Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
File: A460738A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: e2jdHLRqDUBHGF40rMA04colXTS/qUoiHdA5PcMpzNo=
Subject key identifier: DD:4F:86:C3:16:C3:E1:95:34:86:78:30:5D:79:3B:5E:59:E7:1A:74
Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial: 0123
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
Signing time: Thu 07 Nov 2024 16:19:02 +0000
ROA not before: Thu 07 Nov 2024 16:19:02 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132280
IP address blocks: 45.250.176.0/22 maxlen: 22
45.250.176.0/24 maxlen: 24
103.14.8.0/24 maxlen: 24
119.110.192.0/18 maxlen: 19
119.110.192.0/21 maxlen: 22
119.110.196.0/24 maxlen: 24
119.110.197.0/24 maxlen: 24
119.110.198.0/24 maxlen: 24
119.110.199.0/24 maxlen: 24
119.110.200.0/21 maxlen: 22
119.110.201.0/24 maxlen: 24
119.110.208.0/21 maxlen: 22
119.110.208.0/24 maxlen: 24
119.110.215.0/24 maxlen: 24
119.110.216.0/21 maxlen: 22
119.110.220.0/24 maxlen: 24
119.110.223.0/24 maxlen: 24
119.110.224.0/21 maxlen: 22
119.110.228.0/24 maxlen: 24
119.110.232.0/21 maxlen: 22
119.110.233.0/24 maxlen: 24
119.110.236.0/22 maxlen: 23
119.110.240.0/21 maxlen: 22
119.110.246.0/24 maxlen: 24
119.110.248.0/21 maxlen: 22
119.110.248.0/23 maxlen: 23
119.110.252.0/24 maxlen: 24
119.110.254.0/24 maxlen: 24
119.110.255.0/24 maxlen: 24
2400:6280:4::/48 maxlen: 48
2400:6280:5::/48 maxlen: 48
2400:6280:6::/48 maxlen: 48
2400:6280:7::/48 maxlen: 48
2400:6280:8::/48 maxlen: 48
2400:6280:9::/48 maxlen: 48
2400:6280:a::/48 maxlen: 48
2400:6280:15::/48 maxlen: 48
2400:6280:16::/48 maxlen: 48
2400:6280:17::/48 maxlen: 48
2400:6280:43::/48 maxlen: 48
2400:6280:87::/48 maxlen: 48
2400:6280:96::/48 maxlen: 48
2400:6280:129::/48 maxlen: 48
2400:6280:13c::/48 maxlen: 48
2400:6280:140::/48 maxlen: 48
2400:6280:144::/48 maxlen: 48
2400:6280:148::/48 maxlen: 48
2400:6280:149::/48 maxlen: 48
2400:6280:150::/48 maxlen: 48
2400:6280:155::/48 maxlen: 48
2400:6280:158::/48 maxlen: 48
2400:6280:178::/48 maxlen: 48
2400:6280:6280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Validity
Not Before: Nov 7 16:19:02 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=672ce876-27fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:f5:ed:8b:80:82:9f:d9:37:2f:45:06:cc:
0f:64:ec:f5:94:9f:34:02:6c:9b:3f:7d:80:56:db:
5a:c2:14:9b:bb:cb:ef:24:f4:05:e4:be:c0:fb:62:
e9:6d:46:dd:47:4d:ce:b3:2f:2c:59:87:f7:ec:a4:
c7:a2:9e:3e:d6:bc:39:c1:52:3e:6c:26:ee:da:6c:
fc:9f:ef:e6:6c:65:22:c7:9f:de:a0:88:6c:b0:63:
66:19:b0:30:dd:87:62:8d:9d:87:39:b9:11:82:09:
d5:5d:fb:0a:30:d1:8f:c3:ac:6d:f8:80:d9:9d:f6:
38:56:01:8b:c2:67:00:47:f6:39:eb:c0:dd:6c:f0:
68:d5:b3:e7:4b:49:49:77:b2:0e:99:b7:0d:fb:69:
88:5f:d1:3c:7d:e9:a3:df:70:15:ef:4a:bd:21:64:
54:8f:c6:09:47:bd:4c:83:dd:d4:36:cd:f5:59:b0:
77:14:71:55:ae:e5:93:c9:3d:d5:f1:a5:17:9b:5d:
45:f9:e8:f2:1b:33:92:83:6c:68:58:0b:68:a8:d4:
92:6e:41:b9:bd:72:23:2f:d9:8c:54:65:5f:03:59:
7e:aa:47:b5:d0:02:06:42:4b:82:92:5f:25:b9:be:
4b:56:b6:43:65:60:68:84:f5:07:5b:f2:2c:2f:20:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:86:C3:16:C3:E1:95:34:86:78:30:5D:79:3B:5E:59:E7:1A:74
X509v3 Authority Key Identifier:
keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.176.0/22
103.14.8.0/24
119.110.192.0/18
IPv6:
2400:6280:4::-2400:6280:a:ffff:ffff:ffff:ffff:ffff
2400:6280:15::-2400:6280:17:ffff:ffff:ffff:ffff:ffff
2400:6280:43::/48
2400:6280:87::/48
2400:6280:96::/48
2400:6280:129::/48
2400:6280:13c::/48
2400:6280:140::/48
2400:6280:144::/48
2400:6280:148::/47
2400:6280:150::/48
2400:6280:155::/48
2400:6280:158::/48
2400:6280:178::/48
2400:6280:6280::/48
Signature Algorithm: sha256WithRSAEncryption
af:a1:cf:aa:a1:ba:a0:ee:c1:16:ef:86:0c:2e:5c:70:3e:0d:
39:82:42:95:9d:80:c2:83:71:d7:a3:21:82:ca:47:ad:34:1e:
6c:7c:ce:39:de:36:26:a4:7b:30:e3:42:c6:89:11:87:a4:23:
33:59:65:ad:96:37:86:22:21:51:8c:b8:9e:9e:8f:c7:c0:c2:
48:49:96:4a:2d:96:91:e7:d9:9e:f1:af:9e:ef:fb:49:fa:fa:
36:15:bb:dd:9c:76:2c:f7:ab:82:ce:0c:a6:8d:12:02:4c:50:
e8:17:b0:3c:db:ed:37:88:04:b6:eb:fd:60:19:9b:8a:fc:51:
8f:53:4d:34:a8:d0:9e:40:56:07:36:b8:15:3e:92:bb:62:da:
4a:59:79:9c:0a:02:fd:2f:3b:0c:39:a7:de:dc:e7:56:e9:bc:
dd:43:e8:df:55:12:f1:23:78:73:4b:fd:12:25:d5:b2:c8:6a:
96:c1:c7:59:0a:72:c8:1f:55:be:64:15:91:75:35:a9:e8:04:
ba:e2:f3:a6:fd:72:b7:b1:61:24:3c:90:63:ba:fd:05:06:b8:
1a:1e:11:5b:b5:77:f7:44:60:66:fd:d1:9c:a8:bf:bd:01:c6:
1c:a2:6a:29:ee:89:57:bf:0d:83:27:b0:23:55:ce:ff:6b:c4:
98:29:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:44 2025 by rpki-client