Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa
File: AB9A3F46135211EB83A5A869C4F9AE02.roa (raw, json)
Hash identifier: 1TJJ9TxJWi7wnEGMOxXiwcAZ23eOY7mFMgZfaQA6EKg=
Subject key identifier: 20:DC:D8:17:6D:98:A7:E7:15:E9:C5:C8:A8:1D:3A:EB:13:66:75:9F
Certificate issuer: /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial: 06DF
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa
Signing time: Tue 16 Jul 2024 22:40:21 +0000
ROA not before: Tue 16 Jul 2024 22:40:21 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135356
IP address blocks: 45.251.108.0/24 maxlen: 24
45.251.109.0/24 maxlen: 24
45.251.110.0/24 maxlen: 24
45.251.111.0/24 maxlen: 24
103.220.76.0/24 maxlen: 24
103.220.77.0/24 maxlen: 24
103.220.78.0/24 maxlen: 24
103.220.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Validity
Not Before: Jul 16 22:40:21 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6696f6d5-f59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:bc:d7:b3:55:ac:3a:8b:af:b0:3b:f7:f4:
c7:27:c9:3b:ad:50:5a:dd:45:00:03:f3:d4:67:26:
2e:f4:37:6a:52:40:b5:e2:e4:11:39:32:36:57:1e:
be:35:ab:e7:45:9d:2f:87:73:57:30:ca:24:89:60:
b7:9c:07:d4:50:35:e0:01:45:25:12:40:fb:bc:17:
ac:33:df:af:b8:19:79:ee:cd:8f:ee:48:f3:23:bb:
b7:b5:22:54:00:e2:b5:52:52:68:0c:3e:8d:57:ce:
80:0e:0f:58:03:ce:6e:33:f8:0c:82:ae:2f:df:b5:
17:e8:54:60:8d:a2:e6:57:ea:45:d3:cd:e6:4a:6c:
c6:1c:7f:be:3a:38:8e:1f:b3:d8:48:53:5e:b7:31:
98:76:d1:4b:20:0c:ec:5f:3f:40:23:a7:5a:52:40:
c7:fb:49:52:5d:5d:81:ea:d7:2d:af:66:b3:12:f5:
b9:be:5d:72:72:3d:97:91:cc:60:f3:42:63:21:4f:
cc:c1:ee:c2:6f:27:5f:8e:6d:75:37:41:c4:fe:d5:
c5:d5:0e:00:24:6e:ac:a6:ae:fe:cb:42:48:16:66:
58:df:06:62:af:7d:ae:fd:fa:3d:37:b7:75:ec:ab:
31:5e:81:dd:a3:92:5c:65:b0:05:e6:a3:cd:ee:b5:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:D8:17:6D:98:A7:E7:15:E9:C5:C8:A8:1D:3A:EB:13:66:75:9F
X509v3 Authority Key Identifier:
keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.108.0/22
103.220.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ef:58:d7:b2:ae:1f:71:60:f6:30:7c:be:89:a5:0d:2a:d9:
a1:88:57:5b:09:b6:bc:e1:20:6b:e0:17:1e:f7:0c:b9:f6:18:
00:15:95:b2:85:95:2e:73:52:aa:f9:04:ed:4f:8b:16:f7:ac:
b4:02:40:a1:e5:ab:26:3b:c5:aa:50:b8:b3:9f:cb:1c:bc:f6:
fc:a8:3c:e4:74:34:48:eb:f1:db:de:f8:25:f4:fe:f9:32:99:
4e:ab:9a:ad:65:d9:18:a1:a8:63:99:40:78:a4:d5:eb:b4:9e:
ff:04:d7:cf:47:58:f0:90:73:06:1d:58:35:24:6c:84:20:a7:
c2:53:5b:b9:7c:62:18:90:78:77:98:ae:3a:56:9d:b2:c0:87:
f7:3c:e2:fa:31:1e:5b:7f:a7:cd:50:b9:68:c3:5f:e2:4f:e6:
95:4c:17:de:bd:9d:37:6b:97:42:71:1d:e1:0d:d7:f7:2e:cf:
a0:c2:a7:c5:97:08:d9:f7:5e:60:f3:10:22:b2:8e:cb:3e:33:
cd:3e:35:bf:84:b6:fd:ba:66:f0:c2:73:6d:18:07:ad:c1:43:
32:71:08:97:d4:04:42:4a:09:0e:e9:0d:7b:96:41:62:5e:82:
04:5a:de:0a:4d:fd:58:8f:9b:d8:89:6c:b2:cb:ed:93:e5:fc:
c4:91:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:07:07 2025 by rpki-client