Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa
File: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (raw, json)
Hash identifier: gigu9XXG4TciW/baJe+D9FNij/SMJDKtLbxaQE6wPW8=
Subject key identifier: 33:A0:81:EC:43:52:58:60:4E:8E:17:A1:C2:64:45:69:16:D3:4F:C3
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 06A3
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa
Signing time: Fri 13 Dec 2024 06:18:12 +0000
ROA not before: Fri 13 Dec 2024 06:18:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132395
IP address blocks: 103.20.24.0/22 maxlen: 22
103.42.208.0/22 maxlen: 24
202.152.68.0/24 maxlen: 24
202.152.76.0/22 maxlen: 22
202.152.76.0/24 maxlen: 24
202.152.77.0/24 maxlen: 24
202.152.78.0/24 maxlen: 24
202.152.79.0/24 maxlen: 24
202.152.88.0/22 maxlen: 22
202.160.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Dec 13 06:18:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675bd1a4-0ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:b1:64:fe:44:ef:63:45:0a:e7:50:c2:9f:
cc:87:65:1b:06:fa:c8:dc:ed:7a:8e:c2:c5:f6:9b:
14:97:60:6e:aa:61:d9:bc:a7:db:1f:91:ab:30:67:
8c:a4:1f:7f:37:be:07:60:09:d3:21:62:c5:70:83:
10:e7:a4:04:61:ea:4d:fa:13:bd:b9:bc:3d:20:51:
d5:e2:f6:2d:c4:2d:b0:99:ee:24:b8:7e:fb:c0:44:
d3:67:38:84:a1:fe:f0:2e:61:be:98:64:eb:ce:af:
78:98:72:76:89:8a:41:3b:7c:f0:af:6c:b5:51:3d:
91:5a:63:aa:da:e2:e0:74:5f:46:cf:35:ca:0f:35:
1a:34:27:b6:da:2a:53:8a:57:9e:56:e3:87:bc:ff:
a2:ef:19:80:af:2a:a7:86:27:75:45:43:08:b3:e8:
4c:29:76:4a:3f:bd:6f:0c:14:87:73:2d:01:8f:af:
47:7d:f9:49:c6:2a:24:a8:ed:48:ce:7d:9a:22:d0:
3b:c6:40:e8:c3:62:97:15:28:76:48:39:8b:94:cc:
80:1d:39:e1:9d:da:a6:50:ad:9d:12:a2:d7:7e:4f:
53:d9:53:82:34:75:5e:c7:f9:42:d9:bf:21:a2:4a:
fb:4a:54:cd:10:77:5e:90:39:71:c9:8c:66:15:42:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:81:EC:43:52:58:60:4E:8E:17:A1:C2:64:45:69:16:D3:4F:C3
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.24.0/22
103.42.208.0/22
202.152.68.0/24
202.152.76.0/22
202.152.88.0/22
202.160.32.0/20
Signature Algorithm: sha256WithRSAEncryption
51:86:1e:6b:00:56:53:f5:d7:00:88:ee:ba:e6:61:b1:71:59:
2a:68:ce:f8:80:28:7c:64:24:c2:8b:99:3d:3b:49:2e:2e:9d:
77:39:39:93:8f:fe:2e:d1:c6:bb:be:1f:e1:cb:98:e7:12:dc:
d9:04:0b:da:ea:12:14:74:f7:be:a0:65:34:d5:80:f5:d3:66:
b7:69:d8:e7:5a:85:d7:0b:9b:54:5d:f8:e7:1a:83:44:1d:6f:
d1:6d:65:7d:0f:26:a9:62:63:dd:50:c2:d9:ef:f5:ce:be:02:
d5:de:1b:24:16:de:a5:cb:c1:f9:f9:31:94:20:12:f9:65:09:
14:07:7e:26:02:f9:61:3f:22:78:12:1a:c7:9b:e4:7f:b7:85:
9a:17:b2:13:41:1a:de:d5:ec:17:7a:7f:02:f6:df:04:70:70:
a1:81:95:5b:87:56:db:e6:10:ca:ed:a9:04:6e:01:e0:0a:7e:
8a:ae:57:75:94:bb:d4:d0:89:e4:2a:b0:95:be:a2:94:12:a0:
0a:13:b5:09:5c:b6:23:7f:dc:ab:aa:b2:77:84:93:58:ba:d6:
ea:d8:0b:26:c3:bc:12:b4:87:9e:5f:4e:42:fc:54:26:3b:93:
4e:73:e3:15:50:41:7b:ea:cc:bc:b2:26:ee:71:a7:87:cb:9c:
b8:01:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:26 2025 by rpki-client