Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa
File: 046B33A4431C11EE8DDA391AC4F9AE02.roa (raw, json)
Hash identifier: wQI5YxsE/Ugf6uses1V+/cxJDgapH749N4ib0nvozl8=
Subject key identifier: 8D:4F:D3:FC:4B:8E:42:69:25:8D:DA:FC:C2:E4:0B:87:FD:49:E8:AE
Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial: 78
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa
Signing time: Thu 21 Dec 2023 06:18:16 +0000
ROA not before: Thu 21 Dec 2023 06:18:16 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 10118
IP address blocks: 117.103.144.0/20 maxlen: 20
117.103.144.0/20 maxlen: 24
117.103.152.0/23 maxlen: 23
117.103.156.0/24 maxlen: 24
117.103.157.0/24 maxlen: 24
117.103.158.0/24 maxlen: 24
117.103.159.0/24 maxlen: 24
124.217.128.0/18 maxlen: 24
180.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Validity
Not Before: Dec 21 06:18:16 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6583d8a8-fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:45:11:b6:6b:2c:4f:03:40:d8:60:42:4a:
72:28:0b:9d:98:b9:ab:e7:24:d7:13:58:27:bd:97:
7b:bb:1f:f2:51:b6:16:a3:29:91:cd:a8:88:19:6d:
b4:ec:88:ea:4a:74:5b:d9:98:2e:46:30:de:a8:cd:
56:ce:19:af:3a:22:2d:15:11:62:21:f8:15:30:cd:
a1:19:44:6d:8f:27:71:bb:98:21:6d:dc:af:75:8b:
92:66:77:66:b7:a9:2c:9e:b9:66:f6:f8:88:71:ea:
6f:a4:96:d6:a4:bd:fc:c8:90:41:38:5c:b8:4c:43:
33:38:27:b8:1b:59:6e:42:6c:ef:99:97:dd:04:40:
c7:1c:14:64:ae:95:61:22:49:80:67:e6:c7:3f:7a:
ef:0e:83:d2:51:f1:fd:48:79:09:15:31:0b:40:1f:
d0:ae:5c:4e:93:43:75:c6:ee:a8:dd:d1:d6:fd:9a:
3a:d2:06:00:80:5c:d2:6a:0c:e9:c4:f2:39:43:a2:
14:f2:6a:17:40:64:ab:7f:da:d3:cb:0b:9e:cd:41:
63:6e:16:e0:0a:cb:a8:f8:a4:49:2d:68:57:52:70:
f3:43:04:6b:8b:b1:32:2d:41:e7:07:92:cb:50:ff:
f1:fe:cd:30:52:49:8c:05:00:73:16:5a:b2:61:29:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:D3:FC:4B:8E:42:69:25:8D:DA:FC:C2:E4:0B:87:FD:49:E8:AE
X509v3 Authority Key Identifier:
keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.103.144.0/20
124.217.128.0/18
180.188.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:91:74:aa:9b:8a:bf:05:d0:5a:bc:80:85:34:27:95:ab:11:
cd:24:19:d4:57:4f:d1:6e:50:fc:59:db:03:5e:57:34:dc:00:
8e:7d:21:32:85:0c:0a:d1:7b:7f:f0:cd:e7:db:16:47:c2:25:
37:9c:7a:6d:95:8a:2d:dc:68:fd:75:d8:2f:be:8b:cf:32:ff:
9c:ff:f4:3a:07:fd:1b:ff:27:8a:1c:ae:fa:27:b6:96:66:4f:
b2:30:41:c9:60:6e:27:c4:e9:53:37:b7:91:c2:f1:40:c5:80:
4a:90:58:ce:b8:b6:e8:0a:c8:0b:82:7d:cd:00:44:2d:81:82:
42:07:07:fc:2c:7d:3b:ea:f9:e1:5f:0c:eb:7e:64:09:d0:71:
2f:ae:f2:21:8e:76:8a:6d:3c:a5:46:8e:1c:0c:ee:8e:46:76:
9f:4b:36:a9:53:5f:5a:e8:25:97:72:59:68:2f:98:9c:6e:f7:
de:5d:e6:d7:76:fe:24:68:d1:ea:b8:80:0a:e4:17:1c:f5:0b:
a1:f9:b6:58:34:17:d7:da:5b:82:23:9a:09:89:89:06:95:07:
85:a8:f2:96:52:81:30:f6:07:c5:1d:16:81:4c:ce:e2:22:af:
3a:48:0c:7f:b7:96:c3:da:be:2f:c8:e6:dc:34:2a:f4:e8:51:
14:86:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:08 2025 by rpki-client