Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
File: 204459886A4211EDB5C5EC63C4F9AE02.roa (raw, json)
Hash identifier: Sq8uiyerrkKYOGJIifBc8UcljCMgS+tMTePx7O1v9zk=
Subject key identifier: E9:6C:A4:F3:1E:53:47:CF:5C:A4:1A:D3:A6:03:06:BB:4E:B1:AE:B6
Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial: 0C67
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
Signing time: Wed 28 Feb 2024 18:57:29 +0000
ROA not before: Wed 28 Feb 2024 18:57:29 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58682
IP address blocks: 103.204.208.0/22 maxlen: 22
103.204.208.0/24 maxlen: 24
103.204.209.0/24 maxlen: 24
103.204.210.0/24 maxlen: 24
103.204.211.0/24 maxlen: 24
202.181.16.0/24 maxlen: 24
202.181.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Validity
Not Before: Feb 28 18:57:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65df8218-4942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:ea:69:29:00:d3:7d:46:a6:10:78:38:f7:
b3:a9:7f:89:7c:0c:c9:b3:0a:de:64:e5:a0:78:b5:
d6:1f:36:74:8c:c9:6d:7a:40:83:76:1b:cf:c8:02:
a3:b8:9b:67:e8:c5:91:1c:c7:e8:3f:38:6a:fc:c5:
eb:87:c2:ba:ce:1a:ff:71:48:54:0e:2d:2f:1f:85:
79:84:3d:7e:20:f3:69:3a:c7:12:fd:2e:9f:d8:aa:
02:72:17:95:e2:a7:f3:6e:89:8e:c2:6c:7c:2b:3d:
53:4d:02:f0:b4:8f:79:39:36:56:4f:d8:7e:49:86:
88:6c:10:0d:c6:8f:f6:ee:b1:a5:7f:f8:ed:91:79:
f3:e9:24:2f:e7:a3:2b:ac:fb:cd:10:50:2f:c6:50:
d6:a0:75:f8:59:7e:89:5f:ac:2d:96:2b:5f:a5:39:
22:5f:71:b7:61:ac:ab:9d:1b:2b:36:94:9a:38:73:
0c:cf:9d:0f:2f:66:cc:ae:11:fe:ae:5a:f6:17:b3:
60:63:e8:92:6c:1b:ce:8c:bf:e1:28:43:ac:66:68:
96:08:62:f1:a8:a2:6d:7d:6b:bf:bf:1e:58:21:b5:
2e:7a:86:e9:ca:b1:99:ae:ed:ab:0d:e5:d9:92:fd:
03:73:16:28:c9:8a:45:90:47:5b:e6:45:ae:22:be:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:A4:F3:1E:53:47:CF:5C:A4:1A:D3:A6:03:06:BB:4E:B1:AE:B6
X509v3 Authority Key Identifier:
keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.208.0/22
202.181.16.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:21:47:63:c1:09:48:35:ef:e5:7a:84:9a:2e:09:08:95:a2:
72:e6:b0:5c:97:81:db:9c:78:d2:61:c9:a2:68:aa:ed:a4:6f:
98:22:1c:f9:f5:d1:72:08:36:dc:9c:bb:06:64:46:9b:f0:8b:
57:01:53:11:c8:4f:11:d0:e9:3c:77:6d:ef:c1:e3:87:e1:5a:
25:75:5a:5c:e2:49:98:76:9d:7a:f2:ac:b7:29:11:75:77:bd:
d9:1e:92:e5:ef:74:dc:2b:ba:f8:9e:37:59:7d:87:3c:26:6e:
81:d9:6c:94:0c:e7:51:4c:cd:27:f3:3f:22:de:b3:2a:84:88:
a5:39:e1:83:67:03:8f:66:29:fd:da:22:79:44:fe:0e:d5:7b:
57:bf:1b:a8:32:ac:61:e2:fd:83:24:04:0f:a4:99:d4:f0:f7:
a0:51:d0:7a:05:6e:9c:14:e8:a3:ba:a5:a5:a0:94:88:56:8e:
86:a2:07:e6:a7:79:db:d6:95:ad:2c:ca:de:e5:94:da:bb:80:
89:0c:c8:d3:ac:75:c4:f2:89:99:c9:b5:df:9b:9d:1b:a4:38:
5d:91:e9:d0:17:6f:22:70:57:93:74:09:72:13:07:05:a2:e1:
b0:77:04:2f:37:52:70:d6:af:55:c8:9d:12:e8:db:97:9d:f4:
b6:34:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:31 2025 by rpki-client