Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa
File: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (raw, json)
Hash identifier: +AY4f5uhDa+iIwRiDR23i6XlDUBAKMl99YAiHZiRwOM=
Subject key identifier: 48:C6:63:32:28:57:2B:73:D9:76:E1:7A:43:A9:CD:21:E3:32:CD:C9
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0A77
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa
Signing time: Wed 24 Jan 2024 20:17:58 +0000
ROA not before: Wed 24 Jan 2024 20:17:58 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 56028
IP address blocks: 103.19.4.0/22 maxlen: 22
103.19.4.0/24 maxlen: 24
103.19.5.0/24 maxlen: 24
103.19.6.0/24 maxlen: 24
103.19.7.0/24 maxlen: 24
114.31.212.0/22 maxlen: 22
114.31.212.0/24 maxlen: 24
114.31.213.0/24 maxlen: 24
114.31.214.0/24 maxlen: 24
114.31.215.0/24 maxlen: 24
119.160.224.0/21 maxlen: 24
163.47.232.0/22 maxlen: 22
163.47.232.0/24 maxlen: 24
163.47.233.0/24 maxlen: 24
163.47.234.0/24 maxlen: 24
163.47.235.0/24 maxlen: 24
2406:1a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Validity
Not Before: Jan 24 20:17:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b17076-7c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:4f:5f:dc:85:de:2b:65:78:fa:c7:41:2c:
7a:71:e6:bc:24:d7:18:ed:40:f6:01:f3:aa:54:05:
d2:c5:37:b2:75:00:66:7d:25:2d:3b:c2:b0:22:ee:
69:05:b6:97:d4:66:e7:87:f6:06:88:4b:5e:ff:19:
0b:a1:de:34:2f:51:f8:70:7f:0d:2a:e9:7d:03:3f:
d1:d6:5c:76:59:75:43:4a:bd:fc:17:2a:c8:7a:d8:
0f:cb:e4:8f:d5:82:49:5e:ae:6c:b4:65:c8:be:72:
c5:ac:90:ed:93:7c:e4:e0:06:63:71:2c:f2:2f:d3:
3a:c0:9a:ba:4f:0c:88:5e:86:67:e7:8b:00:56:84:
4d:53:4f:35:05:17:22:3e:48:d1:95:ea:bf:72:2d:
6b:8d:0b:f5:49:25:6b:1b:f3:2d:32:8f:85:f5:58:
c7:46:4b:ec:85:3a:a8:ed:5c:f7:fe:d6:95:93:95:
0b:90:96:47:8b:da:46:f9:0e:5e:cc:ad:1e:4c:96:
94:dd:6d:23:72:b6:49:e8:3b:6d:91:0d:09:8b:f2:
d9:72:08:32:1e:69:3c:7b:2d:15:53:23:ad:d9:1a:
33:9f:fb:92:a6:e8:d6:c5:53:1b:c0:4f:04:c8:86:
39:11:0f:e0:73:53:57:60:3b:0e:57:45:c5:5b:6f:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:63:32:28:57:2B:73:D9:76:E1:7A:43:A9:CD:21:E3:32:CD:C9
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.4.0/22
114.31.212.0/22
119.160.224.0/21
163.47.232.0/22
IPv6:
2406:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
89:1c:b0:ff:75:14:4f:be:89:2f:58:04:78:25:52:b4:15:0c:
b1:3d:3a:bb:59:58:80:c1:aa:1a:26:9e:85:e0:01:c3:4e:73:
ed:1a:3c:d5:5c:34:9c:02:3f:e8:36:88:75:30:a8:22:dd:c7:
5b:d9:f2:a6:90:e3:95:9b:f9:64:94:52:04:e0:e1:bc:6d:23:
48:6d:cb:e0:4a:72:58:19:40:4c:cd:18:95:b3:68:bd:b1:3f:
93:8c:b9:2c:17:1c:a0:93:79:6f:28:04:12:84:4b:b9:58:b6:
e5:ce:23:3d:da:cf:04:8d:73:e9:11:7f:ba:a8:70:73:36:6f:
e6:a0:b3:64:42:6d:2f:ba:b8:c9:b3:6b:af:2b:80:9b:88:72:
3d:c6:08:a8:4f:15:c4:98:d9:97:d8:16:c6:2f:ce:f2:09:f1:
aa:b7:e4:92:74:f3:f7:34:c7:dc:ee:01:1d:1d:6f:c0:a3:eb:
5c:88:2c:9f:de:5a:df:dc:50:92:ef:0a:0b:1d:ed:2d:1d:44:
c8:cc:cb:07:a0:73:4b:f6:19:5a:79:2a:1f:a2:59:cc:f6:95:
2d:da:13:d8:2c:67:57:50:68:25:9d:21:3b:a5:63:a1:d4:76:
60:44:8e:1b:02:1b:6f:09:bc:85:eb:db:70:7b:82:da:d0:ab:
74:b4:10:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:07 2025 by rpki-client