Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa
File: 65866C4815D111EABE986319C4F9AE02.roa (raw, json)
Hash identifier: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE=
Subject key identifier: AE:07:4B:50:5E:A7:0C:8A:27:A0:03:09:2F:84:6C:5B:4C:9D:86:14
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0BB0
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa
Signing time: Tue 14 Jan 2025 18:56:59 +0000
ROA not before: Tue 14 Jan 2025 18:56:59 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134971
IP address blocks: 103.252.224.0/22 maxlen: 24
123.253.220.0/22 maxlen: 24
2401:7940::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Jan 14 18:56:59 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6786b37b-e63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:b6:f3:c3:79:4b:43:4d:28:8a:99:7e:4d:
a7:fc:20:01:7d:5e:1f:28:e5:ad:26:eb:f2:6d:d0:
14:01:92:21:77:64:07:3c:fe:2b:b1:95:dc:b6:16:
39:5f:b4:3a:f8:e7:de:bb:a5:11:83:6e:55:7f:b3:
71:4d:8f:71:82:70:37:37:21:70:4f:da:c4:86:48:
b4:e1:cf:f5:f8:f4:d7:7f:19:0d:a5:cf:20:e7:b7:
b7:66:36:eb:b9:e6:28:60:1f:75:09:43:b8:7c:d2:
ca:84:f1:49:1e:c0:fa:ef:f1:da:1d:4a:af:9e:ad:
a5:54:f7:5c:b8:97:28:f1:e5:bb:a4:e0:e0:0a:97:
4e:b6:b4:88:c0:9e:a0:2f:c0:d4:ae:3e:7b:73:f4:
e3:79:68:d8:dc:71:49:d4:da:2e:9f:22:f6:b3:54:
79:9f:06:c8:ca:18:7f:98:54:e0:14:30:9e:5b:62:
e8:a9:06:2b:fe:81:5e:ef:ad:88:47:37:b5:f6:fe:
4b:67:33:38:8c:4d:aa:e9:ac:70:9b:c4:71:f8:17:
5d:6c:1c:ec:9c:fc:d0:ea:78:62:1d:ac:de:14:b7:
61:28:27:f6:68:b3:01:fd:3d:f3:62:53:e8:f7:7a:
63:b6:bf:90:59:6c:40:23:75:b9:e6:88:9c:0c:8d:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:4B:50:5E:A7:0C:8A:27:A0:03:09:2F:84:6C:5B:4C:9D:86:14
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.224.0/22
123.253.220.0/22
IPv6:
2401:7940::/32
Signature Algorithm: sha256WithRSAEncryption
4f:59:fd:f4:1b:4f:0b:7a:3a:57:66:97:c8:a5:b1:17:1c:ae:
77:ec:e6:d4:0e:c9:04:89:91:4f:1f:5c:79:f9:db:04:d1:31:
a5:a7:f9:5e:54:f4:c5:cd:9c:78:a4:2e:cb:8c:9a:71:1c:86:
cd:e5:58:83:3a:dc:80:c7:f2:bf:ee:2f:34:02:d4:52:3f:b3:
af:7f:1c:8d:93:36:8f:ce:3f:87:1e:fe:e0:b1:96:59:9e:e5:
37:2d:44:61:47:f1:9f:cb:48:c0:6e:76:06:d4:32:fa:ed:9f:
04:63:29:f5:8b:e3:fb:2d:fc:19:e3:81:99:a7:ab:b4:0f:6f:
bf:a8:61:bb:9d:b5:bf:24:18:98:a9:be:32:09:3b:e5:c9:cd:
b6:f3:01:d1:da:69:d7:cc:fd:c3:7f:27:3c:e9:f5:48:63:51:
1a:c8:52:61:02:95:3f:f4:a6:60:04:d1:2d:20:9b:af:02:e7:
89:20:a0:3b:31:94:20:11:c4:09:a7:0f:23:82:79:40:4b:b3:
9e:fa:4e:fc:0e:38:44:9a:c3:75:f3:ee:2c:05:05:6e:c2:8e:
30:c8:4e:7c:e3:53:62:6f:80:0b:84:eb:8c:d3:9f:1c:a8:c5:
86:40:97:c6:6c:9d:bb:f3:cb:c6:e2:95:8d:f1:e7:55:22:0a:
c8:7f:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:24:02 2025 by rpki-client