Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa
File: 4A08F422F43211EBA188C86AC4F9AE02.roa (raw, json)
Hash identifier: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=
Subject key identifier: 37:E4:39:A6:37:FB:EB:B5:00:E4:9F:93:56:0D:B4:7A:B8:74:AE:B6
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 3456
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa
Signing time: Wed 02 Oct 2024 14:51:09 +0000
ROA not before: Wed 02 Oct 2024 14:51:09 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 4007
IP address blocks: 103.232.152.0/22 maxlen: 24
110.34.0.0/19 maxlen: 24
116.66.192.0/21 maxlen: 24
163.47.148.0/22 maxlen: 22
163.47.148.0/24 maxlen: 24
163.47.149.0/24 maxlen: 24
163.47.150.0/24 maxlen: 24
163.47.151.0/24 maxlen: 24
182.93.64.0/19 maxlen: 24
202.63.240.0/21 maxlen: 24
2403:3800::/32 maxlen: 40
2403:3800:8::/48 maxlen: 48
2403:3800:600::/48 maxlen: 48
2403:3800:700::/48 maxlen: 48
2403:3800:820::/48 maxlen: 48
2403:3800:1200::/44 maxlen: 44
2403:3800:1210::/44 maxlen: 44
2403:3800:1220::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13398 (0x3456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Oct 2 14:51:09 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fd5ddd-b513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:10:cc:2d:1a:f4:0f:ed:9e:ae:5e:ff:b2:
0f:52:e2:55:91:04:5d:bd:30:f2:47:88:a7:df:ec:
7c:ab:b3:bb:da:69:3a:24:cc:21:b8:d1:31:e0:c0:
d2:bc:f6:eb:78:64:57:c9:49:33:48:34:bf:5b:c4:
5a:e4:ba:16:e0:e0:b2:d1:7d:d1:18:e6:e9:0b:2e:
ee:b1:12:9d:70:54:c5:05:2e:92:ff:41:f5:50:bf:
14:63:4d:c0:01:a9:75:9b:d8:2d:43:3c:0a:d2:64:
51:0d:95:b3:90:82:7c:31:32:6e:f7:7a:10:c0:cc:
c2:75:88:78:69:83:c6:55:15:28:6e:5f:8e:21:8d:
be:c5:f5:53:52:37:95:06:b0:cc:63:ab:5c:61:ee:
3e:ee:f7:84:b1:32:d2:eb:b6:46:13:88:b2:20:d4:
b6:c7:b2:66:bd:2b:2c:c9:cb:70:96:e4:23:7b:28:
7e:65:26:e6:8a:61:94:e1:03:9c:96:87:46:dc:89:
bd:d9:ba:97:80:57:09:79:b9:b0:32:83:55:f3:b9:
1a:35:44:b1:8c:01:2d:ef:48:d2:c3:bd:c6:11:f8:
5c:67:eb:65:32:51:c3:0a:cf:2e:c1:6e:b5:18:d2:
b6:27:18:da:eb:4d:95:56:06:82:d0:92:d8:76:f1:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:39:A6:37:FB:EB:B5:00:E4:9F:93:56:0D:B4:7A:B8:74:AE:B6
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.152.0/22
110.34.0.0/19
116.66.192.0/21
163.47.148.0/22
182.93.64.0/19
202.63.240.0/21
IPv6:
2403:3800::/32
Signature Algorithm: sha256WithRSAEncryption
d7:dc:54:5f:31:b5:d0:4f:1c:64:00:a1:bc:ea:36:6a:3b:6f:
cf:97:2e:e4:37:4e:16:46:6b:40:04:00:2b:e5:ee:fc:73:86:
b9:39:d8:3a:b4:ce:02:51:7b:f9:fb:f3:17:f9:2d:b6:26:db:
3c:cf:8e:20:b3:09:0b:84:e0:f2:5d:51:3d:4a:8b:51:8d:a3:
2a:0d:8f:00:d1:6a:f1:cb:3c:9f:bf:42:30:5e:74:3f:bc:ac:
db:92:43:67:78:72:da:e9:3b:ab:3e:55:41:8d:fa:e4:ae:88:
26:81:c1:a1:cd:b1:4b:05:b0:ab:73:e7:bb:41:fa:14:41:38:
a3:4c:73:78:e8:d5:29:42:eb:67:4f:22:9d:12:fe:6e:23:13:
37:4e:f6:45:6b:e1:f8:91:0d:f8:70:a3:d2:03:86:8a:8f:bd:
60:01:ac:67:27:88:5a:70:f5:88:8d:70:aa:8d:76:a7:e1:02:
9c:b0:ed:05:0d:78:f9:19:3d:50:a3:91:4c:31:df:b2:78:f5:
79:03:a9:64:d2:08:4c:e8:38:a6:e8:f9:b7:8c:1e:d0:0c:b2:
b6:6a:8c:8f:2c:cf:c6:5f:9a:40:44:b9:b2:27:bf:a0:d0:02:
ce:47:e7:7a:56:cd:86:f8:a2:01:be:d2:c6:19:bb:f3:b8:44:
a9:b3:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:58 2025 by rpki-client