Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/A2120E06FD7F11EFA8C89755C4F9AE02.roa
File: A2120E06FD7F11EFA8C89755C4F9AE02.roa (raw, json)
Hash identifier: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=
Subject key identifier: 54:13:B7:A5:55:B4:6E:03:9E:DA:5D:45:0E:15:B3:6E:D9:01:D2:8B
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 09CB
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/A2120E06FD7F11EFA8C89755C4F9AE02.roa
Signing time: Mon 10 Mar 2025 07:16:49 +0000
ROA not before: Mon 10 Mar 2025 07:16:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134180
IP address blocks: 45.250.228.0/24 maxlen: 24
45.250.229.0/24 maxlen: 24
45.250.230.0/24 maxlen: 24
45.250.231.0/24 maxlen: 24
103.202.220.0/22 maxlen: 22
103.202.220.0/24 maxlen: 24
103.202.221.0/24 maxlen: 24
103.202.222.0/23 maxlen: 23
103.202.223.0/24 maxlen: 24
103.209.196.0/24 maxlen: 24
103.209.197.0/24 maxlen: 24
103.209.199.0/24 maxlen: 24
2403:6940::/32 maxlen: 32
2403:6940::/36 maxlen: 36
2403:6940:f::/48 maxlen: 48
2403:6940:1000::/36 maxlen: 36
2403:6940:1000::/48 maxlen: 48
2403:6940:1001::/48 maxlen: 48
2403:6940:1002::/48 maxlen: 48
2403:6940:1003::/48 maxlen: 48
2403:6940:1004::/48 maxlen: 48
2403:6940:1005::/48 maxlen: 48
2403:6940:1006::/48 maxlen: 48
2403:6940:1007::/48 maxlen: 48
2403:6940:1008::/48 maxlen: 48
2403:6940:1009::/48 maxlen: 48
2403:6940:100a::/48 maxlen: 48
2403:6940:100b::/48 maxlen: 48
2403:6940:100c::/48 maxlen: 48
2403:6940:2000::/36 maxlen: 36
2403:6940:2000::/48 maxlen: 48
2403:6940:2001::/48 maxlen: 48
2403:6940:2002::/48 maxlen: 48
2403:6940:2003::/48 maxlen: 48
2403:6940:2004::/48 maxlen: 48
2403:6940:2005::/48 maxlen: 48
2403:6940:2006::/48 maxlen: 48
2403:6940:2007::/48 maxlen: 48
2403:6940:3000::/36 maxlen: 36
2403:6940:4000::/36 maxlen: 36
2403:6940:5000::/36 maxlen: 36
2403:6940:6000::/36 maxlen: 36
2403:6940:7000::/36 maxlen: 36
2403:6940:8000::/36 maxlen: 36
2403:6940:9000::/36 maxlen: 36
2403:6940:a000::/36 maxlen: 36
2403:6940:b000::/36 maxlen: 36
2403:6940:c000::/36 maxlen: 36
2403:6940:d000::/36 maxlen: 36
2403:6940:e000::/36 maxlen: 36
2403:6940:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507 (0x9cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944
Validity
Not Before: Mar 10 07:16:49 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67ce91e1-106f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:2b:c7:a6:5c:22:fb:fe:d6:4e:aa:33:a5:
4a:47:ca:14:f3:c3:96:29:1a:45:db:0f:0c:88:d6:
8a:3a:a8:8d:ca:73:3a:21:d6:e8:ac:74:d8:a2:ab:
67:d2:b7:9a:6c:91:ed:bb:ef:a5:da:2d:70:be:26:
71:04:03:6c:45:ce:0d:78:7f:85:24:67:d4:95:bd:
ed:4b:d1:49:95:43:d5:1c:e1:bf:3c:a8:15:f2:68:
3d:51:a9:08:c0:5b:b3:59:d3:b9:29:97:91:77:17:
c9:1c:b1:a6:64:48:ba:25:92:82:f6:af:09:c0:b1:
66:98:85:ec:a3:cb:ad:7c:b3:0a:ae:40:0c:db:07:
60:ee:8f:50:10:46:3c:de:be:66:89:6d:c1:35:6a:
ac:3f:20:e1:81:18:fc:03:ef:c6:c1:05:10:f9:07:
f1:08:e6:bf:92:cf:0e:62:0f:28:a6:2b:4e:ba:84:
91:9c:4b:32:d4:c3:12:03:33:80:6f:06:0b:53:4e:
b2:92:72:d0:68:9a:b9:77:90:22:68:cd:ee:fa:97:
99:97:4d:d3:ed:65:e3:2a:21:e0:73:55:85:69:07:
2e:55:88:7a:c9:bd:74:76:35:88:24:53:1e:08:a9:
d6:d9:ef:a4:47:ee:8c:58:25:50:95:b6:5a:f8:f7:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:B7:A5:55:B4:6E:03:9E:DA:5D:45:0E:15:B3:6E:D9:01:D2:8B
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/A2120E06FD7F11EFA8C89755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.228.0/22
103.202.220.0/22
103.209.196.0/23
103.209.199.0/24
IPv6:
2403:6940::/32
Signature Algorithm: sha256WithRSAEncryption
a9:82:a2:0d:2a:6b:b7:c4:42:4a:40:87:86:0f:26:c9:3b:d8:
8a:c1:ab:97:bb:af:a8:4f:b1:e2:5a:0c:45:3c:ae:df:e5:ce:
ee:1e:5e:aa:ea:1b:dc:21:e8:0f:f9:f5:f8:eb:79:d4:5a:35:
af:17:08:c6:96:22:78:2b:b2:57:90:2e:5b:10:01:7a:b6:85:
31:24:61:52:ba:f8:2c:27:79:bd:e9:c2:b6:6c:5a:81:bc:fc:
a3:63:a0:c5:e1:39:4c:4c:b4:c5:ab:66:58:6f:38:7c:0b:f8:
bb:c2:ed:36:87:ab:79:8f:f6:8d:14:33:bc:f6:e5:d3:06:53:
6e:7f:6e:ac:bc:84:8b:e9:98:00:25:ea:34:e6:ee:46:6f:c9:
2b:fb:91:05:78:3e:ac:8c:15:69:23:c9:7e:93:70:2d:e0:a7:
22:aa:5f:a0:ce:22:20:22:ca:54:55:50:90:d0:7b:65:09:bc:
54:63:7f:98:bd:9f:cd:1a:8f:cf:1c:0f:ad:df:8c:54:42:d4:
fe:21:bb:24:05:9e:cf:28:5b:6b:69:0d:30:08:0f:f0:73:37:
de:a5:c0:05:71:f3:2f:2e:14:44:8f:dd:57:ae:81:93:1a:f3:
f6:cb:76:e2:57:2d:dc:fb:53:ac:71:90:cb:0c:69:8e:d2:be:
52:c5:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:34 2025 by rpki-client