Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa
File: C10CE08C97D311EE9299330CC4F9AE02.roa (raw, json)
Hash identifier: gJAOPk4iFoIW/KqNitxUF3g+S02/W0OUx3yJyNEqzJI=
Subject key identifier: 8A:D6:F4:AB:31:7B:D6:CF:8B:59:DE:D9:AF:97:E0:B9:B0:7A:00:18
Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Certificate serial: C8
Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa
Signing time: Fri 13 Dec 2024 04:38:07 +0000
ROA not before: Fri 13 Dec 2024 04:38:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38611
IP address blocks: 103.12.200.0/22 maxlen: 23
103.253.64.0/22 maxlen: 23
113.11.184.0/22 maxlen: 23
180.92.208.0/22 maxlen: 22
203.17.148.0/22 maxlen: 23
203.33.236.0/24 maxlen: 24
203.55.188.0/24 maxlen: 24
203.57.15.0/24 maxlen: 24
203.80.168.0/24 maxlen: 24
203.193.192.0/19 maxlen: 19
203.193.196.0/22 maxlen: 22
203.193.200.0/23 maxlen: 23
203.193.206.0/23 maxlen: 23
203.193.208.0/21 maxlen: 21
203.193.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Validity
Not Before: Dec 13 04:38:07 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675bba2f-c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:82:21:fb:28:5e:50:00:49:c8:e7:33:9b:
5a:ab:6f:34:f7:0b:46:8e:3b:1e:fc:0b:c4:33:dc:
51:2f:a0:b4:57:ec:61:83:4d:0c:b2:bb:36:d5:f3:
a1:85:87:87:d4:5a:27:b3:0f:a1:c5:8c:c5:99:2f:
36:87:6a:5d:6d:d9:ad:ad:24:41:26:d0:b0:e4:1b:
44:98:38:ef:b3:0c:a8:17:16:ea:a0:ce:e7:51:c1:
b6:e4:2c:65:d3:ba:c0:58:5b:ef:3e:b0:95:c2:48:
48:58:33:4e:c0:88:a7:70:29:9c:b3:d9:55:f6:bd:
02:52:ff:04:2a:a1:11:eb:f9:59:d0:75:f1:a5:a4:
88:1d:0a:2e:ba:61:1d:db:b9:b7:a0:93:e0:ee:38:
7a:e4:36:b3:6c:d2:d6:c2:81:e5:90:a7:14:66:88:
2c:3a:b7:34:f9:10:d2:fc:bc:10:a1:a0:ea:c5:e7:
17:80:62:f2:be:1d:6c:7c:df:16:e6:4a:e6:34:2a:
99:e2:c7:da:24:fc:7b:2c:a2:75:e4:6b:16:d0:96:
f5:b8:6f:06:13:98:3e:19:ec:05:59:09:c9:b0:6c:
6c:0e:7f:79:70:d2:e1:e9:6c:66:e1:2e:3e:6f:3b:
fd:03:0c:f9:d6:d3:db:eb:b5:ff:d1:98:9d:f4:88:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:F4:AB:31:7B:D6:CF:8B:59:DE:D9:AF:97:E0:B9:B0:7A:00:18
X509v3 Authority Key Identifier:
keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.200.0/22
103.253.64.0/22
113.11.184.0/22
180.92.208.0/22
203.17.148.0/22
203.33.236.0/24
203.55.188.0/24
203.57.15.0/24
203.80.168.0/24
203.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
65:3a:11:ec:3f:75:14:d4:3c:37:ed:5f:9d:63:eb:bb:67:0f:
2f:f4:76:47:57:f2:f9:57:01:70:5c:a6:3a:e5:b6:05:97:b4:
ca:75:e0:e2:20:ee:49:86:9d:6a:78:3b:13:e8:2f:49:ea:f5:
83:b8:de:4b:4f:1b:bb:6e:0e:17:ed:c4:aa:73:48:c0:ef:f2:
33:0d:9c:e9:64:48:71:ae:9b:83:7f:c3:76:81:79:51:fd:bd:
3d:67:0b:c6:ca:95:c9:6a:b3:fc:79:62:8e:e1:65:e1:46:92:
bd:ed:27:26:65:1f:88:49:d4:9d:28:04:90:51:c0:bd:2a:3f:
dc:55:1a:2f:eb:03:a8:93:4a:8e:a5:40:f7:87:5f:7c:8b:6e:
88:1d:77:47:bb:d7:83:ab:30:5b:94:90:41:b5:b0:18:2b:73:
46:58:a4:53:99:b3:a7:78:3a:3c:ad:ff:12:97:fc:18:d9:d0:
a0:e6:1b:4e:a6:07:1c:ae:b1:ce:e1:13:71:3d:e9:30:4b:62:
01:c4:a5:58:66:06:33:cf:9a:44:65:e6:cd:28:df:1c:20:c7:
69:36:eb:91:25:62:aa:43:25:d1:d5:16:82:07:e3:44:bd:f5:
a9:51:ce:d5:3f:1c:61:7c:b8:b9:dd:b0:6b:d6:ab:58:1f:af:
05:a8:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:47 2025 by rpki-client