Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa
File: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (raw, json)
Hash identifier: YOnwHdL+VM4WZZwYTJ66mt2t+UeBiT+rfThROtawpHU=
Subject key identifier: D3:48:04:F9:89:54:1B:4F:45:DB:BD:E3:AB:FB:A0:F6:75:4D:5E:55
Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
Certificate serial: 1978
Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa
Signing time: Tue 02 Jul 2024 17:03:56 +0000
ROA not before: Tue 02 Jul 2024 17:03:56 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 133450
IP address blocks: 103.94.128.0/22 maxlen: 22
103.94.128.0/23 maxlen: 23
103.94.128.0/24 maxlen: 24
103.94.129.0/24 maxlen: 24
103.94.130.0/23 maxlen: 23
103.94.130.0/24 maxlen: 24
103.94.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6520 (0x1978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
Validity
Not Before: Jul 2 17:03:56 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668432fb-0866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:24:b9:fa:09:83:f5:8a:7d:b7:50:e0:6d:
c4:b2:31:f1:8e:43:97:c8:27:14:d9:9f:22:eb:93:
ac:b5:cd:be:03:ed:2d:9d:fa:12:3f:b9:f9:34:d5:
3c:15:dd:98:27:72:3b:90:1b:fb:c5:65:14:99:d9:
2c:c1:71:43:3c:0d:b2:0c:6c:e7:44:96:a5:46:65:
b6:34:9b:7e:65:17:94:28:bf:74:76:eb:34:f8:46:
1a:4e:01:48:cf:93:03:49:ed:6a:14:77:7b:f8:74:
16:31:48:fc:ab:3b:1e:87:91:79:7c:a1:36:c2:e7:
1c:29:39:ce:53:b3:b5:11:c4:20:bf:3e:33:44:eb:
2c:fa:19:2b:db:7e:0c:12:0c:78:23:ae:d7:48:bb:
f7:1a:97:e0:71:43:7e:2f:50:08:7c:d6:8e:99:9d:
ac:eb:9d:18:e3:ff:e1:92:8f:c4:4e:2e:13:69:4e:
41:ff:e1:92:4a:84:3d:86:51:26:ce:a9:d4:06:0f:
71:b3:56:f7:7a:e9:09:d9:1e:a6:1e:2f:02:9c:e0:
49:a4:a1:db:fd:32:9c:3e:e0:bf:ac:c5:4d:0a:fb:
a1:2b:2a:1d:1f:d0:b6:ef:95:f5:7f:2f:39:b5:ab:
22:9e:b5:bf:60:e4:71:1e:d6:12:76:40:72:13:c7:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:04:F9:89:54:1B:4F:45:DB:BD:E3:AB:FB:A0:F6:75:4D:5E:55
X509v3 Authority Key Identifier:
keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.128.0/22
Signature Algorithm: sha256WithRSAEncryption
93:af:f6:62:17:f8:8e:99:d7:c2:cc:80:19:94:39:ff:12:45:
21:3a:0c:ce:75:8d:81:cf:3a:ee:95:d1:5d:a5:54:6d:20:8a:
fb:06:9c:58:33:21:39:77:21:98:df:01:70:63:e2:0a:c6:ef:
8b:eb:de:b2:86:d5:c4:7e:e7:02:d0:d6:f9:74:00:fa:bf:de:
b3:ad:3a:8c:17:38:10:96:93:5e:6a:d2:3d:6e:47:6c:b7:9d:
c9:ff:95:b6:8e:0a:32:d4:b0:07:ce:1e:b2:35:b1:ae:21:1f:
68:19:89:4e:39:5b:b7:9f:1d:2d:e0:9f:8f:2f:a9:0c:40:cf:
6e:00:fd:83:48:01:18:bf:26:1d:8b:a4:02:67:0e:ad:b7:38:
0b:8b:8d:fd:a6:a0:0f:7e:bd:8d:fa:f2:f7:65:27:c5:d2:e5:
ca:e8:44:da:70:57:41:9e:2a:46:b4:53:1c:b9:7e:a7:5f:7f:
ce:c9:ae:76:c4:8f:f3:ab:2c:10:3f:d5:c3:87:d1:84:ab:5c:
6c:18:0a:f1:fd:fd:f0:e0:5b:23:f3:61:50:cc:b1:d4:c8:fc:
f9:33:c2:fd:a1:e6:31:79:76:c6:5c:18:c5:49:7a:26:38:f6:
07:10:5c:94:bc:96:0e:0a:21:b5:f2:4a:a3:0a:3c:09:b2:14:
55:f4:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:24 2025 by rpki-client