Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
File: C981BB3CF36A11E983B1D764C4F9AE02.roa (raw, json)
Hash identifier: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=
Subject key identifier: 13:46:8C:4F:31:21:8C:48:F1:B2:FB:06:6E:F9:E6:A4:D9:D7:14:95
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0C98
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
Signing time: Fri 28 Mar 2025 18:29:32 +0000
ROA not before: Fri 28 Mar 2025 18:29:32 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 63526
IP address blocks: 103.112.52.0/22 maxlen: 22
103.112.52.0/23 maxlen: 23
103.112.52.0/24 maxlen: 24
103.112.53.0/24 maxlen: 24
103.112.54.0/23 maxlen: 23
103.112.54.0/24 maxlen: 24
103.112.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3224 (0xc98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8
Validity
Not Before: Mar 28 18:29:32 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e6ea8c-3d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:61:f5:0e:6a:ce:f9:fb:91:0f:3d:e9:68:
12:94:14:55:8a:e1:8b:f3:85:b7:25:df:e4:bb:a0:
1f:bf:15:c1:f0:9b:66:64:e2:c2:e3:35:63:c9:b3:
e7:d0:ff:f5:6f:9b:3b:d6:f7:82:b7:41:99:43:cc:
6c:55:06:2c:9a:40:f2:46:99:bc:f4:60:70:a3:dd:
49:9e:3e:94:6b:11:e0:61:ec:f6:81:f8:52:ac:98:
7c:50:cf:04:2b:b1:0b:5c:2f:d0:98:cb:07:06:81:
ca:68:6c:22:e5:f7:ae:2c:63:48:90:dd:1f:8b:c0:
c3:f1:b8:0f:7c:4a:67:b2:52:a8:14:86:9c:f5:22:
a3:e6:f6:af:15:00:3d:50:ee:2f:e3:c3:38:69:7b:
8b:47:0d:6f:96:5a:97:b9:2f:08:7f:72:37:2a:84:
e3:05:bc:35:4e:14:c8:72:f7:98:23:e3:3a:b5:e5:
84:9d:f0:73:87:e5:0a:e5:ae:a6:8d:b4:75:67:30:
d7:03:d5:0c:3f:1c:d6:68:b7:f9:ec:32:e5:31:c0:
0c:54:f6:e1:75:c2:e6:f9:89:78:80:c8:36:d1:fa:
f1:cd:99:b2:cf:8f:fc:85:9b:67:5b:ac:64:c9:b9:
d1:bc:3f:a2:ff:50:70:37:af:e3:a7:a5:16:8c:b2:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:8C:4F:31:21:8C:48:F1:B2:FB:06:6E:F9:E6:A4:D9:D7:14:95
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.52.0/22
Signature Algorithm: sha256WithRSAEncryption
30:22:6c:83:8f:b4:06:ec:4b:ac:17:0c:17:94:85:05:f4:25:
1f:b8:c2:29:a4:c6:d1:0c:2f:38:12:9f:15:31:08:65:6b:a8:
02:38:9e:04:4e:f1:0e:aa:dc:20:a1:4a:3e:76:b6:4c:01:02:
18:82:cf:e8:17:65:45:c3:4d:e2:69:3d:03:cd:91:6d:84:53:
45:1e:f2:ac:02:53:67:4c:e3:dd:87:54:3b:e5:37:82:5b:14:
1f:e4:56:d1:49:1e:0f:46:5e:48:90:4a:9d:01:a2:00:2f:07:
6c:a8:cc:bd:f9:03:29:d0:2f:6d:5a:07:cd:c3:7a:07:83:b3:
f8:3d:e5:04:80:3d:64:92:e6:53:1b:75:b0:24:a5:e6:f4:91:
81:8e:65:77:4d:8a:2d:45:01:79:82:7f:3c:eb:27:3b:10:50:
71:7b:2d:be:2e:a1:1a:a0:2c:e2:52:c1:d7:ef:89:b7:1d:09:
0c:e7:25:ad:f1:e8:06:0d:58:df:02:89:d5:aa:43:0b:32:27:
bd:bc:9c:c8:71:bf:df:57:73:99:78:cc:1d:d4:59:82:b1:b9:
34:6a:7a:1c:79:e2:3b:12:4d:6c:f0:10:cf:41:73:13:00:0d:
0e:c5:ef:51:04:f6:3b:9a:3f:41:4b:a8:0e:0f:81:89:a1:8b:
ce:67:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:24:45 2025 by rpki-client