Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/C87A727C2F8411EBA83F6F6DC4F9AE02.roa
File: C87A727C2F8411EBA83F6F6DC4F9AE02.roa (raw, json)
Hash identifier: ZlqUSLpbo+lZIiR9ntEA9vKv0z9qoBvMsZaB985S8kc=
Subject key identifier: D5:BA:16:AA:B4:77:4D:D7:49:65:30:F0:99:7D:4D:05:8B:0C:00:6C
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 08EC
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/C87A727C2F8411EBA83F6F6DC4F9AE02.roa
Signing time: Sun 15 Dec 2024 01:32:22 +0000
ROA not before: Sun 15 Dec 2024 01:32:22 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140951
IP address blocks: 45.248.200.0/22 maxlen: 24
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/23 maxlen: 23
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.73.0/24 maxlen: 24
103.242.74.0/24 maxlen: 24
103.242.75.0/24 maxlen: 24
220.158.134.0/24 maxlen: 24
2401:47c0:1f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Dec 15 01:32:22 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=675e31a6-6519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:d5:6a:a4:30:7c:bf:23:e7:c9:e3:2c:33:
e4:05:b9:3f:e0:30:92:d6:5b:42:6e:fc:ee:14:c4:
b6:2d:6f:b0:66:81:46:81:84:40:59:63:06:6b:27:
54:4c:b7:eb:10:b9:52:34:fa:c0:2e:b4:9a:bf:9e:
e5:6d:7a:49:0b:fc:4d:a3:3a:ef:f7:7f:81:7c:f7:
bb:96:a7:ea:ba:09:18:b0:21:6a:3a:e1:61:66:15:
e2:8d:8a:a1:5f:53:96:19:7c:83:45:9e:06:85:81:
92:5a:dd:23:38:d0:e0:e7:3e:35:c5:76:e4:26:41:
d3:c2:40:90:84:2c:22:e6:07:de:af:d4:d7:29:78:
f0:20:e7:85:c8:57:7d:3d:d0:78:70:28:18:0f:95:
30:8c:8d:e8:14:f4:79:45:d5:5f:9c:5a:14:90:0b:
c7:74:b9:d1:9c:c9:d7:50:7d:63:f5:18:25:53:47:
7d:e3:ef:6a:78:7a:37:95:ac:3e:67:3d:0a:44:b7:
5c:22:c9:71:26:25:2b:c1:4c:6a:93:c6:a9:9a:e5:
63:e0:ce:90:35:64:fe:2a:22:37:bb:e9:ad:79:ce:
43:2b:32:76:44:4c:62:77:2e:50:21:d6:14:c2:39:
12:51:ee:12:a7:e7:86:0c:8c:a5:3e:54:ea:bb:1c:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:16:AA:B4:77:4D:D7:49:65:30:F0:99:7D:4D:05:8B:0C:00:6C
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/C87A727C2F8411EBA83F6F6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.23.168.0/22
103.217.160.0/22
103.242.73.0-103.242.75.255
220.158.134.0/24
IPv6:
2401:47c0:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
c5:f7:c4:01:7a:51:f2:b5:40:51:27:1e:7d:d8:03:90:2c:9e:
cf:ae:10:9e:9b:32:66:e1:c6:15:85:00:dc:8b:88:8a:7f:c9:
68:57:f7:9e:b5:2c:8a:ea:49:0f:db:6d:2d:53:da:fb:95:42:
78:d3:e2:88:3a:a4:c6:7e:53:5f:c1:55:70:fb:f4:b5:ed:d4:
96:31:8c:51:49:c1:19:20:9a:33:1e:36:18:e1:9b:d0:f7:d1:
c3:e4:11:a8:7e:96:58:ba:5b:14:e9:38:db:af:15:dd:e1:f4:
cc:fa:70:89:67:fc:c1:50:3b:ec:c4:64:a8:74:17:88:cb:e2:
61:53:2f:1f:f4:3d:1f:6b:e0:0b:c8:b3:cb:f0:dd:62:d2:67:
bc:3b:0c:a3:03:c0:9d:de:e6:56:9e:33:36:ea:3c:54:e1:f7:
a5:df:9f:d8:7a:29:ae:09:46:c3:c4:39:95:04:a1:06:5f:89:
ad:99:98:aa:5c:e8:1c:ce:aa:f2:4c:da:42:cf:b9:7e:67:91:
b9:d6:15:35:7d:77:9d:b9:af:cb:eb:36:50:d9:a5:fa:80:ab:
3b:36:c5:61:07:9a:e2:74:83:d6:72:61:77:a4:ef:56:80:f8:
2a:5a:49:b8:3d:06:bf:71:23:53:00:57:9e:09:14:21:fa:2d:
69:46:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:30:58 2025 by rpki-client