Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa
File: AAA0388003B611EB9ECABC65C4F9AE02.roa (raw, json)
Hash identifier: A9yNye9tPVGcVtPS9A6mmrRx4z8jgHRmd9Ovr7aiBp4=
Subject key identifier: 52:79:0D:E5:22:01:9A:CA:46:FC:14:ED:3F:E5:EF:AC:1B:83:B5:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9498
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa
Signing time: Mon 15 Jul 2024 11:16:49 +0000
ROA not before: Mon 15 Jul 2024 11:16:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59185
IP address blocks: 45.119.112.0/22 maxlen: 24
103.59.152.0/22 maxlen: 24
103.77.202.0/23 maxlen: 24
2001:df4:5a80::/48 maxlen: 48
2401:a360::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38040 (0x9498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 15 11:16:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66950520-bd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:33:d9:c0:60:fe:92:27:d9:8b:51:1a:ef:
8e:52:4c:88:3e:66:62:68:d8:61:ac:5d:b3:c5:4c:
e2:03:f6:0d:81:5b:62:c1:bf:f0:e1:9f:2a:f4:c6:
98:4c:c6:90:04:cb:cf:98:14:3f:82:5b:eb:79:c4:
64:63:8f:a0:bc:a1:3b:5b:c9:60:06:ef:30:41:f5:
ec:32:7b:cd:f7:c1:50:51:cf:df:16:13:9f:41:8c:
59:9b:3a:d2:1f:a7:ab:6e:25:97:35:c0:04:43:7b:
87:09:c3:92:08:22:4c:15:f7:f0:33:8d:e4:d4:f8:
ed:ea:f7:8e:1d:d5:35:6c:65:5c:cb:33:0c:bd:e8:
2a:14:e9:24:c3:d6:ea:25:af:f6:ed:fc:af:3d:38:
45:95:cb:ab:11:55:2e:2d:56:03:99:ab:f8:a3:a1:
bc:c9:31:0b:84:1a:61:43:70:13:4d:17:c2:89:bd:
b1:94:7b:63:e5:6e:68:18:9a:87:ae:ee:d3:88:90:
e7:25:14:f0:d0:8e:a6:ea:0f:b8:b8:c4:f8:4a:cd:
64:65:cb:db:95:e8:49:35:04:3d:2d:af:28:18:50:
96:9f:0a:9e:b4:8c:40:b0:07:a5:30:70:65:ec:35:
8d:63:9e:51:3c:64:b9:85:f1:c9:10:75:ab:ab:cc:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:0D:E5:22:01:9A:CA:46:FC:14:ED:3F:E5:EF:AC:1B:83:B5:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.112.0/22
103.59.152.0/22
103.77.202.0/23
IPv6:
2001:df4:5a80::/48
2401:a360::/32
Signature Algorithm: sha256WithRSAEncryption
7b:8c:63:88:cd:94:ae:12:d8:64:b6:3c:f5:5e:0a:c8:bd:23:
42:51:eb:18:49:af:dc:40:e7:ca:69:6a:fc:31:57:98:c0:a7:
82:f4:2c:a6:de:1e:90:fc:c3:24:2d:0f:43:68:c9:3d:81:a0:
49:f9:c0:31:f3:8d:69:73:c1:dd:3e:36:0a:61:12:f9:ec:ac:
4c:63:2e:13:4d:4a:0b:46:bc:0b:5e:7b:0b:fe:b8:77:7f:81:
c5:2e:aa:fc:55:9c:b3:9c:c6:a6:32:bf:be:d5:a1:a4:32:f8:
a9:77:13:3b:17:2c:cf:86:df:3f:ee:5a:6a:11:9d:ea:a9:38:
89:94:c6:a8:3b:55:18:a8:bf:7d:38:f4:b8:bc:49:8c:4e:ac:
97:8a:8a:42:48:01:39:a3:6c:07:9d:43:e9:e1:63:15:8a:ac:
0e:b6:23:90:11:a2:81:72:eb:47:5c:22:b4:a3:c8:e4:98:53:
66:a3:f5:63:87:e4:e2:a8:ea:04:40:99:1e:cc:36:34:31:31:
97:94:b7:b5:80:dc:4e:e0:01:d2:d4:d5:bf:c8:f7:dc:42:73:
bc:18:9f:43:46:33:4e:c4:ed:7e:01:f1:d6:79:ad:99:e9:94:
e9:cb:e4:d0:9b:4b:31:be:a2:fb:01:2e:8e:3a:23:a9:b3:f8:
74:53:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:47 2025 by rpki-client