Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa
File: 66BEBEDE83CB11E796105342C4F9AE02.roa (raw, json)
Hash identifier: B440WbdvKbjd1VY/h7WWP2ns/DY0sOenjaoST0N8qSQ=
Subject key identifier: 48:3F:5C:30:E8:BC:E3:D9:49:A4:95:B4:67:7A:EE:2E:27:20:5D:35
Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial: 184F
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa
Signing time: Wed 22 May 2024 17:24:55 +0000
ROA not before: Wed 22 May 2024 17:24:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17882
IP address blocks: 43.228.128.0/24 maxlen: 24
43.228.129.0/24 maxlen: 24
43.228.130.0/24 maxlen: 24
43.228.131.0/24 maxlen: 24
103.229.120.0/24 maxlen: 24
103.229.121.0/24 maxlen: 24
103.229.122.0/24 maxlen: 24
103.229.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6223 (0x184f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Validity
Not Before: May 22 17:24:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664e2a67-bcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:df:55:db:0d:67:7f:f5:be:d9:88:00:5c:
5d:ca:d3:19:5a:b4:e6:b4:e3:f1:09:1b:45:06:88:
5a:d7:7b:6c:a8:ec:ba:f7:c6:a0:8c:72:a9:18:aa:
29:b2:70:46:d4:9a:6b:f4:4e:5d:17:a5:8e:33:50:
6e:1b:44:22:ea:34:31:52:e3:68:49:c5:08:8d:89:
d6:92:75:b1:87:f3:83:51:33:c2:76:6d:29:08:62:
e5:b2:0b:2f:c1:26:3b:c6:bc:62:21:55:3c:0f:81:
62:89:99:e8:6d:8f:f5:62:99:4f:ec:f6:b2:9f:a9:
26:c4:35:b6:8d:03:45:a9:c0:9e:42:b4:dc:1a:16:
a0:5e:b1:11:cf:c4:6e:f7:fd:3e:f2:ea:7a:bd:2c:
96:40:3d:82:ef:b6:42:6f:b9:93:dc:55:a3:13:b9:
34:e3:47:da:84:b7:64:49:74:c3:5b:51:98:2a:6b:
fe:12:c3:05:94:53:9f:4c:da:29:a9:0d:08:74:33:
ad:17:41:e0:49:96:1d:e6:93:86:28:17:f9:a1:c5:
ef:80:df:a9:cb:8d:21:aa:0a:9e:23:d5:4c:50:c8:
22:dc:fc:9d:f6:57:d1:a2:59:55:c9:7c:2c:4d:26:
5d:d4:47:1d:49:fb:03:7f:e2:53:ac:7c:65:87:7b:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:5C:30:E8:BC:E3:D9:49:A4:95:B4:67:7A:EE:2E:27:20:5D:35
X509v3 Authority Key Identifier:
keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.128.0/22
103.229.120.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ad:c6:80:1e:1e:14:b1:5b:80:e7:ce:47:aa:47:73:32:95:
c8:b6:e9:d9:aa:b2:41:cc:2c:9f:19:7f:36:f7:f9:24:d9:bd:
99:83:d3:78:b5:5f:63:e7:e8:a3:06:e6:04:8d:30:04:ce:5a:
02:f4:98:89:0f:3a:55:f0:9b:9f:29:dd:a5:87:14:64:cb:e5:
03:90:37:6c:93:b6:1a:c9:ed:3c:77:60:5a:9f:58:a8:be:80:
78:2f:3e:ab:ef:9e:9b:e0:e2:c7:40:61:6e:b2:eb:1d:66:7d:
bc:44:cc:f5:da:04:50:b0:19:54:84:1e:55:bc:00:58:17:5a:
98:33:95:03:1a:8e:18:a3:c1:39:a8:f3:8f:fd:93:c5:86:0a:
6c:71:21:7f:28:da:91:95:ef:97:fd:9f:b8:a3:5a:14:f6:22:
14:81:54:7b:be:84:9a:ec:a1:76:de:04:d8:50:a8:79:3a:73:
ab:bc:c9:28:6c:03:bc:07:88:cb:24:43:9b:cb:03:ad:fa:3a:
8c:7f:05:9b:e0:97:2b:0c:03:e5:9e:54:82:04:c1:c6:d5:c6:
96:3a:1d:2f:14:b8:49:67:2d:3d:3d:4f:0a:ef:7a:11:1d:85:
b8:d6:af:a8:2e:7f:bf:4c:d4:44:ef:4f:0c:ad:9f:98:15:55:
35:23:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:46:19 2025 by rpki-client