Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
File: C981BB3CF36A11E983B1D764C4F9AE02.roa (raw, json)
Hash identifier: 4xngxbC/FSr9DfqmMKAmH874AAFjb0QwcfQhbhi5WXI=
Subject key identifier: 25:2D:3F:F4:2B:D7:13:C8:67:C0:E0:45:B4:7C:43:93:79:8A:F5:75
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0BD7
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
Signing time: Tue 02 Apr 2024 19:27:56 +0000
ROA not before: Tue 02 Apr 2024 19:27:56 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 63526
IP address blocks: 103.112.52.0/22 maxlen: 22
103.112.52.0/23 maxlen: 23
103.112.52.0/24 maxlen: 24
103.112.53.0/24 maxlen: 24
103.112.54.0/23 maxlen: 23
103.112.54.0/24 maxlen: 24
103.112.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3031 (0xbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Apr 2 19:27:56 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c5c3b-b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:90:09:1a:29:95:b0:2d:9f:5e:83:7c:f1:
c6:98:95:47:fb:7a:70:a6:7f:8a:0a:f8:8a:7b:78:
69:9b:13:05:08:68:27:6f:ac:70:f5:a7:ce:7f:8a:
ea:2f:bd:65:62:5c:cb:e7:80:1f:22:df:e2:d1:82:
b2:79:f0:03:ae:92:83:2f:34:25:f1:b7:3a:88:70:
34:d5:0c:57:55:28:60:38:5b:65:65:23:a5:21:e1:
85:54:2d:8e:bd:e5:06:e2:7c:6d:a7:96:f1:ce:a5:
16:2a:65:4c:96:24:60:01:d0:5d:3e:14:91:ec:73:
9e:9a:21:e3:13:b8:da:ad:4c:51:0a:43:c2:cd:c8:
04:d8:02:49:93:26:f5:cf:ee:47:28:d6:d6:77:bf:
0a:cf:2a:1b:1d:ea:84:27:58:73:e7:06:10:7c:ef:
c4:75:a1:1b:7d:f0:22:08:83:48:4b:4e:ad:1a:d2:
3e:73:0f:fa:17:c3:ce:18:e4:bd:11:b7:2a:53:76:
66:b2:c4:dd:9b:b3:36:6b:51:4e:69:ef:9b:b3:75:
c2:82:8c:28:69:52:fe:db:d1:85:6b:1e:81:45:f9:
4d:99:3a:ee:d8:a1:3c:1a:5b:06:d0:6a:d0:ce:2c:
d2:4c:68:2b:34:5d:20:0e:e9:fd:a1:bf:53:c5:f2:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:3F:F4:2B:D7:13:C8:67:C0:E0:45:B4:7C:43:93:79:8A:F5:75
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.52.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c3:26:60:f6:da:bb:73:20:a7:4a:8c:7e:26:d1:ee:e2:d7:
cd:11:37:9c:44:08:7f:f5:56:57:60:f2:0d:94:62:1a:80:91:
a5:eb:6a:db:1b:aa:79:16:a4:25:10:4d:79:a6:32:af:e2:dd:
d8:42:b6:a0:0c:b9:3f:4b:29:4e:6c:00:21:38:5b:09:bd:b0:
76:e3:a4:4f:4e:70:d9:f8:5b:7d:c2:96:10:d8:b7:e3:da:28:
be:8f:66:fe:07:12:97:10:e3:61:8c:e5:f3:d6:ce:ce:ae:e7:
fd:f8:f9:0f:86:ba:99:c1:94:75:74:5e:ef:ab:be:97:0c:c1:
c5:d3:cc:13:cd:44:cc:66:3b:1d:fa:a5:5f:9e:a7:56:7b:25:
74:9c:e8:b6:ea:8d:eb:dd:cf:a8:ae:df:d3:c5:b0:d9:c7:66:
a9:b9:b1:c9:b9:f6:ef:b5:2a:99:7f:70:0b:6e:f8:3c:9e:72:
52:51:bb:e3:48:a2:77:b9:f8:0e:7a:40:3a:0e:8d:a2:0f:4d:
6b:5a:47:88:af:e3:76:03:4a:6b:24:76:bb:55:33:17:a7:48:
d4:83:e4:6e:34:9d:e5:2e:10:c8:d3:df:dc:35:c8:70:14:24:
c1:f7:88:c9:78:8e:21:e4:ec:4c:c5:22:2a:86:1d:44:c1:41:
61:0d:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:50:47 2025 by rpki-client