Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa
File: 7A42D8C8DD3C11EA8C68452FC4F9AE02.roa (raw, json)
Hash identifier: m2yIuby8HlO1waMEwZ3VKb7grN7qwZoDdVN1MenQrvg=
Subject key identifier: 60:D5:6D:A8:00:04:0B:23:D7:DD:68:AF:62:7B:2F:B1:4A:53:4B:4C
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 3419
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa
Signing time: Tue 24 Sep 2024 14:50:55 +0000
ROA not before: Tue 24 Sep 2024 14:50:55 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 7700
IP address blocks: 103.30.32.0/22 maxlen: 22
202.63.224.0/20 maxlen: 20
202.63.224.0/24 maxlen: 24
202.63.225.0/24 maxlen: 24
202.63.226.0/24 maxlen: 24
202.63.227.0/24 maxlen: 24
202.63.228.0/24 maxlen: 24
202.63.229.0/24 maxlen: 24
202.63.230.0/24 maxlen: 24
202.63.231.0/24 maxlen: 24
202.63.232.0/24 maxlen: 24
202.63.233.0/24 maxlen: 24
202.63.234.0/24 maxlen: 24
202.63.235.0/24 maxlen: 24
202.63.236.0/24 maxlen: 24
202.63.237.0/24 maxlen: 24
202.63.238.0/24 maxlen: 24
202.63.239.0/24 maxlen: 24
221.120.112.0/21 maxlen: 21
221.120.120.0/21 maxlen: 21
2402:ce00::/32 maxlen: 32
2402:ce01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13337 (0x3419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Sep 24 14:50:55 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66f2d1ce-c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:5d:13:ce:22:91:8a:d0:86:16:8a:92:72:
f4:0a:ad:43:f2:17:9c:9d:3b:1a:09:69:bf:cc:5d:
99:77:99:39:b4:99:60:0d:b2:cb:3d:8e:fc:6d:d5:
b7:ea:f3:d6:f1:47:61:27:63:ce:45:e8:1d:90:94:
99:52:06:3e:28:c9:be:19:04:a6:af:dd:df:ef:13:
44:eb:cf:6a:63:d5:32:17:32:a4:27:e5:79:fa:dd:
cd:72:21:59:16:ad:e7:4e:d2:e4:70:60:a7:a2:bf:
d1:00:e0:19:ed:4f:f8:c8:c5:80:89:c4:c7:ff:2b:
37:4c:5e:c8:03:0c:b2:e9:85:9d:10:35:19:3e:d1:
2a:6a:37:ae:d2:6e:f5:57:e2:08:f4:a2:8f:60:93:
2e:19:c6:42:62:dc:5a:93:38:a6:8d:1a:2c:8d:b2:
22:51:7d:51:ea:55:60:0f:79:b6:fa:77:0b:7a:dc:
ce:07:72:4c:26:79:63:ce:2e:61:98:47:9d:e2:2e:
ac:98:fa:67:b5:ac:f2:b2:f3:4c:1e:be:06:75:74:
59:77:f4:26:59:fb:28:91:2e:b6:1b:23:24:be:b7:
7e:1f:75:c6:d8:ee:34:ce:ad:e5:79:9c:d2:98:f4:
a8:c1:57:ba:fa:de:df:72:2b:58:b3:d8:f4:2c:e1:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:6D:A8:00:04:0B:23:D7:DD:68:AF:62:7B:2F:B1:4A:53:4B:4C
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.32.0/22
202.63.224.0/20
221.120.112.0/20
IPv6:
2402:ce00::/31
Signature Algorithm: sha256WithRSAEncryption
1f:25:dc:4b:ab:71:68:33:cc:43:4e:3a:28:4a:7d:b0:97:c0:
55:6e:90:ad:a3:09:f6:db:5b:11:1f:ce:14:c9:a7:76:5b:c5:
67:1b:b3:b7:f4:e5:21:16:6e:78:a7:ff:5d:0a:65:37:f1:2d:
ee:22:46:d9:99:3d:5d:bc:72:0b:9b:79:89:a5:71:0c:db:a9:
57:1a:5f:86:8d:d3:c0:7e:fe:af:5a:ea:89:a5:7a:8c:c9:73:
50:c7:60:23:d8:12:e7:4c:2e:b5:61:0e:36:ae:e3:76:b0:e5:
99:16:32:f5:ab:d9:cd:d8:a0:fc:76:48:9e:25:40:4a:2a:08:
bc:c8:e3:ff:53:55:df:3d:3a:ff:80:02:3c:98:e4:ee:a0:c1:
89:ec:f8:4e:f0:8d:31:54:50:6d:27:76:da:98:69:91:2a:10:
1f:4e:8f:d2:73:50:02:39:c8:6b:c7:c5:a9:23:d5:b1:03:60:
90:e0:b4:54:41:5a:ba:f7:b3:b7:9f:30:26:36:ec:3f:28:15:
06:dd:1c:87:56:dd:1c:c2:5b:b7:d2:7b:5e:4e:b3:d9:69:8b:
1f:f4:d1:7f:49:58:8f:e9:65:78:6a:4d:4a:34:59:27:07:ca:
59:59:f2:47:22:d6:86:bd:0e:ae:3f:f9:52:93:34:f6:a0:2e:
4c:7e:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:02 2025 by rpki-client