Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
File: F85178E05DD111EF83CF1063C4F9AE02.roa (raw, json)
Hash identifier: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=
Subject key identifier: FE:23:EA:F3:14:C1:CE:B6:7B:41:20:2E:7E:6E:33:7E:42:89:48:6C
Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial: 04A5
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
Signing time: Fri 06 Dec 2024 23:42:43 +0000
ROA not before: Fri 06 Dec 2024 23:42:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137239
IP address blocks: 103.105.212.0/22 maxlen: 22
103.105.212.0/24 maxlen: 24
103.105.213.0/24 maxlen: 24
103.105.214.0/24 maxlen: 24
103.105.215.0/24 maxlen: 24
2403:240::/32 maxlen: 32
2403:240::/34 maxlen: 34
2403:240:4000::/34 maxlen: 34
2403:240:8000::/34 maxlen: 34
2403:240:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91385F2
Validity
Not Before: Dec 6 23:42:42 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67538bf2-6d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:a8:f3:33:ca:87:80:52:55:ee:bc:d1:4d:
b1:3c:c4:fe:86:1b:5e:cb:52:89:04:ff:05:a5:63:
42:07:1e:cd:01:a7:5e:52:16:1c:80:f6:38:db:5f:
b5:82:9e:9f:71:6a:72:a2:cc:02:18:1c:35:a4:e8:
c7:26:ac:5b:72:d5:7d:cd:d9:ae:81:a4:03:bb:35:
5b:7f:83:3c:30:fd:dd:fc:97:d7:eb:af:38:fb:28:
95:cd:2c:45:bc:6f:40:6a:15:cb:95:32:1f:dd:0f:
4a:9c:1f:ec:fd:7c:be:3e:04:a9:61:7e:41:5a:d8:
5a:ae:55:09:da:56:9d:b5:cd:e7:d5:51:8b:9c:8d:
ba:c9:5e:94:99:08:35:2f:ce:d6:69:39:ed:4c:70:
b2:52:25:a4:2c:84:90:17:b9:76:36:14:91:e9:df:
00:eb:87:3a:e9:7b:a7:a0:70:57:d4:89:b0:54:5e:
00:dd:b4:ad:3b:77:4a:10:74:b6:16:0b:3b:3d:fa:
8c:f3:9b:f6:a7:42:43:33:c0:13:5a:5f:37:22:2e:
ee:de:50:30:4a:ea:83:71:5f:77:57:2b:70:6b:0e:
73:84:19:85:27:c4:c2:fc:b5:b7:6f:49:7e:85:f2:
ab:0c:25:9f:f6:f6:e1:d8:cc:d9:cb:61:80:88:94:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:EA:F3:14:C1:CE:B6:7B:41:20:2E:7E:6E:33:7E:42:89:48:6C
X509v3 Authority Key Identifier:
keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.212.0/22
IPv6:
2403:240::/32
Signature Algorithm: sha256WithRSAEncryption
24:fe:ea:31:a7:0f:61:0c:ef:79:47:37:64:be:47:be:ab:6b:
11:4c:13:5d:42:f5:15:5c:74:af:39:aa:97:55:ac:9e:04:7f:
5c:94:48:c9:17:3f:78:9c:08:98:53:1c:e3:ea:cb:42:c7:8d:
9d:8f:70:a1:db:75:f2:7f:71:1c:c9:24:d0:33:00:f9:07:82:
53:02:0d:2d:f3:91:8f:db:75:68:d2:e3:ea:7e:f4:f9:8e:8f:
2b:ad:08:8a:ae:83:c5:f8:0e:cc:71:45:f6:19:6f:c1:30:90:
93:76:a1:56:6b:f2:21:4f:46:58:5d:d7:5b:4c:f7:03:a7:49:
9d:7f:db:81:aa:33:7c:38:86:b7:d0:4e:8f:42:1b:2d:91:0f:
fa:56:f3:da:dd:78:7f:08:b9:c0:d4:54:38:79:d2:43:43:de:
eb:39:f3:95:96:2e:00:06:96:38:0a:0b:1d:81:7d:cf:96:e0:
56:e3:02:ba:b9:58:18:a6:44:77:c7:be:59:1b:03:9e:1d:f1:
b5:2d:6b:6a:d0:12:a6:04:59:b3:4c:b9:8c:33:c7:5c:71:32:
78:4d:48:77:6d:da:e6:19:de:71:c9:a0:e4:79:de:86:6f:e9:
38:8a:a3:8a:db:02:fa:07:4f:f9:14:f2:18:fc:c3:d9:de:39:
03:57:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:22 2025 by rpki-client