Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa
File: 4990DE3AB79C11EE98F9562DC4F9AE02.roa (raw, json)
Hash identifier: vRuUBw6dpmWfvW84x11kDYm3zIjK3jT9mHlCGc6fLcg=
Subject key identifier: DD:51:A3:F8:39:D6:C8:C6:B0:82:03:CB:5D:98:B1:4C:23:D9:3A:24
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: FD
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa
Signing time: Fri 03 Jan 2025 04:07:33 +0000
ROA not before: Fri 03 Jan 2025 04:07:33 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 8100
IP address blocks: 36.50.84.0/23 maxlen: 23
103.79.76.0/22 maxlen: 22
103.79.76.0/24 maxlen: 24
103.79.77.0/24 maxlen: 24
103.79.78.0/24 maxlen: 24
103.79.79.0/24 maxlen: 24
103.79.118.0/24 maxlen: 24
103.91.144.0/24 maxlen: 24
103.91.145.0/24 maxlen: 24
202.91.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Jan 3 04:07:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67776284-b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:39:aa:95:f1:33:f2:dd:59:a2:7a:d0:6c:
56:e5:16:08:66:9c:0d:dc:b5:30:8c:c9:d5:68:1e:
33:f5:3c:25:f6:99:23:e5:e4:c4:2b:c0:72:f3:db:
9e:b3:c0:14:64:54:02:a9:ea:4d:a6:09:2d:04:7c:
0d:42:6d:9d:b9:a8:1c:f7:7e:cb:9b:b4:85:62:33:
10:37:3e:98:35:e5:e7:30:37:3f:d2:3c:4e:80:b9:
f5:f4:6d:6e:cd:fc:06:fa:d6:4f:4a:20:e2:57:d0:
e8:8e:e7:95:a0:37:25:14:1a:b3:ef:07:bd:a2:ce:
f2:0a:a5:a5:1c:3f:b4:34:ea:d6:73:94:b0:5d:68:
f8:e2:c1:a9:9d:63:37:03:c3:30:fd:1c:f5:92:31:
b0:eb:24:9c:59:53:82:7c:d4:01:4b:6c:84:c4:cf:
17:95:6d:15:26:59:a3:6d:63:81:67:d7:70:b7:29:
f0:4a:97:80:7f:47:2b:2e:06:4f:ca:08:af:0b:54:
e5:9c:c8:aa:e2:02:0c:70:f4:58:a7:12:13:85:9d:
14:dd:40:21:79:11:8d:c6:36:c3:c0:12:05:05:67:
dd:08:11:fc:37:9e:c8:1c:a5:fc:fc:48:42:62:6d:
a4:ae:04:f7:73:81:1c:a9:c6:3c:dd:85:6b:a3:06:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:A3:F8:39:D6:C8:C6:B0:82:03:CB:5D:98:B1:4C:23:D9:3A:24
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.84.0/23
103.79.76.0/22
103.79.118.0/24
103.91.144.0/23
202.91.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:70:a6:85:f9:0f:25:cc:df:c3:ed:1f:30:5d:7a:b8:96:73:
a8:cd:01:40:30:a9:67:a2:94:9b:3c:db:03:59:26:ce:72:00:
4d:10:f1:ff:45:99:e7:b5:d4:2b:3f:6a:ac:13:22:fa:2f:ab:
c0:c6:5d:0c:17:02:fd:f5:92:de:bc:3d:c4:f3:77:6d:a5:e6:
ab:6e:31:d6:51:e5:8d:ec:dc:b1:88:ec:95:f4:89:f3:47:41:
6e:bf:e0:62:d0:08:ec:a8:f8:b2:50:13:0f:c3:88:61:75:43:
49:e1:7f:b2:9f:2e:a2:5c:f1:13:bf:09:c8:fb:e1:f0:f8:29:
f2:d0:ac:16:a1:75:b4:b6:27:c7:8c:bb:a9:fa:c6:d3:74:22:
31:f9:a5:22:15:47:59:44:01:10:be:09:3b:b7:e9:f6:d5:b8:
11:a3:5d:45:4b:9a:f7:8e:de:13:db:6a:5d:f2:40:bb:fd:35:
f8:fe:b1:0f:00:2f:52:c8:dc:69:89:10:c7:1a:7f:23:98:46:
5a:ae:26:b6:43:ba:4d:8f:94:3f:0d:fc:01:01:59:eb:55:b0:
93:f9:fa:86:71:56:00:c0:e8:66:2a:db:31:e3:c9:8a:2b:2e:
4f:eb:41:a3:d5:22:04:98:40:b4:a8:f5:b0:cd:ae:9a:5f:c6:
16:77:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:18 2025 by rpki-client