Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa
File: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (raw, json)
Hash identifier: /kSK+t6Uui5gY+E46gDVyS5fJCRJ3UL5yOuwfJ+DnWw=
Subject key identifier: D9:3A:BF:F4:F1:36:92:D8:51:17:60:66:88:EB:E9:AB:93:35:BC:93
Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
Certificate serial: 2C83
Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa
Signing time: Thu 08 Feb 2024 16:02:14 +0000
ROA not before: Thu 08 Feb 2024 16:02:14 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132588
IP address blocks: 58.84.48.0/22 maxlen: 22
58.84.48.0/24 maxlen: 24
58.84.49.0/24 maxlen: 24
58.84.50.0/24 maxlen: 24
58.84.51.0/24 maxlen: 24
103.240.152.0/22 maxlen: 22
103.240.152.0/24 maxlen: 24
103.240.153.0/24 maxlen: 24
103.240.154.0/24 maxlen: 24
103.240.155.0/24 maxlen: 24
103.254.0.0/24 maxlen: 24
103.254.1.0/24 maxlen: 24
103.254.2.0/24 maxlen: 24
103.254.3.0/24 maxlen: 24
116.204.136.0/22 maxlen: 22
116.204.136.0/24 maxlen: 24
116.204.137.0/24 maxlen: 24
116.204.138.0/24 maxlen: 24
116.204.139.0/24 maxlen: 24
2406:2300::/32 maxlen: 32
2407:c100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11395 (0x2c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
Validity
Not Before: Feb 8 16:02:14 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c4fb05-8a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:c9:5d:94:d3:7a:74:6c:2f:bf:ca:fd:8b:
3d:83:a5:e6:42:d3:97:00:33:09:7a:25:db:83:96:
a0:b4:6c:c4:f3:b0:e8:49:75:ec:68:93:b0:5a:b9:
15:34:99:85:38:5d:89:a7:e9:e8:b9:db:4c:98:22:
7f:24:66:ca:57:5e:5f:3e:18:f4:d4:eb:56:1e:85:
a3:60:ac:b8:de:0f:49:9e:66:0e:7c:59:cc:19:56:
2f:9f:fa:25:5e:88:0e:cb:3b:72:ae:6a:7a:66:6f:
34:83:b9:0d:70:14:0a:09:19:28:2b:3a:72:a4:2b:
97:ac:a7:7c:21:e5:44:89:d4:ba:5a:4d:45:3f:04:
29:e3:60:9b:c5:c9:09:b5:c1:5b:a6:5f:d9:15:5f:
a0:c7:d6:e2:ca:d5:70:75:44:55:59:25:8d:5a:74:
92:4b:6a:ad:ae:58:5d:f0:e8:77:d4:d6:85:31:87:
c3:db:e5:71:d1:ac:bc:3c:4c:c9:59:c1:b6:45:49:
48:c2:02:7a:6e:51:25:1a:1d:9a:0a:07:fe:c2:42:
37:47:6f:d0:36:c3:89:3f:95:75:c1:63:92:d9:c7:
99:fe:8f:c2:9b:cb:9c:57:bb:97:d4:8a:b2:d1:2e:
5d:c1:a8:a7:3b:db:69:b9:84:6d:f2:54:cf:da:c1:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:BF:F4:F1:36:92:D8:51:17:60:66:88:EB:E9:AB:93:35:BC:93
X509v3 Authority Key Identifier:
keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.48.0/22
103.240.152.0/22
103.254.0.0/22
116.204.136.0/22
IPv6:
2406:2300::/32
2407:c100::/32
Signature Algorithm: sha256WithRSAEncryption
1b:4e:9a:c0:09:1f:f0:9f:0a:9f:8b:11:ae:98:f4:e2:82:8c:
0b:9a:c8:f4:5e:7c:27:03:72:fb:09:ff:11:8a:03:31:49:20:
24:41:01:ad:a6:1a:f6:94:f4:ad:00:18:c7:2c:13:45:cd:3f:
33:e5:13:81:49:5d:92:05:5b:8b:a9:3d:45:d7:ed:58:0d:e3:
62:52:79:43:a3:24:16:41:c8:6c:d4:d6:6e:5e:f8:a3:c8:83:
96:0c:38:70:56:0b:52:40:b7:8c:9d:cc:64:9b:9d:ac:cb:a4:
43:c2:3b:b7:ea:ac:9a:e6:4c:71:aa:90:42:81:fd:da:d3:dd:
2f:f1:d9:12:be:24:6c:cb:27:9b:b5:82:6a:dc:b3:e3:45:84:
24:c5:19:49:d6:fe:bf:cb:7d:f2:74:07:06:f2:40:01:eb:85:
49:c2:f5:1e:ae:98:bf:51:ed:77:f4:84:de:85:3a:3b:e5:32:
83:ad:34:38:c9:17:2b:61:e2:85:8b:1c:d3:d0:81:5e:61:23:
34:31:13:13:e8:02:96:f8:2c:6b:98:d0:3a:cd:38:3d:06:0a:
7f:df:01:c3:24:32:a8:2d:f4:dd:7b:13:a4:26:e4:d7:36:c5:
f2:5c:7a:87:e5:4f:5f:54:30:47:d7:0a:b5:ce:0e:1a:ac:69:
0c:2b:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:50:49 2025 by rpki-client