Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa
File: A2EBCE92083011EF82AFFD44C4F9AE02.roa (raw, json)
Hash identifier: JyPsyPYWBJTtp9cL7rdJiQchZcAK1LENWk53awZsjUc=
Subject key identifier: E0:B9:C0:F1:56:5E:30:58:EA:D6:50:D9:54:66:21:32:F6:FD:04:90
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 25
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa
Signing time: Thu 02 May 2024 03:04:06 +0000
ROA not before: Thu 02 May 2024 03:04:06 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 45652
IP address blocks: 43.252.120.0/22 maxlen: 24
103.233.80.0/22 maxlen: 24
110.34.139.0/24 maxlen: 24
110.34.158.0/24 maxlen: 24
110.34.162.0/24 maxlen: 24
110.34.164.0/24 maxlen: 24
110.34.166.0/24 maxlen: 24
110.34.180.0/23 maxlen: 24
110.34.183.0/24 maxlen: 24
110.34.184.0/23 maxlen: 24
110.34.186.0/23 maxlen: 24
110.34.188.0/23 maxlen: 24
110.34.190.0/23 maxlen: 24
110.34.220.0/22 maxlen: 24
2401:4a40::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: May 2 03:04:06 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=663302a5-a1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:6a:db:a4:e8:dd:d5:34:06:d7:18:65:f6:
f7:71:a1:b7:a6:6c:96:1d:c6:85:0c:cb:68:00:8d:
62:5d:46:d8:ff:ce:2b:9b:fc:da:85:1e:db:7c:f7:
59:c9:d9:a4:8e:cd:fe:29:4d:b2:e4:73:38:ff:bd:
a8:3a:03:7c:dd:f7:2e:3f:de:7e:33:8d:4b:17:12:
07:58:39:92:9e:fd:e7:c4:0c:43:01:01:0e:b6:bc:
b0:ba:53:ca:48:d3:f9:a1:ef:b3:cb:12:86:03:b4:
d9:12:20:23:78:18:28:88:f0:5a:e2:36:20:39:e3:
3b:33:d9:27:c7:69:cf:b1:d3:0d:9c:3f:dc:5f:f9:
fa:25:4b:8a:df:05:d3:8c:79:0b:28:0b:c6:26:3c:
ef:47:67:c4:da:1a:11:2b:08:2c:86:5e:b4:85:92:
7c:a8:02:2d:24:80:cc:4d:cb:df:1f:9d:09:0a:d2:
c2:50:08:a3:61:da:25:5d:f9:63:6f:67:64:47:da:
e9:82:70:45:4b:0e:2e:bb:d5:33:9f:a7:64:2a:fc:
6b:c5:77:47:37:03:ae:00:8d:e7:5a:8f:17:7b:8b:
72:c4:dd:26:ae:3d:9d:75:59:29:56:fd:c1:35:89:
7b:e9:c0:63:14:27:6a:b0:de:45:91:bf:a9:d9:90:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:C0:F1:56:5E:30:58:EA:D6:50:D9:54:66:21:32:F6:FD:04:90
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.120.0/22
103.233.80.0/22
110.34.139.0/24
110.34.158.0/24
110.34.162.0/24
110.34.164.0/24
110.34.166.0/24
110.34.180.0/23
110.34.183.0-110.34.191.255
110.34.220.0/22
IPv6:
2401:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
c2:59:21:72:59:00:73:c0:e4:56:7f:50:fb:36:a4:a4:f8:12:
53:bd:47:0b:61:54:cb:dc:b0:6a:28:0d:b6:68:2f:e8:e0:13:
57:d5:3e:d8:86:e5:23:70:1c:c7:fb:47:9d:62:54:68:17:74:
32:0a:f9:b5:bb:66:bc:69:78:33:7b:e7:7d:19:cb:a2:11:30:
01:3f:c7:99:ce:ba:95:fc:36:39:24:df:8d:61:35:ec:bb:4c:
76:80:bc:ee:29:df:f9:85:bb:50:e6:5a:66:48:08:4e:fb:1c:
44:21:bd:20:47:c1:a0:88:8d:ca:d1:b1:e7:a5:7a:74:87:1b:
34:45:60:5a:07:5d:b7:56:30:45:fe:4e:1b:9b:a8:dd:54:bf:
00:51:db:cc:0e:3b:d7:0f:2c:1e:5c:a4:f7:d3:ea:39:86:e2:
95:c0:67:06:6f:51:48:3d:2f:e3:1f:53:e0:67:04:84:60:1c:
a3:eb:f3:1a:8f:a2:68:4e:ce:df:5a:20:6e:32:46:76:88:48:
2a:0e:31:19:eb:93:bf:83:51:cb:ae:0b:fc:ea:b5:8d:a4:14:
f4:47:38:44:58:c3:e2:4d:e3:91:9c:46:f1:7d:ea:61:0a:2d:
40:e8:f1:4c:6b:f9:76:16:f3:3a:db:8b:d0:98:fe:ba:45:ce:
a8:52:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:52 2025 by rpki-client