Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/8A721F4EB10C11E5BB6B2A16C4F9AE02.roa
File: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (raw, json)
Hash identifier: mvyjt+3dRIE1/Krz/XL4fNVu3c2fcm82NTuO/MfHBcQ=
Subject key identifier: E1:71:92:08:E6:D7:72:89:F5:9B:9B:DA:72:A3:55:BB:55:0B:6C:F0
Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial: 25C8
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/8A721F4EB10C11E5BB6B2A16C4F9AE02.roa
Signing time: Mon 23 Dec 2024 08:04:01 +0000
ROA not before: Mon 23 Dec 2024 08:04:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38203
IP address blocks: 103.4.116.0/22 maxlen: 22
103.4.116.0/22 maxlen: 24
103.4.116.0/24 maxlen: 24
103.4.117.0/24 maxlen: 24
103.4.118.0/24 maxlen: 24
103.4.119.0/24 maxlen: 24
103.234.200.0/22 maxlen: 22
103.234.200.0/24 maxlen: 24
103.234.201.0/24 maxlen: 24
103.234.202.0/24 maxlen: 24
103.234.203.0/24 maxlen: 24
103.251.120.0/22 maxlen: 22
103.251.120.0/22 maxlen: 24
103.251.120.0/24 maxlen: 24
103.251.121.0/24 maxlen: 24
103.251.122.0/24 maxlen: 24
103.251.123.0/24 maxlen: 24
163.47.144.0/22 maxlen: 22
163.47.144.0/22 maxlen: 24
163.47.144.0/24 maxlen: 24
163.47.145.0/24 maxlen: 24
163.47.146.0/24 maxlen: 24
163.47.147.0/24 maxlen: 24
202.51.176.0/20 maxlen: 20
202.51.176.0/20 maxlen: 24
202.51.176.0/24 maxlen: 24
202.51.177.0/24 maxlen: 24
202.51.178.0/24 maxlen: 24
202.51.179.0/24 maxlen: 24
202.51.180.0/24 maxlen: 24
202.51.181.0/24 maxlen: 24
202.51.182.0/24 maxlen: 24
202.51.183.0/24 maxlen: 24
202.51.184.0/24 maxlen: 24
202.51.185.0/24 maxlen: 24
202.51.186.0/24 maxlen: 24
202.51.187.0/24 maxlen: 24
202.51.188.0/24 maxlen: 24
202.51.189.0/24 maxlen: 24
202.51.190.0/24 maxlen: 24
202.51.191.0/24 maxlen: 24
2402:b500::/32 maxlen: 48
2402:b500:1::/48 maxlen: 48
2402:b500:2::/48 maxlen: 48
2402:b500:3::/48 maxlen: 48
2402:b500:4::/48 maxlen: 48
2402:b500:5::/48 maxlen: 48
2402:b500:31::/48 maxlen: 48
2402:b500:1000::/44 maxlen: 44
2402:b500:1000::/48 maxlen: 48
2402:b500:1001::/48 maxlen: 48
2402:b500:1002::/48 maxlen: 48
2402:b500:1003::/48 maxlen: 48
2402:b500:1004::/48 maxlen: 48
2402:b500:1005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9672 (0x25c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91240E6
Validity
Not Before: Dec 23 08:04:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67691971-7ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:e4:92:75:88:a9:9c:33:49:09:df:07:20:
da:f3:68:ac:44:9f:cb:bc:81:2a:9c:1e:cb:bf:3b:
fe:c4:7b:41:a2:75:dc:ff:cc:cd:7e:7f:a9:89:c9:
09:98:3c:bc:10:e7:08:b0:1d:a7:0d:06:e8:8b:67:
3d:a4:7f:4f:49:ef:2a:b3:28:84:8d:91:13:cb:7d:
03:a3:2d:77:55:bf:cd:0d:37:3a:ae:02:0c:61:3d:
1e:bb:42:70:a6:f3:3e:64:3a:a3:75:a2:c6:cb:e3:
99:17:2e:7e:80:5a:ce:10:db:b5:6a:2d:e4:bf:11:
12:40:09:e9:cb:be:6c:3e:8f:be:3a:c6:d8:a3:0e:
b6:eb:3b:dc:39:f6:64:5a:38:bc:8d:78:da:b3:01:
91:19:93:df:9d:ae:53:ee:5a:fa:6a:3b:f6:68:50:
c1:59:5c:39:93:2e:36:c3:01:b2:a1:33:88:bc:5d:
31:de:bc:b4:c0:01:fe:5a:d8:aa:f5:12:d8:28:5d:
99:7d:d4:b0:42:2c:29:90:fc:c4:0d:e6:55:f1:f1:
61:87:2b:59:e7:05:25:b1:ba:cb:72:05:f7:8b:bc:
e5:d3:d4:5b:2d:e2:a6:ff:76:5e:ba:f3:9d:a0:98:
0e:b9:67:57:43:e2:ef:65:db:8e:fa:6c:01:27:1f:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:92:08:E6:D7:72:89:F5:9B:9B:DA:72:A3:55:BB:55:0B:6C:F0
X509v3 Authority Key Identifier:
keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/8A721F4EB10C11E5BB6B2A16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.116.0/22
103.234.200.0/22
103.251.120.0/22
163.47.144.0/22
202.51.176.0/20
IPv6:
2402:b500::/32
Signature Algorithm: sha256WithRSAEncryption
4e:94:52:8d:25:f8:05:96:30:af:c9:0f:e2:56:1b:f3:a5:7c:
3e:72:7d:e3:af:9c:6d:3e:a5:94:12:b8:fa:a5:85:71:42:b3:
16:64:24:02:6d:0a:88:91:43:c3:fe:01:f3:2c:93:c7:92:13:
9b:41:a1:43:ab:56:62:e9:dc:86:f4:61:14:48:cc:ce:b6:fa:
bd:45:ae:c8:7c:a6:62:0c:ff:2d:7d:e2:b7:e9:3b:88:6e:d4:
93:9a:1e:75:7f:84:f6:25:97:32:d2:43:7c:d6:8e:a8:28:f2:
48:6d:b1:89:9a:11:71:b4:9c:83:5c:f2:85:f9:2a:14:09:d1:
2f:c7:86:b3:69:19:27:82:b9:03:73:8e:59:86:c0:ff:03:ae:
ca:e3:0c:35:cd:c2:32:6a:c1:34:d0:07:a9:cf:69:82:5c:95:
3b:22:54:8e:33:21:6a:7a:69:a6:68:95:b0:b6:d3:1f:35:22:
53:62:50:66:b0:b7:fb:d8:70:61:4c:1a:b6:9c:5d:53:52:d0:
0c:09:ad:67:8a:9a:03:38:66:9f:ea:38:66:08:ca:e8:28:2b:
48:f6:01:32:57:4d:56:8e:bd:da:a5:54:10:d5:76:9d:da:f5:
6e:f7:13:69:2e:59:e8:54:21:49:ff:3d:d4:c1:3f:07:57:1b:
b2:7d:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:15 2025 by rpki-client