Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/31414558B0D511EFB17B942FC4F9AE02.roa
File: 31414558B0D511EFB17B942FC4F9AE02.roa (raw, json)
Hash identifier: U4xLRRVIu/47Hk96KaKrlpfbqkMWBdbyLIYWn3tVklk=
Subject key identifier: 91:FD:EF:5C:0D:3D:C8:D9:51:71:CD:25:A8:31:3F:78:CA:3E:BB:C7
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 086D
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/31414558B0D511EFB17B942FC4F9AE02.roa
Signing time: Fri 06 Dec 2024 09:40:54 +0000
ROA not before: Fri 06 Dec 2024 09:40:54 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133957
IP address blocks: 45.118.68.0/24 maxlen: 24
45.118.69.0/24 maxlen: 24
45.118.70.0/24 maxlen: 24
45.118.71.0/24 maxlen: 24
103.49.200.0/24 maxlen: 24
103.49.202.0/24 maxlen: 24
103.49.203.0/24 maxlen: 24
2402:1c80::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Validity
Not Before: Dec 6 09:40:54 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6752c6a6-39ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:a0:be:eb:a7:0b:4b:a0:94:44:bb:3d:3e:
9c:66:95:26:78:b0:1b:ff:47:0c:bc:55:cc:ee:ff:
9b:c5:c0:91:21:df:87:aa:b5:1c:6b:e2:95:65:51:
5f:c6:bb:cd:9e:76:12:97:01:80:80:e2:1b:10:ab:
cb:ce:4e:d4:fc:46:b0:51:16:44:b1:1b:0d:26:c6:
a5:98:1f:38:1f:d2:69:88:19:db:59:da:31:ce:37:
bf:8a:cf:e1:fc:10:74:79:97:2a:1c:e6:f4:10:c1:
c5:96:42:8e:73:30:bd:09:9f:62:a7:72:46:cc:95:
72:24:0e:62:6f:fc:bf:6d:66:3a:87:18:40:a1:c6:
2f:d5:9e:8e:06:eb:fa:11:e6:a3:c0:df:20:66:48:
40:7b:d2:ea:22:51:41:1f:d7:96:1c:1e:7a:93:e8:
e3:4c:55:13:ef:d1:45:48:02:00:ae:cf:95:38:b0:
22:a8:71:a4:54:b0:c7:48:a4:21:32:7c:b6:f8:61:
62:ec:7c:40:0b:a1:92:62:92:f1:f9:50:25:80:ab:
74:33:c0:17:ab:31:9a:52:e4:a7:1b:aa:bf:68:d5:
14:3e:5f:65:07:bb:3e:f6:43:52:5e:61:f1:d1:31:
eb:e5:46:be:14:61:2a:c5:37:4d:83:00:eb:21:2c:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:EF:5C:0D:3D:C8:D9:51:71:CD:25:A8:31:3F:78:CA:3E:BB:C7
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/31414558B0D511EFB17B942FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.68.0/22
103.49.200.0/24
103.49.202.0/23
IPv6:
2402:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
71:aa:0c:5e:41:c5:f9:5d:57:f4:79:95:c7:c0:a7:30:d7:bb:
25:34:4e:36:92:4d:6b:ae:26:42:c8:9c:1e:65:e1:14:b9:d1:
5c:dd:37:f7:f5:90:8f:94:b1:ea:00:6d:f3:13:26:3d:c1:f8:
e9:c0:fd:4b:05:dc:dc:3c:df:7d:e6:3a:47:fb:ce:df:e5:f0:
84:2f:87:2b:ce:0c:ed:55:ff:a7:27:ec:41:58:c8:a4:01:0a:
bc:ee:72:4c:d9:fb:92:55:38:05:8d:e2:81:bf:47:99:4a:6c:
0d:2e:7c:e8:69:34:7a:37:e6:b7:c2:18:5d:e8:80:7e:bc:cd:
10:01:44:53:a6:c6:c2:86:d4:e2:d5:95:c9:6b:68:84:b7:09:
67:34:06:8f:28:f6:30:32:fa:57:a2:5e:dd:02:07:c3:fd:01:
3c:75:d6:36:16:6b:04:03:78:b3:31:c3:61:17:0c:51:03:df:
4a:e3:4e:18:d5:d4:96:1a:18:93:90:a5:30:03:83:95:11:33:
0c:9a:f8:3b:fe:ba:ff:e8:fd:eb:1f:76:01:c0:a5:1b:30:34:
c7:95:a6:1d:a5:fa:4a:b6:91:8d:63:02:54:55:f5:51:1c:98:
f6:d3:fa:a9:97:55:43:e0:1b:68:a4:55:cd:34:83:65:5f:35:
47:37:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:12 2025 by rpki-client