176.0/22 maxlen: 24
1.179.0.0/23 maxlen: 24
1.179.4.0/22 maxlen: 24
1.179.8.0/22 maxlen: 24
1.179.12.0/23 maxlen: 24
1.179.16.0/21 maxlen: 24
1.179.48.0/22 maxlen: 24
1.179.62.0/23 maxlen: 24
1.179.96.0/22 maxlen: 24
58.87.0.0/20 maxlen: 20
58.87.0.0/23 maxlen: 23
58.87.2.0/23 maxlen: 23
58.87.6.0/23 maxlen: 23
58.87.8.0/23 maxlen: 23
58.87.10.0/23 maxlen: 23
58.87.12.0/23 maxlen: 23
58.87.14.0/24 maxlen: 24
58.87.15.0/24 maxlen: 24
110.238.21.0/24 maxlen: 24
110.238.24.0/24 maxlen: 24
110.238.25.0/24 maxlen: 24
110.238.144.0/21 maxlen: 21
110.238.144.0/22 maxlen: 24
110.238.240.0/23 maxlen: 24
110.239.0.0/21 maxlen: 21
110.239.15.0/24 maxlen: 24
110.239.16.0/23 maxlen: 23
110.239.26.0/24 maxlen: 24
110.239.31.0/24 maxlen: 24
110.239.32.0/22 maxlen: 24
110.239.128.0/20 maxlen: 20
110.239.128.0/21 maxlen: 21
110.239.176.0/21 maxlen: 21
110.239.176.0/24 maxlen: 24
110.239.178.0/24 maxlen: 24
119.12.80.0/21 maxlen: 24
119.13.0.0/23 maxlen: 23
119.13.2.0/24 maxlen: 24
119.13.3.0/24 maxlen: 24
119.13.4.0/23 maxlen: 23
119.13.6.0/23 maxlen: 23
119.13.8.0/23 maxlen: 23
119.13.10.0/24 maxlen: 24
119.13.48.0/23 maxlen: 23
119.13.48.0/24 maxlen: 24
119.13.49.0/24 maxlen: 24
119.13.144.0/22 maxlen: 24
119.13.176.0/22 maxlen: 23
119.13.176.0/23 maxlen: 24
119.13.178.0/24 maxlen: 24
119.13.240.0/23 maxlen: 24
121.91.96.0/23 maxlen: 24
121.91.199.0/24 maxlen: 24
123.200.128.0/20 maxlen: 20
123.200.133.0/24 maxlen: 24
123.200.136.0/22 maxlen: 22
123.200.140.0/22 maxlen: 22
123.200.144.0/22 maxlen: 22
123.200.148.0/22 maxlen: 22
123.200.152.0/21 maxlen: 21
123.200.160.0/23 maxlen: 23
123.200.162.0/23 maxlen: 23
123.200.164.0/23 maxlen: 23
123.200.165.0/24 maxlen: 24
123.200.166.0/23 maxlen: 23
123.200.168.0/23 maxlen: 23
123.200.170.0/23 maxlen: 23
123.200.172.0/24 maxlen: 24
123.200.174.0/24 maxlen: 24
123.200.175.0/24 maxlen: 24
123.200.176.0/23 maxlen: 23
123.200.179.0/24 maxlen: 24
123.200.180.0/23 maxlen: 23
123.200.182.0/23 maxlen: 23
123.200.184.0/22 maxlen: 22
123.200.187.0/24 maxlen: 24
123.200.188.0/23 maxlen: 23
123.200.200.0/23 maxlen: 24
123.200.208.0/21 maxlen: 21
123.200.216.0/21 maxlen: 21
123.200.240.0/23 maxlen: 24
202.83.64.0/19 maxlen: 19
202.83.64.0/22 maxlen: 22
202.83.68.0/23 maxlen: 23
202.83.70.0/23 maxlen: 23
202.83.72.0/24 maxlen: 24
202.83.73.0/24 maxlen: 24
202.83.74.0/23 maxlen: 23
202.83.76.0/22 maxlen: 22
202.83.80.0/23 maxlen: 23
202.83.82.0/24 maxlen: 24
202.83.83.0/24 maxlen: 24
202.83.84.0/22 maxlen: 22
202.83.88.0/23 maxlen: 23
202.83.90.0/23 maxlen: 23
202.83.92.0/23 maxlen: 23
202.83.94.0/24 maxlen: 24
202.83.95.0/24 maxlen: 24
202.183.96.0/20 maxlen: 20
202.183.96.0/24 maxlen: 24
202.183.97.0/24 maxlen: 24
202.183.98.0/24 maxlen: 24
202.183.100.0/23 maxlen: 23
202.183.102.0/23 maxlen: 23
202.183.102.0/24 maxlen: 24
202.183.104.0/22 maxlen: 22
202.183.108.0/24 maxlen: 24
