Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa
File: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (raw, json)
Hash identifier: GHc32dmD8PGI6ypRydRPnBnTyP57BJjF/HmqnaNiKdw=
Subject key identifier: B3:FD:C6:88:08:5F:14:67:FB:FB:6E:7A:1C:7E:7A:08:B0:DF:1E:5C
Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial: 3417
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa
Signing time: Fri 20 Sep 2024 15:21:05 +0000
ROA not before: Fri 20 Sep 2024 15:21:05 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 45945
IP address blocks: 43.245.124.0/22 maxlen: 22
43.245.124.0/24 maxlen: 24
43.245.125.0/24 maxlen: 24
43.245.126.0/24 maxlen: 24
43.245.127.0/24 maxlen: 24
103.1.148.0/22 maxlen: 22
103.1.148.0/24 maxlen: 24
103.1.149.0/24 maxlen: 24
103.1.150.0/24 maxlen: 24
103.1.151.0/24 maxlen: 24
124.150.140.0/22 maxlen: 22
124.150.140.0/24 maxlen: 24
124.150.141.0/24 maxlen: 24
124.150.142.0/24 maxlen: 24
124.150.143.0/24 maxlen: 24
2401:fd00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13335 (0x3417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Validity
Not Before: Sep 20 15:21:05 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66ed92e1-d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:05:78:dd:6e:b7:dc:4b:83:d2:a2:09:3b:
44:33:9f:07:21:48:5f:29:1e:5a:54:53:b8:18:77:
76:87:d9:c7:56:82:18:f8:e0:d9:f7:34:4e:01:9c:
90:13:90:fb:f8:07:0b:d8:4f:a7:17:a8:25:31:b4:
9d:0e:2d:a6:ae:71:d7:87:a8:72:84:07:60:96:20:
72:24:42:4b:d1:59:d5:8a:34:75:8b:b4:df:24:64:
ad:0d:aa:19:db:68:d3:a5:81:21:10:b4:ab:6d:4e:
1b:bf:4e:ad:de:5e:a1:3e:20:5d:50:eb:b3:97:8e:
af:06:b8:12:16:29:17:be:95:a2:71:d8:ee:86:99:
08:b7:8e:f3:8f:b8:b5:0a:9a:33:71:8b:f6:f3:fd:
b9:23:f5:17:87:fd:36:eb:5e:45:ef:c4:d0:76:da:
c8:74:84:65:90:d2:09:a4:e3:dc:28:a0:6c:6f:33:
45:8d:15:39:cd:29:58:f9:63:a7:ed:aa:98:73:06:
a8:ab:84:04:8b:9f:f3:10:ef:fb:5f:f1:3a:47:43:
0c:72:a9:df:13:73:31:0f:4b:2b:09:28:48:c9:c4:
11:f4:e0:3d:9d:10:ad:3a:cf:e2:d6:77:e2:23:ff:
10:db:8f:17:5f:3e:6c:96:f6:08:73:75:ae:80:03:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:C6:88:08:5F:14:67:FB:FB:6E:7A:1C:7E:7A:08:B0:DF:1E:5C
X509v3 Authority Key Identifier:
keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.124.0/22
103.1.148.0/22
124.150.140.0/22
IPv6:
2401:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
97:f2:1e:ca:53:c9:12:4c:e5:6d:cb:f6:75:bb:ca:57:38:dd:
87:93:eb:aa:e6:12:77:56:bc:eb:4f:13:39:54:36:85:f0:2f:
6e:db:7e:20:b9:c1:13:c8:19:1a:7b:f1:10:d5:48:c4:8a:b2:
18:c2:02:05:1d:93:b2:4d:89:80:d7:f5:eb:b8:00:35:7d:f4:
52:52:9a:b6:e1:30:50:9e:b8:54:8a:6c:40:19:70:95:7c:ec:
c7:ec:df:8e:13:6d:ea:e6:12:48:c9:9b:c9:d6:fb:55:eb:96:
5c:03:68:b7:e0:c2:0e:79:d8:71:d1:62:1c:bc:4a:5f:85:9a:
98:97:94:44:09:52:95:30:70:c8:c2:fb:8a:3f:47:9c:f4:61:
59:98:ec:05:ca:13:7e:ca:39:12:ca:69:96:01:c8:a6:20:89:
68:2e:6d:f0:f9:a6:f7:c1:a5:46:a0:1b:41:60:7d:8f:18:f6:
0e:33:3a:06:f8:81:8e:fe:5f:44:4d:3e:e4:18:cd:db:06:18:
02:e0:b8:69:b2:ba:ea:7d:aa:87:99:b1:4a:c1:3f:f9:00:d1:
66:0e:75:7f:0e:76:07:e7:67:d5:81:e2:0b:46:c0:88:07:47:
a4:3d:33:0b:ac:9d:b4:74:b7:b3:a9:f5:78:cd:00:db:a7:86:
e1:ce:f6:2a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICNBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw
MkJBQ0MwRTcwHhcNMjQwOTIwMTUyMTA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkOTJlMS1kNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSsFeN1ut9xLg9KiCTtEM58HIUhfKR5aVFO4GHd2h9nHVoIY+ODZ9zROAZyQ
E5D7+AcL2E+nF6glMbSdDi2mrnHXh6hyhAdgliByJEJL0VnVijR1i7TfJGStDaoZ
22jTpYEhELSrbU4bv06t3l6hPiBdUOuzl46vBrgSFikXvpWicdjuhpkIt47zj7i1
CpozcYv28/25I/UXh/02615F78TQdtrIdIRlkNIJpOPcKKBsbzNFjRU5zSlY+WOn
7aqYcwaoq4QEi5/zEO/7X/E6R0MMcqnfE3MxD0srCShIycQR9OA9nRCtOs/i1nfi
I/8Q248XXz5slvYIc3WugAPIvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLP9xogI
XxRn+/tuehx+egiw3x5cMB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE
QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUI0NUEvMUU0NDhBNDgxREExMTFFMjlGNTYwNzkzMDhCMDJDRDIvMTdCQjRDMjBG
MTdFMTFFQUEzQ0M1OTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAIr9XwDBAJnAZQDBAJ8lowwDQQCAAIwBwMFACQB/QAwDQYJ
KoZIhvcNAQELBQADggEBAJfyHspTyRJM5W3L9nW7ylc43YeT66rmEndWvOtPEzlU
NoXwL27bfiC5wRPIGRp78RDVSMSKshjCAgUdk7JNiYDX9eu4ADV99FJSmrbhMFCe
uFSKbEAZcJV87Mfs344TbermEkjJm8nW+1XrllwDaLfgwg552HHRYhy8Sl+FmpiX
lEQJUpUwcMjC+4o/R5z0YVmY7AXKE37KORLKaZYByKYgiWgubfD5pvfBpUagG0Fg
fY8Y9g4zOgb4gY7+X0RNPuQYzdsGGALguGmyuup9qoeZsUrBP/kA0WYOdX8Odgfn
Z9WB4gtGwIgHR6Q9MwusnbR0t7Op9XjNANunhuHO9io=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:19 2025 by rpki-client