Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa
File: 7634D328351411EBBF864670C4F9AE02.roa (raw, json)
Hash identifier: jVmN0CKLArscoHsAhAFo836CBYIKEy/lsmnR5TEYR0I=
Subject key identifier: D7:CB:02:C0:37:75:7F:48:BE:5F:96:84:6B:1A:1C:CC:FE:21:38:6F
Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Certificate serial: 06D9
Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa
Signing time: Mon 04 Mar 2024 22:41:46 +0000
ROA not before: Mon 04 Mar 2024 22:41:46 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24226
IP address blocks: 103.250.240.0/22 maxlen: 22
103.254.156.0/22 maxlen: 22
150.242.40.0/22 maxlen: 22
202.49.59.0/24 maxlen: 24
202.49.240.0/22 maxlen: 22
202.78.240.0/21 maxlen: 21
202.78.244.0/23 maxlen: 23
202.78.247.0/24 maxlen: 24
2404:130::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Validity
Not Before: Mar 4 22:41:46 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e64e2a-7619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:a5:79:4d:1d:38:4b:45:9b:c6:2a:e3:15:
4f:bb:b5:de:ff:c1:15:74:2e:6f:af:2f:97:f5:03:
64:88:40:bc:ca:51:13:ed:11:dd:19:fb:eb:03:e9:
9b:15:cf:4f:5e:90:24:32:97:db:0f:a0:02:69:92:
05:ba:af:7d:d5:f3:15:06:29:6b:17:c6:01:14:e7:
94:63:f1:ba:c3:0e:14:e5:78:9a:77:91:57:9b:95:
a6:a1:61:ff:27:eb:db:55:00:86:b1:79:57:7d:ee:
69:12:ed:44:64:44:06:38:33:c5:6e:86:62:2a:38:
e1:ae:61:da:5c:5c:aa:fb:26:cc:5b:7e:a2:bb:f6:
3b:5f:8f:7c:ce:6a:c3:ce:21:61:d6:b4:a9:01:68:
10:b4:69:ee:42:52:81:c1:61:a2:98:98:ab:f6:ee:
77:ae:0a:07:75:7c:eb:30:e9:90:9a:cb:60:36:3e:
1b:7d:9b:47:09:01:f2:89:31:a7:34:ed:b0:4d:bc:
65:58:d6:fd:03:e8:41:5e:c9:4d:96:dc:78:ee:2c:
c6:6f:8a:f6:e7:24:83:ac:d9:20:64:28:5d:c5:cf:
90:76:12:8f:87:db:2e:ed:03:8c:d3:81:89:f6:14:
b2:bc:06:91:91:05:15:fc:0b:89:e5:f2:23:05:5f:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:02:C0:37:75:7F:48:BE:5F:96:84:6B:1A:1C:CC:FE:21:38:6F
X509v3 Authority Key Identifier:
keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.240.0/22
103.254.156.0/22
150.242.40.0/22
202.49.59.0/24
202.49.240.0/22
202.78.240.0/21
IPv6:
2404:130::/32
Signature Algorithm: sha256WithRSAEncryption
6c:69:ca:95:8d:f3:b4:25:8f:a7:97:e3:11:af:ab:c4:7e:8f:
87:16:96:75:3f:e6:74:ed:99:5c:57:15:79:a8:55:df:e6:c4:
08:1b:79:56:36:89:16:1f:43:20:00:e4:3a:49:26:be:33:05:
9d:bb:42:48:f9:a5:1a:a6:f4:b9:37:85:cf:e5:93:65:45:d1:
04:70:17:1c:7b:6a:b8:b1:5b:03:3e:59:ff:1f:e6:50:8c:31:
e7:fd:46:f5:dc:72:28:19:ba:fc:a7:40:cf:43:ed:15:ef:c4:
b2:b1:37:1b:e8:37:4b:4b:3a:44:15:20:42:62:77:2e:e4:36:
7c:df:73:e1:8c:78:b0:6b:55:6d:fb:c6:1a:5f:c7:7e:67:a4:
76:ad:6e:c5:81:a5:bb:4d:8e:c8:24:ef:98:27:d6:ef:45:5f:
41:01:16:f2:60:0e:6b:e4:42:1d:2d:8d:11:2d:88:33:f0:27:
2c:0f:69:fe:ae:cf:36:dd:e5:35:c9:ea:18:8e:0e:bb:bc:01:
90:31:68:cf:c3:14:82:db:86:41:6d:63:fd:a9:58:1a:69:ac:
62:35:c4:5d:db:7d:b9:73:bb:3c:29:d9:1e:ef:1a:0a:60:80:
9f:b5:ec:d0:7e:e4:74:ac:02:fa:bf:cf:4f:38:fd:64:0b:fe:
2a:ae:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:38 2025 by rpki-client