Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa
File: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (raw, json)
Hash identifier: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=
Subject key identifier: 2A:93:3E:A1:A6:62:47:36:C6:21:2B:E0:77:46:E8:68:D3:10:83:2F
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 50
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa
Signing time: Wed 15 May 2024 08:43:11 +0000
ROA not before: Wed 15 May 2024 08:43:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55020
IP address blocks: 14.192.4.0/22 maxlen: 23
43.224.224.0/22 maxlen: 23
103.215.77.0/24 maxlen: 24
103.215.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535
Validity
Not Before: May 15 08:43:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6644759f-2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:a6:e7:02:de:2b:ad:40:27:ac:ae:c4:e5:
d1:32:2e:43:ed:31:e5:18:e7:d0:b3:6b:40:d6:45:
21:fa:15:1d:d2:82:64:56:bf:18:66:10:03:d9:f7:
5b:17:a8:a9:fe:a2:ae:56:64:d4:7e:d4:9f:7a:1b:
87:22:a1:fe:d8:80:ae:59:77:2c:e7:23:fb:a7:2e:
7f:75:98:ab:cf:8c:ec:b6:f7:4e:4d:3b:ab:bf:1a:
42:6f:71:1a:ef:0b:55:e7:3a:81:19:9c:20:70:16:
2e:45:37:f8:cd:1f:1d:42:a0:0f:6c:a6:d4:f5:13:
a8:3f:f9:dc:3f:d6:8a:a2:21:06:45:28:f2:5d:c7:
f6:46:94:49:7e:5a:e4:7c:da:62:69:d2:e4:23:ca:
f1:1c:36:92:17:b0:45:6a:b6:fd:e4:a6:5f:d7:54:
25:3b:35:b2:a1:a8:d3:7e:55:b2:0f:ba:5b:56:3b:
8c:a4:12:f9:20:5b:f0:aa:74:ad:fe:69:7d:ee:af:
6b:86:4f:9b:67:50:69:48:45:9e:51:56:9f:e9:db:
73:2b:46:8d:34:02:55:5a:a0:b7:95:af:52:26:95:
26:29:a7:50:9b:07:f1:f6:4e:63:81:6d:9a:0a:59:
25:d3:87:69:f6:93:73:e9:fd:7e:36:0a:f0:8e:18:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:3E:A1:A6:62:47:36:C6:21:2B:E0:77:46:E8:68:D3:10:83:2F
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.4.0/22
43.224.224.0/22
103.215.77.0-103.215.78.255
Signature Algorithm: sha256WithRSAEncryption
2d:e1:71:c5:94:aa:e4:1b:53:17:62:b5:cb:a3:d3:de:4d:fa:
b3:ab:2b:62:3d:e8:35:5c:34:cf:6c:90:54:b2:79:45:42:e4:
0c:f9:82:2d:2e:89:09:34:aa:49:82:82:70:51:8d:81:1d:33:
e2:b9:70:d3:86:55:e2:a2:72:97:7d:e5:bf:1a:c2:4b:bd:2a:
6b:83:c5:51:bf:8b:19:cc:5a:41:e2:40:6e:a0:8b:61:63:d6:
29:a2:d9:af:48:ee:71:6d:dc:a8:f7:8d:5f:28:ac:fe:e3:f4:
7a:b2:29:31:6a:bb:3f:ce:db:0a:41:71:87:a4:cc:cd:86:4b:
47:cb:6c:f8:e7:7b:2c:5d:dd:d5:ae:f7:01:04:d5:fd:51:81:
cc:6f:31:87:4f:b1:f5:3e:b9:6d:27:dc:04:c9:87:89:b4:4b:
bb:8c:93:64:26:4a:39:42:9e:24:2b:23:1e:45:29:f8:13:5b:
32:83:ab:c8:a0:3d:ba:e4:5a:06:25:cd:83:ee:4a:6b:f0:41:
ac:be:63:59:52:bc:3e:83:f2:cc:a4:ca:67:27:8e:90:61:b0:
f5:97:dc:a8:d3:7b:b6:9b:bf:de:05:3d:fc:9c:7a:30:fb:f5:
ab:21:40:70:06:fe:56:05:7f:3f:45:be:11:a1:83:0e:1d:65:
3f:c0:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:57 2025 by rpki-client