Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/038457CEA3A011EEBE44947FC4F9AE02.roa
File: 038457CEA3A011EEBE44947FC4F9AE02.roa (raw, json)
Hash identifier: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=
Subject key identifier: E9:09:ED:CA:DF:FE:4C:D4:62:C0:25:CB:3B:66:09:E6:E9:60:01:D2
Certificate issuer: /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial: CC
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/038457CEA3A011EEBE44947FC4F9AE02.roa
Signing time: Fri 03 Jan 2025 04:07:39 +0000
ROA not before: Fri 03 Jan 2025 04:07:39 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 56094
IP address blocks: 45.127.168.0/22 maxlen: 24
103.196.112.0/22 maxlen: 24
182.54.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Validity
Not Before: Jan 3 04:07:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6777628b-cba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:4b:3a:eb:f2:80:02:b6:e2:59:6c:3e:6a:
bf:87:67:0b:bd:e1:8e:fa:c8:27:2e:a7:c9:7e:1c:
92:83:1b:ab:63:61:30:14:50:ec:8e:b4:39:2c:bc:
9b:5e:9a:7c:47:3b:ca:ed:5c:7f:60:1b:97:ea:4b:
00:7b:6c:c2:09:2e:03:13:a3:09:f7:71:97:be:2f:
bc:07:37:5f:24:a3:fb:38:8c:aa:7b:fb:b9:e0:e5:
cc:39:5f:35:6f:37:19:42:60:0d:64:3e:6b:9a:52:
a8:93:72:ab:d0:62:ef:94:de:da:a7:2f:80:a9:d0:
04:50:18:c7:bc:c3:3a:b7:7b:1f:b5:b3:41:3c:b6:
25:b5:96:f6:d0:3d:37:de:75:24:61:4d:05:9d:b3:
e4:43:d4:75:54:30:12:83:f0:64:cb:7f:94:65:e5:
8f:e1:82:1e:ae:be:2a:32:7e:b6:3f:ef:53:76:21:
c9:ab:36:8e:6e:03:a6:3e:d0:a3:1f:17:93:4a:61:
ab:ba:e9:3c:1c:f8:d9:c4:68:c1:b3:4c:c9:10:02:
db:74:05:a4:6a:ab:13:73:43:bc:c3:5e:cd:a9:5a:
56:f1:15:64:e1:8b:43:97:b8:8c:56:3a:49:8c:81:
93:9f:20:09:ea:7c:5d:51:20:0a:43:19:9c:14:c2:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:ED:CA:DF:FE:4C:D4:62:C0:25:CB:3B:66:09:E6:E9:60:01:D2
X509v3 Authority Key Identifier:
keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/038457CEA3A011EEBE44947FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.168.0/22
103.196.112.0/22
182.54.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:69:25:70:e7:ab:2e:b5:02:66:e7:84:c0:fc:2b:8e:7d:33:
4b:87:53:ff:37:d4:c4:21:d5:71:0f:79:e4:b0:43:65:ce:d9:
73:53:a6:40:4e:78:cf:be:94:cf:5d:89:8c:08:4f:38:2b:e1:
af:99:c5:15:6e:10:9d:28:eb:50:24:72:64:22:fc:24:73:bc:
5c:68:65:a3:a2:08:9e:2b:35:5d:55:5b:03:44:48:f1:b8:e1:
0c:b4:78:f9:1e:ba:33:38:1d:f3:25:3b:b1:d6:cb:7e:f1:b9:
1f:14:fe:fd:cd:8e:b6:60:54:89:1f:44:ab:d3:51:ef:9a:9b:
94:ee:74:65:51:3d:0c:a1:9a:06:e9:9c:a9:7f:fd:4d:a7:0e:
98:d4:ea:1d:72:87:fb:bc:a5:24:73:28:a9:bf:52:e8:de:34:
c0:53:e0:ce:08:aa:31:c8:7e:33:9b:86:5b:b6:1d:2e:14:8a:
bc:7b:7c:98:d7:8f:2b:03:ec:a5:f7:6b:3d:3a:c6:cf:74:b1:
63:0d:a7:c3:ca:1d:40:e1:e2:15:48:e6:11:e3:ec:61:87:10:
64:af:dd:e9:73:5e:4f:c6:e5:31:07:cc:6b:92:f5:ec:84:9a:
3f:93:e6:53:71:70:37:5e:3d:8d:df:eb:a3:3d:27:9c:bb:88:
2d:fd:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:38:30 2025 by rpki-client