Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa
File: 12E476745E1A11EFB61C6844C4F9AE02.roa (raw, json)
Hash identifier: 3IAJ+9W9KeEq7QTVszcmLK1ObY/QRBXZfU+eVRZCpyc=
Subject key identifier: E0:B9:D8:5B:05:84:5C:C5:23:44:C3:BA:5E:A9:5C:89:54:82:0D:78
Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial: 0EDB
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa
Signing time: Sat 24 Aug 2024 18:06:30 +0000
ROA not before: Sat 24 Aug 2024 18:06:30 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134562
IP address blocks: 103.120.164.0/22 maxlen: 22
103.120.164.0/24 maxlen: 24
103.120.165.0/24 maxlen: 24
103.120.166.0/24 maxlen: 24
103.120.167.0/24 maxlen: 24
2403:5a40::/32 maxlen: 32
2403:5a40::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BF1E
Validity
Not Before: Aug 24 18:06:30 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca2126-2200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:12:b0:b0:78:e6:23:48:37:de:12:52:0b:
8d:84:d7:1d:30:4f:db:a8:99:b9:01:be:2f:40:ac:
65:10:05:33:3b:c4:ef:2b:1f:e0:8e:94:1f:7b:e7:
95:23:15:62:c6:2f:02:8c:89:1d:dc:ff:2a:ba:47:
d7:f1:d3:57:2f:11:10:1b:15:81:5d:88:b7:a2:ee:
95:95:27:65:27:50:7c:a0:5c:76:e6:33:77:40:02:
96:a9:fe:73:99:60:98:48:fa:5a:88:bc:2a:6d:d8:
65:9a:c9:0e:43:0b:24:37:50:c1:f2:c9:16:d8:a7:
e9:32:b8:15:fe:98:eb:e8:4c:a8:e2:98:c8:8b:58:
55:48:f8:da:04:e5:0f:a0:db:82:b1:24:03:fb:ca:
4e:6b:30:aa:20:f6:f6:e2:80:f9:75:e1:39:84:ab:
8e:32:a5:88:8e:f9:77:eb:3e:a0:e0:5b:0c:16:7b:
9c:e8:cb:f4:c8:a8:f7:e4:12:7b:ba:23:c7:19:90:
56:cb:a7:06:12:c9:da:d0:44:68:58:63:d6:34:de:
de:10:d5:ff:59:23:ad:15:82:73:6a:cb:16:75:62:
b0:fe:85:cf:aa:8d:d2:de:fb:f3:e1:8a:3e:c8:8c:
4b:73:ea:c8:88:1a:86:76:6b:2e:1f:cb:ac:8b:91:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:D8:5B:05:84:5C:C5:23:44:C3:BA:5E:A9:5C:89:54:82:0D:78
X509v3 Authority Key Identifier:
keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.164.0/22
IPv6:
2403:5a40::/32
Signature Algorithm: sha256WithRSAEncryption
96:f5:a7:2d:c9:0b:ae:15:7d:f2:3f:18:ca:ad:9d:da:66:02:
85:29:b2:6a:b6:c0:61:6a:45:9b:c4:32:ae:41:95:0b:e3:c1:
72:65:88:97:a3:c4:9d:39:04:86:f6:b1:20:69:44:9f:01:5a:
78:35:07:32:13:10:45:8f:0a:90:7c:47:c6:f6:81:92:a0:46:
46:bf:7a:32:b7:bc:c0:ed:4f:52:aa:78:18:9a:c1:c3:93:54:
4b:c4:58:98:5d:8c:12:4e:c4:52:a8:b9:30:51:9a:73:35:ab:
07:40:90:8c:51:ca:c6:e3:1f:02:e8:b5:b7:70:ab:ae:85:f8:
9f:83:a3:42:c3:71:b8:32:a3:10:d6:89:8c:09:75:95:e0:7a:
ec:dd:6e:76:43:63:6a:87:37:11:7a:cc:e0:d7:e8:88:f9:46:
44:ed:57:fd:46:e9:b5:0d:93:bd:95:03:16:4c:3d:6d:16:1b:
5c:64:37:36:63:27:79:45:bd:71:60:bd:59:d2:c4:7b:e8:23:
7b:97:24:4c:a1:af:75:1c:50:37:5b:40:21:10:03:fa:be:2b:
4f:34:a8:aa:11:de:85:8f:a8:a6:be:52:07:df:df:63:b9:dd:
25:80:3f:f0:2e:2c:5a:15:49:c5:d6:54:bd:a9:06:fe:80:a5:
cd:39:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:19 2025 by rpki-client