Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa
File: C82A0778680811EE88B5527CC4F9AE02.roa (raw, json)
Hash identifier: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=
Subject key identifier: AF:89:46:40:F5:FC:22:D1:11:70:D9:E0:8E:F6:B4:08:77:27:07:0D
Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial: 0192
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa
Signing time: Mon 25 Nov 2024 02:25:42 +0000
ROA not before: Mon 25 Nov 2024 02:25:42 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 149021
IP address blocks: 103.176.204.0/23 maxlen: 23
103.176.204.0/24 maxlen: 24
103.176.205.0/24 maxlen: 24
2401:43e0::/48 maxlen: 48
2401:43e0:1::/48 maxlen: 48
2401:43e0:2::/47 maxlen: 47
2401:43e0:4::/46 maxlen: 46
2401:43e0:8::/45 maxlen: 45
2401:43e0:10::/44 maxlen: 44
2401:43e0:20::/43 maxlen: 43
2401:43e0:40::/42 maxlen: 42
2401:43e0:80::/41 maxlen: 41
2401:43e0:100::/40 maxlen: 40
2401:43e0:200::/39 maxlen: 39
2401:43e0:400::/38 maxlen: 38
2401:43e0:800::/37 maxlen: 37
2401:43e0:1000::/36 maxlen: 36
2401:43e0:2000::/35 maxlen: 35
2401:43e0:4000::/34 maxlen: 34
2401:43e0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Validity
Not Before: Nov 25 02:25:42 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6743e025-2749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:e3:f2:42:d5:fb:a1:be:30:26:ba:ad:3c:
b0:d7:2e:9f:ad:73:80:6b:a6:30:d5:e0:99:9a:c8:
88:df:ed:15:02:7c:c7:0f:8d:e6:ad:ea:f9:36:3f:
7e:1e:03:c5:d8:11:a5:2c:a8:90:9a:06:4a:94:c8:
b2:66:51:71:dd:6f:e8:57:a6:62:5f:62:a2:cc:95:
a4:5c:e4:b2:12:59:5c:bd:32:20:1f:9a:03:ae:e2:
fd:b5:3b:16:93:a6:93:91:67:73:99:90:3c:a1:d5:
26:0b:a9:c0:cf:15:51:ab:ba:78:5c:7d:6a:38:ae:
68:26:c1:50:29:45:be:61:2d:78:f9:b5:99:d2:ab:
19:99:43:a7:8b:ba:95:d4:8e:55:71:0b:c9:7c:08:
7b:b6:33:fa:bb:de:c5:02:19:e2:1e:3e:db:2a:02:
cc:cf:4b:08:6b:c2:aa:5e:d8:3b:26:7e:9e:83:77:
f9:8a:bc:7d:e4:0d:79:4c:81:df:d9:a0:73:04:a4:
f8:a0:6b:60:4c:49:c7:04:be:a2:ad:32:6b:2d:12:
3d:e2:a0:d6:6b:68:a3:11:68:30:ec:ac:8c:5f:00:
e0:0d:d6:7e:cf:3f:62:7a:ec:64:4d:36:35:6d:ac:
a0:ed:90:b2:20:29:40:92:c2:2e:74:89:20:d0:66:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:46:40:F5:FC:22:D1:11:70:D9:E0:8E:F6:B4:08:77:27:07:0D
X509v3 Authority Key Identifier:
keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.204.0/23
IPv6:
2401:43e0::/32
Signature Algorithm: sha256WithRSAEncryption
45:b4:0c:df:40:e3:2b:bc:5f:ec:6a:82:fe:13:5f:62:9f:46:
77:5b:d7:d8:0f:3e:59:7f:db:ef:8f:17:89:25:6a:ad:6f:22:
87:da:af:23:55:c6:b7:44:0a:06:36:f0:52:26:96:47:54:c2:
e2:ce:ef:bf:3a:63:65:4d:0c:99:57:a8:5e:5b:1d:88:d7:18:
ba:35:fa:ec:06:df:26:f5:92:18:6b:84:85:3f:85:8d:b2:ea:
12:5f:7e:0b:ea:b4:f5:fe:01:20:96:0a:03:20:93:15:05:4e:
28:ef:86:47:6c:05:ec:a5:cc:0e:7b:00:9f:df:08:74:51:eb:
fe:95:e2:4b:d3:7f:2a:8d:05:33:02:c5:f0:a9:7d:eb:1f:2a:
71:6d:fa:53:48:87:3a:94:45:61:85:2f:2f:9d:10:29:21:6f:
99:5d:a3:fb:75:df:77:39:3c:52:6f:63:23:16:d7:9f:55:dc:
7a:36:53:a1:8b:e4:98:7b:e3:07:db:ff:4b:2e:56:5f:9a:1b:
99:15:2d:95:d7:09:ff:de:ca:49:01:5c:be:40:36:19:bf:4d:
f0:02:2c:68:ca:c8:11:b0:f5:82:76:df:cb:92:54:b0:7a:32:
df:e0:15:87:49:76:02:14:05:45:85:0d:b1:a3:50:52:e2:f2:
1e:da:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:29 2025 by rpki-client