Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
File: E6F73E22B99E11EEBF189021C4F9AE02.roa (raw, json)
Hash identifier: 5arC7pafcKh/AcWsnn6ZMn4yInbZRBna+RKiehfd8iA=
Subject key identifier: 00:2B:C6:9D:1A:F4:60:0E:82:97:DF:76:6A:8D:63:93:B1:9C:99:29
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3474
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
Signing time: Sat 04 May 2024 15:20:58 +0000
ROA not before: Sat 04 May 2024 15:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24192
IP address blocks: 103.7.168.0/22 maxlen: 24
103.253.192.0/24 maxlen: 24
103.253.194.0/23 maxlen: 24
202.174.81.0/24 maxlen: 24
202.174.82.0/23 maxlen: 24
202.174.84.0/22 maxlen: 24
202.174.112.0/21 maxlen: 21
2406:1200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13428 (0x3474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: May 4 15:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6636525a-af38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:c4:67:84:55:17:bf:0d:d4:b1:09:0a:2d:
6d:b6:e5:be:42:53:0c:51:35:67:a9:bc:33:84:f1:
b5:ed:fa:24:24:99:db:0e:13:b4:07:ee:a9:87:2e:
46:c2:f3:43:f0:20:2a:7e:30:5c:79:a0:a4:53:74:
aa:3b:85:9b:ba:1f:13:21:56:3e:58:7c:c6:1e:8a:
73:d7:10:34:65:66:09:70:f8:3a:0f:92:51:e6:88:
23:21:39:f4:f2:70:35:90:e6:75:56:88:4b:ef:06:
5c:05:f4:0b:e0:13:5a:ef:27:db:0f:ff:2d:5e:84:
2a:dd:8f:6e:e1:f8:2d:4b:68:93:cb:84:1e:1d:ab:
5c:da:ab:d6:25:6a:ee:e8:13:af:8f:a5:37:2b:37:
ad:a0:99:2c:7b:79:62:7d:1a:f9:a0:b9:2b:31:1f:
c9:86:46:d2:44:3c:98:4a:86:eb:1c:f9:44:d1:d5:
06:96:3a:42:00:08:e0:aa:67:65:c0:06:a1:7c:3a:
e3:18:1f:ec:64:08:d7:6e:f3:8f:7f:03:cc:ed:1f:
da:a4:22:93:d6:bb:3b:0a:46:e4:3e:d0:96:22:d9:
9a:6b:dc:c1:2b:65:29:ec:14:17:26:f8:ac:a5:90:
18:d5:ad:de:39:75:11:45:66:64:fb:ee:e5:ee:68:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:C6:9D:1A:F4:60:0E:82:97:DF:76:6A:8D:63:93:B1:9C:99:29
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.168.0/22
103.253.192.0/24
103.253.194.0/23
202.174.81.0-202.174.87.255
202.174.112.0/21
IPv6:
2406:1200::/32
Signature Algorithm: sha256WithRSAEncryption
6a:5a:c7:ed:72:a4:02:eb:dd:1a:9a:1d:8e:1f:79:05:c3:31:
ac:4a:4f:2d:05:bb:d9:ff:5a:4b:c6:ff:75:38:ec:9b:e7:ae:
40:f1:da:22:f1:0b:57:7c:16:d8:64:65:9d:a2:92:bb:7a:ad:
b3:5d:e2:ab:1a:36:96:b4:7e:16:c2:4c:4a:3c:94:f7:3c:79:
e2:b2:ef:50:f8:72:b6:dc:62:d9:9b:8e:0f:35:63:8c:07:28:
bd:6f:b2:3b:92:c5:5f:11:c1:3e:cb:af:dc:ae:86:0a:79:2c:
20:65:90:20:e5:27:f2:6c:c1:01:1b:c7:da:cc:90:35:06:ea:
1a:b0:d1:a2:df:86:05:1e:0f:67:93:b3:cf:da:6c:b9:44:59:
c0:37:7a:61:4b:f2:f9:96:14:67:d6:9a:01:55:2a:90:c3:f2:
72:c3:09:1a:45:52:84:bb:ee:72:57:57:70:3d:09:08:a0:75:
97:76:07:3b:9c:ef:0c:0a:21:c2:1a:5f:c6:5f:8e:46:9b:99:
c3:d2:8c:ae:34:93:ea:b6:f6:95:7f:6a:55:91:6d:80:2e:d5:
10:0b:2a:b4:da:5f:27:4e:50:f3:bb:db:d0:f6:3a:3d:8f:fd:
57:2d:b8:eb:2d:2e:64:be:14:7a:fd:d8:c2:83:1f:1b:98:f8:
62:30:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:53 2025 by rpki-client