Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
File: 75AB676E747811EDA48E0D52C4F9AE02.roa (raw, json)
Hash identifier: Qn1WM06chi02gzUwTVrnXfMikD/uGjvyaRc+4AnXcGQ=
Subject key identifier: 59:57:29:5C:32:A2:F3:E8:AB:4E:46:03:A8:16:E1:9C:02:34:80:E6
Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial: 33EE
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
Signing time: Sat 02 Mar 2024 14:30:28 +0000
ROA not before: Sat 02 Mar 2024 14:30:28 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 17660
IP address blocks: 45.64.248.0/22 maxlen: 22
103.245.240.0/22 maxlen: 22
103.245.242.0/23 maxlen: 23
119.2.96.0/19 maxlen: 19
202.144.128.0/19 maxlen: 19
202.144.128.0/19 maxlen: 24
202.144.128.0/20 maxlen: 20
202.144.144.0/20 maxlen: 20
2405:d000::/32 maxlen: 32
2405:d000::/32 maxlen: 48
2405:d000:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13294 (0x33ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Validity
Not Before: Mar 2 14:30:28 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e33803-0ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:81:1f:ed:a1:5d:6d:18:66:77:6b:53:15:
74:ce:5f:4c:18:0f:d5:11:6c:0e:4c:f2:e7:07:f3:
eb:84:aa:2c:44:34:7d:89:6c:f4:b6:f1:4e:76:1e:
66:ba:42:1c:39:58:1d:cd:4b:85:44:4d:73:f6:62:
7d:6c:6c:2a:f5:78:0b:40:9e:dd:bb:b1:60:39:98:
f1:33:85:2d:16:e6:c2:9d:7f:a1:2e:b2:7e:52:aa:
07:c6:2b:33:19:f2:fb:3a:ee:25:c5:c4:b7:9d:ee:
f5:13:b6:b9:82:b9:c5:16:e3:ba:ae:22:87:83:88:
3b:6b:c1:ab:26:dc:bc:1e:39:17:31:03:cb:fe:df:
94:3a:51:b7:09:52:38:f8:fc:fa:25:b1:db:67:ff:
38:7f:d9:59:7c:24:47:ad:af:e9:ba:2b:2b:fc:2d:
40:3d:d4:5e:09:a9:e6:c5:db:c1:f2:48:66:19:7e:
5c:33:ad:3b:53:89:e9:60:4b:42:09:12:7b:f8:15:
c1:3c:fd:7e:2b:20:aa:ef:ec:57:53:b6:a2:6f:d8:
39:c3:b7:9c:09:75:24:96:b8:14:c5:10:3b:53:6f:
57:8e:82:89:7f:56:ab:7b:b5:ee:ae:bb:52:8f:ba:
a5:a3:2f:46:8b:f8:4e:a2:fb:6a:bb:d8:3f:72:85:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:29:5C:32:A2:F3:E8:AB:4E:46:03:A8:16:E1:9C:02:34:80:E6
X509v3 Authority Key Identifier:
keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.248.0/22
103.245.240.0/22
119.2.96.0/19
202.144.128.0/19
IPv6:
2405:d000::/32
Signature Algorithm: sha256WithRSAEncryption
ae:c4:6f:db:50:d7:92:27:7c:98:dd:f4:9b:02:82:81:8a:ee:
d5:8e:18:20:69:a4:e4:da:f7:8e:63:bf:ba:81:b8:dd:48:a3:
5c:6e:a6:82:98:f7:44:db:6a:45:90:b1:97:e0:6a:7b:fc:8f:
c5:56:f8:46:81:0c:5d:e2:80:2b:83:6b:09:37:5f:29:07:ad:
6a:c4:6d:ac:56:3a:b6:14:0a:c8:8c:3a:02:0d:26:e4:46:bb:
4e:ad:66:bc:f3:04:b9:a6:ae:8e:3c:a2:7c:ba:08:d0:66:98:
75:17:a3:b4:53:2f:0c:53:48:5e:14:ca:da:f7:12:c8:fb:db:
ff:58:a8:00:bd:04:1d:c4:3c:08:71:3d:03:0d:79:a0:1c:ad:
00:85:4e:ad:e8:02:a6:df:c9:32:64:05:8a:30:50:2c:68:42:
bd:33:4c:15:3b:3e:1a:ce:45:59:c5:40:b2:14:1e:1c:3f:58:
fd:81:a1:29:36:aa:90:2b:39:83:47:9c:c1:00:1c:e8:47:8f:
85:15:93:96:ab:37:01:5c:57:3e:5e:9e:e9:0c:9e:96:cc:55:
b9:74:ff:11:0a:b6:8e:58:57:d7:8c:1f:27:27:34:74:91:23:
a7:86:b2:60:bc:07:6b:84:fa:6c:56:08:51:47:8e:82:b1:25:
45:56:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:13 2025 by rpki-client