Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa
File: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (raw, json)
Hash identifier: ZkY0KzzTYIOlfe+QFFr6ughVl7NAzRhvIrPiqzSn17g=
Subject key identifier: 14:0F:67:7D:FC:8E:F7:70:A6:45:5B:D9:11:3F:0F:4B:81:EC:11:66
Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial: CD
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa
Signing time: Fri 03 May 2024 06:49:45 +0000
ROA not before: Fri 03 May 2024 06:49:45 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38903
IP address blocks: 103.122.123.0/24 maxlen: 24
103.131.83.0/24 maxlen: 24
203.99.152.0/24 maxlen: 24
203.99.153.0/24 maxlen: 24
203.99.154.0/24 maxlen: 24
203.99.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Validity
Not Before: May 3 06:49:45 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66348909-a6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:33:f0:df:4f:05:2a:da:16:23:b2:2f:36:
12:33:e3:4f:50:7f:50:aa:4f:ef:a5:ad:8a:6d:64:
a9:bc:f6:fc:86:ba:4c:f0:66:95:2d:89:c7:2f:fb:
6b:49:b6:9e:c6:0b:28:6b:31:97:a8:b4:c4:2e:52:
54:17:e7:bb:d6:05:1d:c9:44:40:95:5d:03:9d:f2:
fa:c3:26:d1:bf:cc:b7:44:6e:77:64:6d:c9:b9:52:
c6:a4:dc:eb:3e:94:6b:60:96:af:54:47:4e:07:a2:
f0:3c:bc:ef:01:c1:2a:56:66:3f:95:83:1e:c5:70:
ef:ff:db:9b:be:dd:08:b6:65:79:26:7e:4d:bc:5f:
31:07:a9:4e:06:78:53:27:80:f3:22:5a:18:0b:83:
5e:b3:c4:35:dd:56:96:a6:18:de:ea:69:34:1d:f2:
7b:6f:20:9f:4f:f9:01:70:37:10:ef:b1:dc:f6:7b:
22:f9:18:af:09:68:54:2b:70:c1:c4:5d:56:80:8c:
a1:da:13:27:47:63:00:3e:e3:58:f3:dc:e2:8d:f1:
b9:19:0f:61:47:2a:9e:15:da:8a:b7:c0:a9:de:a4:
07:f8:f6:41:4d:b3:07:f6:94:f1:b4:8e:c3:34:c6:
b7:49:ae:a7:46:ea:b2:5d:fc:55:bb:4b:96:35:6d:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:67:7D:FC:8E:F7:70:A6:45:5B:D9:11:3F:0F:4B:81:EC:11:66
X509v3 Authority Key Identifier:
keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.123.0/24
103.131.83.0/24
203.99.152.0/22
Signature Algorithm: sha256WithRSAEncryption
84:cb:47:4d:9e:df:23:d5:86:36:a9:32:29:06:c8:d0:43:f3:
e3:24:e5:25:e9:7f:86:0c:45:df:ab:e7:2e:21:d8:c8:10:ee:
20:ad:0e:28:ad:4f:35:1f:a2:c5:a0:38:ca:44:0a:23:fb:29:
3c:16:9e:c9:e0:3e:b2:82:ce:21:c4:87:90:55:ad:3c:bd:84:
9d:0d:f9:90:e0:6a:d9:ae:3d:a1:be:f8:f2:17:dd:fa:eb:b7:
e8:43:7f:6e:0c:3a:62:15:86:7f:ce:0b:37:5a:b4:ef:a0:49:
50:6d:f4:13:1e:ea:30:89:11:25:2d:d2:43:23:26:28:c1:2f:
f4:9f:d5:00:69:02:2e:d6:b5:8c:53:83:64:d6:5f:69:7b:45:
49:14:97:8e:40:eb:38:31:81:f1:01:ee:5e:14:ab:df:1d:f7:
09:04:4a:48:98:96:68:66:3e:13:7f:67:9d:ef:01:de:57:8b:
e8:a9:67:6e:17:76:e7:e8:a3:26:4c:ee:de:42:8b:cc:65:93:
43:3e:f0:21:48:7b:0c:32:0a:f6:63:f5:79:10:cb:e4:77:10:
dd:0b:ab:2b:31:b6:6d:27:f8:b1:b9:95:c9:da:2a:ac:08:3f:
ca:e2:6d:26:e6:53:9e:72:08:cd:ab:00:58:e1:00:ce:97:3d:
6c:fb:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:20:07 2025 by rpki-client