202.183.110.0/24 maxlen: 24
202.183.111.0/24 maxlen: 24
202.183.112.0/20 maxlen: 20
202.183.112.0/23 maxlen: 23
202.183.114.0/23 maxlen: 23
202.183.116.0/23 maxlen: 23
202.183.118.0/24 maxlen: 24
202.183.119.0/24 maxlen: 24
202.183.120.0/22 maxlen: 22
202.183.124.0/23 maxlen: 23
202.183.126.0/24 maxlen: 24
202.183.127.0/24 maxlen: 24
210.56.64.0/24 maxlen: 24
210.56.68.0/23 maxlen: 24
210.56.70.0/23 maxlen: 24
220.157.64.0/24 maxlen: 24
220.157.70.0/24 maxlen: 24
220.157.71.0/24 maxlen: 24
220.157.74.0/23 maxlen: 24
220.157.79.0/24 maxlen: 24
220.157.80.0/23 maxlen: 24
220.157.82.0/23 maxlen: 24
220.157.84.0/23 maxlen: 24
220.157.86.0/23 maxlen: 24
220.157.90.0/24 maxlen: 24
220.157.91.0/24 maxlen: 24
220.157.92.0/24 maxlen: 24
220.157.93.0/24 maxlen: 24
220.157.94.0/24 maxlen: 24
220.157.95.0/24 maxlen: 24
2407:6800::/32 maxlen: 32
2407:6800:0:200::/56 maxlen: 56
2407:6800:0:300::/56 maxlen: 56
2407:6800:0:400::/56 maxlen: 56
2407:6800:0:500::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Jan 27 07:01:31 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67972f4b-34f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:5c:93:cb:25:65:c5:cc:ea:46:96:0b:27:
d2:87:08:df:b4:ab:02:f6:af:a9:26:3c:a2:e4:d8:
50:2d:c4:77:be:95:2d:0c:e7:63:3d:86:f0:0b:40:
c9:60:3a:45:75:7f:f6:ee:87:f1:50:1b:3a:ab:7d:
92:49:6a:54:ec:76:9d:a6:df:cf:27:0d:65:95:e6:
b4:d1:11:6d:92:05:21:99:54:ad:6f:a3:74:33:e1:
8a:de:93:f2:73:f8:6d:97:f4:2f:ba:6f:24:39:15:
c8:02:39:74:bb:e5:85:59:e2:92:28:45:7c:60:a6:
a5:7c:6c:f5:4d:f3:7c:a8:66:d7:ff:f3:1c:76:92:
30:4d:e6:41:5c:c9:ac:c6:9b:71:97:18:12:af:57:
6b:e7:71:25:a5:4e:3f:2b:a4:a1:f4:89:9a:dc:8a:
7a:80:de:66:9c:2b:0b:1b:5d:b4:77:a5:f9:0c:2b:
d3:85:cc:df:29:ec:cc:9f:58:c4:d4:67:59:a0:6f:
e8:19:31:90:38:6a:37:92:88:93:f4:72:0a:a2:31:
18:b7:36:4c:ef:3d:d1:e0:1f:01:db:b9:19:b1:63:
90:bc:18:3e:80:22:76:77:43:ca:39:64:74:ba:e2:
7c:02:9e:92:bc:e9:6a:48:b5:4c:a2:a9:ea:01:81:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:37:C4:23:25:8D:EF:4B:76:6F:E2:1A:83:65:82:85:9E:EB:BF
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/8949EA2ADC7C11EFAB540729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.178.2.0/23
1.178.66.0/23
1.178.80.0/24
1.178.82.0-1.178.85.255
1.178.96.0/22
1.178.175.0-1.178.179.255
1.179.0.0/23
1.179.4.0-1.179.13.255
1.179.16.0/21
1.179.48.0/22
1.179.62.0/23
1.179.96.0/22
58.87.0.0/20
110.238.21.0/24
110.238.24.0/23
110.238.144.0/21
110.238.240.0/23
110.239.0.0/21
110.239.15.0-110.239.17.255
110.239.26.0/24
110.239.31.0-110.239.35.255
110.239.128.0/20
110.239.176.0/21
119.12.80.0/21
119.13.0.0-119.13.10.255
119.13.48.0/23
119.13.144.0/22
119.13.176.0/22
119.13.240.0/23
121.91.96.0/23
121.91.199.0/24
123.200.128.0-123.200.172.255
123.200.174.0-123.200.177.255
123.200.179.0-123.200.189.255
123.200.200.0/23
123.200.208.0/20
123.200.240.0/23
