Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/1B713E1C554F11EB99946233C4F9AE02.roa
File: 1B713E1C554F11EB99946233C4F9AE02.roa (raw, json)
Hash identifier: +ZFmuCFgR+jvEdX2GBNvEvupwNfudy/ZxjtB14tyFr0=
Subject key identifier: CF:4E:23:F7:11:D6:85:C5:7A:A0:D8:E7:CE:9F:3C:49:5C:D7:58:FB
Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial: 069F
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/1B713E1C554F11EB99946233C4F9AE02.roa
Signing time: Mon 30 Dec 2024 03:51:44 +0000
ROA not before: Mon 30 Dec 2024 03:51:44 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9381
IP address blocks: 43.248.164.0/22 maxlen: 22
45.124.8.0/22 maxlen: 22
103.25.72.0/22 maxlen: 22
103.28.76.0/22 maxlen: 22
103.31.18.0/23 maxlen: 24
103.247.140.0/22 maxlen: 22
103.247.144.0/22 maxlen: 24
103.247.160.0/22 maxlen: 22
103.247.164.0/22 maxlen: 22
2404:2100::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Validity
Not Before: Dec 30 03:51:44 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=677218d0-09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:8e:b1:c0:b0:99:09:3f:30:59:e9:ed:a1:
ef:7c:76:81:a2:72:81:19:9a:b3:42:db:58:20:7b:
5e:a3:c9:06:a8:c9:6c:58:48:f4:e1:1b:58:b6:2b:
25:d3:e1:85:3b:08:8a:91:b8:cf:d1:89:1e:3e:6d:
4e:64:3d:e5:57:52:e3:b8:14:28:eb:67:6e:a5:74:
90:ee:a7:56:b9:c1:9c:34:4d:83:18:4a:fc:3d:c9:
23:d8:a8:ae:8e:e9:c5:ac:92:d6:97:dd:bb:3c:72:
f0:56:0e:ca:e1:de:71:39:a4:ac:91:d2:a6:0c:bb:
ec:c7:ef:7f:cd:e4:4a:a3:05:54:5b:d0:84:e9:2d:
89:ea:17:94:5f:6d:b4:5f:f9:a1:1e:82:c8:f1:b9:
f5:b2:3c:ed:7a:b8:36:cb:57:16:a4:13:66:3d:57:
e5:6e:0c:a4:ff:fd:b7:59:03:dc:6f:03:33:b4:35:
ec:df:b2:21:92:0a:2c:60:8b:c1:6d:9f:d4:9b:c6:
97:67:38:12:b6:6a:80:c1:30:5d:5b:02:b0:d5:1b:
0d:a0:b6:f7:88:a5:ba:07:2c:30:bf:81:93:29:ab:
f2:93:73:ae:08:cd:23:94:c2:14:b9:08:ea:80:6a:
26:2a:87:d4:31:bc:52:e4:69:2e:2c:34:76:90:ee:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:23:F7:11:D6:85:C5:7A:A0:D8:E7:CE:9F:3C:49:5C:D7:58:FB
X509v3 Authority Key Identifier:
keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/1B713E1C554F11EB99946233C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.164.0/22
45.124.8.0/22
103.25.72.0/22
103.28.76.0/22
103.31.18.0/23
103.247.140.0-103.247.147.255
103.247.160.0/21
IPv6:
2404:2100::/32
Signature Algorithm: sha256WithRSAEncryption
7e:30:16:8b:7c:3a:56:06:d1:24:80:4a:70:e4:5e:c5:ee:fa:
d7:b3:4b:25:e6:40:9b:e0:a0:26:a2:4a:ee:5e:ec:9b:93:4d:
e8:d2:cb:76:40:46:97:33:8b:34:ff:b7:22:13:7b:d3:d9:dc:
69:d5:6c:ac:6c:74:50:0f:23:54:98:53:3f:6c:58:8d:cd:2c:
a2:b3:f8:42:90:19:9c:6c:38:85:63:e5:84:cc:f6:0d:be:be:
4d:2b:ac:64:0a:fe:cf:e1:b8:3a:5d:c1:af:e5:22:24:fd:a2:
66:2b:c6:63:61:3e:20:f9:c7:12:1c:b6:fc:30:81:28:01:d6:
9c:76:7a:ce:d5:4d:55:75:2a:c1:21:77:28:d8:44:cd:0f:96:
fa:65:aa:6f:22:d3:1f:7d:c9:c0:d6:55:94:27:0b:a4:a2:7c:
fe:81:62:44:d1:2c:bb:0f:52:13:e1:f9:8e:9e:7d:0f:e7:09:
7b:78:75:39:81:3e:12:8f:76:68:16:3d:dc:0c:0b:1d:49:bd:
71:7c:e4:31:01:b4:71:1f:b5:00:05:a1:3e:31:b2:82:6e:b7:
46:43:b8:41:3b:e8:65:4b:21:cf:b7:d4:c1:01:a6:c9:0b:a9:
c0:33:42:2a:ac:b0:09:b9:e9:2c:d8:e6:0a:1e:38:45:1c:c4:
a0:4c:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:26 2025 by rpki-client