Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa
File: 315D1630DDD911EFBAA4D977C4F9AE02.roa (raw, json)
Hash identifier: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=
Subject key identifier: 30:CA:6F:E5:10:32:3A:9D:20:ED:50:A5:64:96:1A:2F:13:4E:E8:1C
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 09E4
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa
Signing time: Wed 29 Jan 2025 00:37:18 +0000
ROA not before: Wed 29 Jan 2025 00:37:18 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 24233
IP address blocks: 103.1.52.0/22 maxlen: 22
116.255.42.0/24 maxlen: 24
123.176.118.0/24 maxlen: 24
125.253.9.0/24 maxlen: 24
125.253.19.0/24 maxlen: 24
125.253.58.0/24 maxlen: 24
125.253.59.0/24 maxlen: 24
203.132.68.0/23 maxlen: 23
203.132.76.0/22 maxlen: 22
203.132.80.0/21 maxlen: 21
203.132.82.0/24 maxlen: 24
203.212.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Jan 29 00:37:18 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6799783e-12c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:92:02:77:53:6e:5d:05:59:e3:16:d4:31:
7a:af:6a:39:af:28:a5:8a:8e:bf:9e:a4:5f:ab:f5:
86:f9:c1:08:a1:a6:b6:a9:84:06:ae:dd:cd:43:f3:
67:b0:9e:c8:1a:0c:04:c3:46:d4:50:09:00:ae:11:
fc:f3:1a:54:2b:16:96:ca:9a:39:e7:fe:78:01:bc:
61:59:36:c7:22:fa:a5:4f:79:8a:21:ee:40:96:56:
67:29:20:cd:b2:e6:38:e6:c2:d8:44:6d:ed:53:03:
2f:73:3d:aa:81:da:16:aa:d0:d1:36:0c:ec:d4:ad:
0f:51:d8:b6:87:96:c7:28:d4:e0:52:e8:78:fe:52:
60:ab:8b:69:90:e8:c5:ed:90:e2:b2:b7:da:e7:2d:
52:e2:af:9c:d2:b6:f4:db:62:dc:47:c4:32:68:21:
62:bb:4e:10:73:8c:d1:d9:c7:56:33:db:1d:cb:ae:
94:30:2b:2d:ad:88:28:da:85:a2:fe:2c:7d:02:75:
c1:f6:04:ae:1b:17:7c:91:96:20:32:96:bc:0e:69:
b2:ba:77:a8:c4:a5:47:fb:04:97:7e:3f:f9:51:c4:
e7:3a:41:1b:5f:45:40:0d:67:c0:10:d8:0d:71:40:
f1:d5:dd:d3:8b:8e:af:2e:ce:9e:f1:35:0d:71:d8:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CA:6F:E5:10:32:3A:9D:20:ED:50:A5:64:96:1A:2F:13:4E:E8:1C
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.52.0/22
116.255.42.0/24
123.176.118.0/24
125.253.9.0/24
125.253.19.0/24
125.253.58.0/23
203.132.68.0/23
203.132.76.0-203.132.87.255
203.212.16.0/21
Signature Algorithm: sha256WithRSAEncryption
98:02:a8:06:95:24:a6:40:71:2d:24:30:f4:1e:73:d2:03:21:
0b:fa:2e:eb:ec:80:01:f5:a6:b1:3e:14:2d:f2:48:66:d8:28:
e0:d9:a7:91:48:2e:45:af:8c:fb:9c:22:06:8e:7a:95:00:f0:
e8:7a:5d:58:5e:88:b0:bf:08:9e:72:24:26:bd:8d:08:19:a6:
0c:69:f3:89:c4:9c:4f:16:2f:c4:ae:1d:69:20:3b:bb:2a:2d:
78:51:27:b0:a2:8f:ab:8e:cc:93:8b:26:c8:fd:dd:26:ed:ee:
0e:07:12:a1:f7:1f:05:74:eb:25:54:df:d1:92:97:ea:d8:69:
92:2e:1d:2d:ad:a0:db:ba:70:63:0d:a6:a1:fb:8d:62:33:16:
f8:19:55:88:57:22:aa:6a:b0:ce:59:c1:77:9c:ee:45:90:1d:
ee:8c:4b:8c:7b:4b:b5:29:fe:f0:6e:52:95:96:24:d8:e8:21:
71:fe:d7:94:af:7d:6b:98:13:cf:1e:be:31:84:6e:60:5c:de:
59:92:ad:03:df:a1:62:98:92:67:53:9d:7a:6c:37:5c:eb:a4:
14:9c:d7:7c:6c:27:0f:52:7b:a7:7b:ed:ec:a2:ea:97:5d:d2:
a8:89:0b:08:28:7c:d2:c1:e8:39:f6:9b:29:f9:b7:03:93:43:
b0:bc:ca:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:39 2025 by rpki-client