202.83.64.0/19
202.183.96.0/19
210.56.64.0/24
210.56.68.0/22
220.157.64.0/24
220.157.70.0/23
220.157.74.0/23
220.157.79.0-220.157.87.255
220.157.90.0-220.157.95.255
IPv6:
2407:6800::/32
Signature Algorithm: sha256WithRSAEncryption
46:07:a2:ee:1f:45:74:d3:74:16:e5:d3:de:c6:91:32:c2:0c:
92:a8:8a:fa:ce:24:1c:29:6c:7e:72:5f:e2:d4:29:83:6a:08:
13:30:0a:a9:39:79:a2:eb:1f:44:8d:c3:89:22:b6:e3:01:cf:
bc:0f:12:20:76:e7:60:3d:6b:6c:fa:74:50:1b:b4:b1:c5:e7:
59:c0:61:4f:09:cb:31:82:7a:14:11:70:24:1d:fd:a3:9d:fe:
e7:6a:3d:0f:be:e2:a7:5c:c2:31:ec:ae:5f:05:6e:bb:e0:e4:
90:51:b2:a0:f8:a2:40:e7:70:c4:bb:d3:be:d3:88:38:64:53:
bf:5c:c7:81:32:58:55:d4:68:37:85:99:bf:f3:18:80:66:bd:
99:3c:3a:b4:4f:1d:78:46:f2:1e:01:43:a7:fc:91:9a:4d:50:
ec:2b:29:e4:b9:58:db:78:87:45:4f:a3:ed:d3:7e:13:ba:70:
14:cc:1c:0e:aa:4f:a7:d1:5c:da:e2:06:c5:19:16:3f:cd:da:
fb:eb:8f:9c:9b:13:5c:03:b5:2d:a1:7a:54:87:48:8a:aa:72:
6b:50:25:bd:6b:d7:50:0b:02:9d:5e:6f:4f:cc:07:31:f1:76:
2e:94:96:3c:1d:72:9a:ff:1e:1a:98:81:c4:8d:18:e0:4d:82:
15:38:77:9f
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy
NDE3ODMxNzkwHhcNMjUwMTI3MDcwMTMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk3MmY0Yi0zNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64tck8slZcXM6kaWCyfShwjftKsC9q+pJjyi5NhQLcR3vpUtDOdjPYbwC0DJ
YDpFdX/27ofxUBs6q32SSWpU7Hadpt/PJw1llea00RFtkgUhmVStb6N0M+GK3pPy
c/htl/Qvum8kORXIAjl0u+WFWeKSKEV8YKalfGz1TfN8qGbX//McdpIwTeZBXMms
xptxlxgSr1dr53ElpU4/K6Sh9Ima3Ip6gN5mnCsLG120d6X5DCvThczfKezMn1jE
1GdZoG/oGTGQOGo3koiT9HIKojEYtzZM7z3R4B8B27kZsWOQvBg+gCJ2d0PKOWR0
uuJ8Ap6SvOlqSLVMoqnqAYEjAQIDAQABo4IEEzCCBA8wHQYDVR0OBBYEFOH6N8Qj
JY3vS3Zv4hqDZYKFnuu/MB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1
RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvODk0OUVBMkFE
QzdDMTFFRkFCNTQwNzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGbBggrBgEFBQcBBwEB
/wSCAYowggGGMIIBcwQCAAEwggFrAwQBAbICAwQBAbJCAwQAAbJQMAwDBAEBslID
BAEBslQDBAIBsmAwDAMEAAGyrwMEAgGysAMEAQGzADAMAwQCAbMEAwQBAbMMAwQD
AbMQAwQCAbMwAwQBAbM+AwQCAbNgAwQEOlcAAwQAbu4VAwQBbu4YAwQDbu6QAwQB
bu7wAwQDbu8AMAwDBABu7w8DBAFu7xADBABu7xowDAMEAG7vHwMEAm7vIAMEBG7v
gAMEA27vsAMEA3cMUDALAwMAdw0DBAB3DQoDBAF3DTADBAJ3DZADBAJ3DbADBAF3
DfADBAF5W2ADBAB5W8cwDAMEB3vIgAMEAHvIrDAMAwQBe8iuAwQBe8iwMAwDBAB7
yLMDBAF7yLwDBAF7yMgDBAR7yNADBAF7yPADBAXKU0ADBAXKt2ADBADSOEADBALS
OEQDBADcnUADBAHcnUYDBAHcnUowDAMEANydTwMEA9ydUDAMAwQB3J1aAwQF3J1A
MA0EAgACMAcDBQAkB2gAMA0GCSqGSIb3DQEBCwUAA4IBAQBGB6LuH0V003QW5dPe
xpEywgySqIr6ziQcKWx+cl/i1CmDaggTMAqpOXmi6x9EjcOJIrbjAc+8DxIgdudg
PWts+nRQG7SxxedZwGFPCcsxgnoUEXAkHf2jnf7naj0PvuKnXMIx7K5fBW674OSQ
UbKg+KJA53DEu9O+04g4ZFO/XMeBMlhV1Gg3hZm/8xiAZr2ZPDq0Tx14RvIeAUOn
/JGaTVDsKynkuVjbeIdFT6Pt034TunAUzBwOqk+n0Vza4gbFGRY/zdr764+cmxNc
A7UtoXpUh0iKqnJrUCW9a9dQCwKdXm9PzAcx8XYulJY8HXKa/x4amIHEjRjgTYIV
OHef
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:32:29 2025 by rpki-client