Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
File: 456D4CD41E0111ED858FE624C4F9AE02.roa (raw, json)
Hash identifier: tbj81kQSnZ+fi1HS4k6gB/DI74luAhMZ8j17YVGp26g=
Subject key identifier: 99:90:8F:C9:0C:54:C4:5F:B4:D2:43:1F:E5:95:FE:AA:79:86:52:B1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4565
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:30 +0000
ROA not before: Thu 05 Sep 2024 03:32:30 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135916
IP address blocks: 103.94.16.0/24 maxlen: 24
103.94.17.0/24 maxlen: 24
103.94.18.0/24 maxlen: 24
103.94.19.0/24 maxlen: 24
202.47.87.0/24 maxlen: 24
202.56.57.0/24 maxlen: 24
202.94.82.0/24 maxlen: 24
203.8.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17765 (0x4565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:30 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9264e-edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:04:be:04:30:f0:74:4a:b4:af:a2:b1:31:
75:4b:bc:f0:46:2c:31:96:17:46:cf:e6:5f:96:46:
a3:23:64:81:fd:01:26:cc:c7:ec:d3:4b:05:1f:00:
98:52:b2:ac:34:df:d3:10:8a:ca:1d:8f:2b:33:4d:
9b:89:a9:3f:40:9a:00:b3:87:d4:1a:1e:f0:be:48:
e2:ce:af:c0:8b:d4:9f:aa:2b:f6:9f:71:2b:f8:d7:
b3:72:b9:82:fb:da:85:b9:15:0c:6c:e2:d6:72:e0:
ed:91:36:4c:a6:a9:1b:74:a3:6c:f0:cc:7b:35:9f:
6d:3f:3e:33:1b:35:00:b4:dd:f3:13:4f:a6:b9:85:
d2:bd:15:59:4d:c2:a8:d2:0a:92:4b:a2:7b:71:c4:
89:d0:9c:b6:d7:3f:72:38:f2:16:04:3d:ca:f0:90:
ce:fe:57:89:14:b5:96:94:c4:11:07:63:22:4d:e7:
01:c2:14:a2:55:a3:27:a5:b8:21:ac:a3:b7:8f:5a:
26:1e:94:c1:5f:9d:12:46:32:4b:56:14:bf:12:d9:
b3:b1:2d:31:46:17:ef:e8:8f:b2:72:8b:74:45:c2:
90:09:ee:8e:35:21:ae:fd:61:04:cc:5a:88:4a:21:
2a:46:0c:78:b9:7f:e9:d8:23:4e:27:a6:fe:27:cc:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:8F:C9:0C:54:C4:5F:B4:D2:43:1F:E5:95:FE:AA:79:86:52:B1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.16.0/22
202.47.87.0/24
202.56.57.0/24
202.94.82.0/24
203.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d0:6b:73:fa:e8:e8:6f:0d:0b:9f:70:bf:61:28:2a:dd:bd:
fd:d2:ff:c3:14:25:5c:67:7b:94:88:4f:af:96:3f:b8:35:23:
92:02:9c:99:6e:05:ec:18:5f:6b:46:53:36:47:8e:aa:9e:8a:
2d:80:53:c6:10:6e:69:d8:87:ab:9c:8c:92:d3:de:3d:9b:f2:
74:3b:05:03:63:42:82:25:83:21:8d:04:0c:cb:87:91:9d:cf:
e6:77:94:65:1f:1c:5d:3b:c9:83:c2:a2:a0:9a:2f:44:bc:3c:
30:54:d0:e2:2e:0a:d7:ba:99:c3:73:df:07:56:27:9d:a0:e3:
0a:ad:00:3d:8e:40:10:9a:a9:65:f3:14:67:43:9d:37:d8:47:
b3:5e:10:0d:1c:4b:50:9a:af:61:33:40:4a:37:04:09:f6:f9:
b2:cf:e9:2e:3a:5a:64:a6:0b:e1:d1:2c:35:72:34:6d:0d:60:
58:ce:e7:bb:0a:51:16:06:00:d8:b4:0c:0c:5c:b0:9b:da:c8:
a9:59:46:b9:a1:f7:a5:41:53:3d:c2:a5:1a:35:a6:4e:40:83:
74:da:f0:bc:e4:99:e1:9b:46:a8:a1:22:b4:8f:85:a2:a6:c4:
d1:10:9a:93:b1:b0:11:e5:12:93:40:be:f0:47:40:f1:2b:51:
3c:fb:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:16 2025 by rpki-client