Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa
File: 89A5C6C67C5511EDA0D2C06CC4F9AE02.roa (raw, json)
Hash identifier: P/tAdlp2N7ZrGlpdCEQfZrgBVZ/+k7m7uSwHSMf0WL0=
Subject key identifier: 79:9C:C4:15:B8:07:27:66:E7:2F:DF:37:34:77:95:37:50:07:4C:E4
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4567
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:32 +0000
ROA not before: Thu 05 Sep 2024 03:32:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135920
IP address blocks: 45.123.96.0/22 maxlen: 24
103.63.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17767 (0x4567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9264f-2dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:12:1b:b5:f0:2a:2e:44:da:c1:21:72:7d:
70:e8:df:ee:82:43:cc:28:4b:b3:4a:01:0d:44:4d:
11:82:d0:99:fd:88:ba:d8:64:05:5e:e2:d6:8d:45:
34:89:a6:c0:55:11:16:aa:70:a9:fe:91:6c:f5:d2:
fd:40:8e:68:e9:a8:a0:49:fa:b4:3a:b2:02:b8:8c:
01:c1:3b:5e:4d:06:3d:4b:45:12:d8:9c:72:6c:bb:
28:51:2e:e6:a9:1e:09:be:fc:af:7b:ee:ca:d1:ef:
fe:e4:9c:d2:9f:64:15:18:00:a8:d1:b7:0b:f8:56:
e6:6e:08:f5:82:04:e2:4a:bd:8f:76:4f:e6:08:dc:
50:8a:66:63:67:a0:dc:07:20:8a:79:0a:dd:65:b1:
9e:15:7f:d8:86:8a:a7:4c:5d:85:c3:8c:ff:31:36:
4f:94:e6:69:b2:b8:d7:c1:9d:f4:e9:9b:bd:eb:0b:
a7:4c:e9:87:5a:b4:48:e2:37:d7:a9:38:9f:0c:d7:
35:ad:0f:f8:62:b5:1c:12:ea:58:82:49:40:aa:82:
74:3e:7b:0a:e9:c9:9b:ad:db:24:a5:79:c4:18:d5:
62:0f:7a:16:77:97:6a:a0:cf:73:40:44:22:1f:39:
14:66:a0:f6:90:4a:f8:c0:68:4b:05:6c:16:a4:0b:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:C4:15:B8:07:27:66:E7:2F:DF:37:34:77:95:37:50:07:4C:E4
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.96.0/22
103.63.212.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d2:40:28:47:46:24:af:cb:a6:af:70:b4:7a:95:af:c8:0e:
84:2a:cc:25:9e:ae:bb:1a:e9:c4:98:d3:14:48:f3:e6:a5:14:
7f:17:d3:08:3e:48:30:c9:55:5e:00:cc:6f:30:9f:7a:2f:a9:
f3:bf:e9:10:bc:b0:fa:f9:d1:d5:65:93:59:82:b8:d2:a6:ab:
e2:68:3f:49:9c:b7:7f:91:8c:1c:d6:a5:c9:41:a4:e2:70:bc:
0f:87:d3:23:3e:b7:0c:f7:a2:7a:34:ac:82:26:c5:64:2b:f8:
e3:fe:3c:90:9f:df:52:eb:84:9a:d5:90:96:ab:66:6e:56:1a:
c2:c8:52:59:52:7b:24:99:d9:e9:d1:ea:e1:14:e6:88:57:ee:
3f:d0:cf:20:aa:89:bb:b5:a8:06:49:c4:b2:aa:94:5e:de:60:
dd:78:ec:3a:64:03:2e:6d:a3:d6:0b:83:ad:b3:03:0e:70:34:
a6:7a:a8:e2:bc:16:dd:46:d4:69:84:c9:21:e3:ac:d5:de:dd:
c8:74:97:8a:82:bb:b5:19:99:1f:d4:fb:c4:be:88:ec:0a:b8:
8a:bb:5c:41:5e:8b:8a:dc:34:ea:56:4b:79:5a:99:33:01:2e:
7b:35:23:d6:50:48:c5:d7:36:48:b9:a0:05:43:f8:84:8c:dd:
9f:79:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:59 2025 by rpki-client