Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
File: EDFC6E02B6D411EFB03CBB66C4F9AE02.roa (raw, json)
Hash identifier: W7cvM6MzGd31Z5JSGlAd3TGVj90erloDAuloq1bH4iQ=
Subject key identifier: 4B:E9:8F:31:C7:7C:97:1E:B6:A3:46:97:CF:9A:2A:7E:D6:FA:A3:FA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 48B8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
Signing time: Tue 10 Dec 2024 08:58:32 +0000
ROA not before: Tue 10 Dec 2024 08:58:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140825
IP address blocks: 59.153.216.0/22 maxlen: 24
103.12.76.0/23 maxlen: 24
103.81.84.0/22 maxlen: 24
103.173.154.0/23 maxlen: 24
103.173.254.0/23 maxlen: 24
103.183.112.0/23 maxlen: 24
103.184.112.0/23 maxlen: 24
103.186.146.0/23 maxlen: 24
2001:df0:5bc0::/48 maxlen: 48
2001:df0:90c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18616 (0x48b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 10 08:58:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=675802b7-091d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:e6:a5:10:32:c5:87:52:26:8f:17:1d:ae:
07:39:4d:1e:d2:23:5f:28:cb:4d:09:7b:23:41:c0:
0b:c4:1c:c1:14:1a:98:d8:f6:5e:16:7f:cd:67:47:
63:39:54:07:3f:15:a7:59:32:2f:f5:ae:58:6e:7a:
32:c7:f1:b5:11:6c:c4:4a:57:cc:eb:c3:2c:20:1e:
59:17:50:0d:d0:af:df:bb:9a:dc:60:00:35:84:d8:
1e:69:01:e5:c6:60:61:e6:32:7e:85:a0:67:e8:55:
49:81:17:12:e1:e5:d4:7a:98:76:56:0f:f4:a1:d9:
36:b7:34:dc:95:42:9a:8e:e4:ed:7b:9a:b8:0d:9f:
0c:b0:9b:1f:3a:25:33:d5:c8:77:08:19:71:d2:da:
b9:9b:39:24:76:40:88:b1:5a:0f:60:52:c4:b8:1c:
de:4f:05:0a:a1:76:ca:0f:ea:76:c8:bb:d0:8b:52:
8a:c7:19:40:ad:2a:d9:6c:7c:59:32:1f:f1:ac:45:
97:4a:85:12:6c:c8:a5:0d:60:03:8f:e8:61:63:af:
df:eb:39:95:0b:ec:94:13:65:a8:0e:57:ca:2d:88:
0f:31:ce:eb:b3:28:7e:47:da:9a:fd:71:2b:fc:59:
55:71:b4:f0:1f:e7:9f:9e:58:30:a6:15:f3:fc:a7:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:8F:31:C7:7C:97:1E:B6:A3:46:97:CF:9A:2A:7E:D6:FA:A3:FA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.216.0/22
103.12.76.0/23
103.81.84.0/22
103.173.154.0/23
103.173.254.0/23
103.183.112.0/23
103.184.112.0/23
103.186.146.0/23
IPv6:
2001:df0:5bc0::/48
2001:df0:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:7e:9d:3e:64:45:cb:32:88:5f:ec:2b:3e:91:c5:80:0e:ae:
58:7b:83:28:34:50:db:3b:51:8d:27:37:e5:b7:71:d8:93:bc:
56:2c:79:49:35:c3:a3:39:1d:9d:1f:c1:86:b2:c9:d1:85:0b:
fc:61:07:a7:24:a0:8a:d5:d0:f9:b3:95:75:ec:57:5a:78:71:
4b:4b:ad:4d:e9:b2:11:d5:28:f5:0b:d8:99:f2:97:55:f6:08:
5b:b9:b1:e2:91:75:63:f3:99:a7:a7:f5:96:b2:09:7b:89:60:
2c:54:d5:36:a0:b9:2b:db:24:9e:9e:83:f2:40:b2:9a:18:99:
68:82:93:49:75:cf:b5:2e:14:6b:21:49:49:45:f4:46:5c:6f:
c0:7a:e6:7a:a8:6b:de:5b:56:59:ed:10:37:b5:29:c9:62:6d:
38:07:99:c1:a8:bd:31:7c:ae:68:cf:74:af:0c:c0:03:ee:bc:
9e:0d:0c:71:81:75:72:5d:24:91:02:29:0f:ad:0b:24:ea:ba:
74:32:e5:20:e8:0e:76:0a:d0:bc:05:36:d4:86:22:3e:8e:e4:
a6:f8:ba:b2:52:04:ae:7c:8e:26:f0:9f:00:ed:ab:ac:39:88:
58:78:7c:0f:8d:b1:02:3a:34:82:00:1b:52:42:4c:6b:23:19:
2f:4a:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:29 2025 by rpki-client