Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/96E3EB58B2B711EEAE882255C4F9AE02.roa
File: 96E3EB58B2B711EEAE882255C4F9AE02.roa (raw, json)
Hash identifier: tzTNsTyay71DnZ6Tdbo+sDlbNh8WzoY7t1vlYqQ5Tec=
Subject key identifier: 28:49:28:3B:D7:7F:BE:A3:9D:73:86:CB:B5:7F:45:58:8B:64:99:ED
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 05B5
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/96E3EB58B2B711EEAE882255C4F9AE02.roa
Signing time: Sun 26 Jan 2025 22:51:56 +0000
ROA not before: Sun 26 Jan 2025 22:51:56 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139922
IP address blocks: 103.147.62.0/23 maxlen: 24
2405:acc0::/32 maxlen: 32
2405:acc0::/48 maxlen: 48
2405:acc0:1::/48 maxlen: 48
2405:acc0:4::/48 maxlen: 48
2405:acc0:6::/48 maxlen: 48
2405:acc0:169::/48 maxlen: 48
2405:acc0:1000::/40 maxlen: 40
2405:acc0:1100::/40 maxlen: 40
2405:acc0:1200::/48 maxlen: 48
2405:acc0:1204::/48 maxlen: 48
2405:acc0:1205::/48 maxlen: 48
2405:acc0:1206::/48 maxlen: 48
2405:acc0:1207::/48 maxlen: 48
2405:acc0:1210::/48 maxlen: 48
2405:acc0:1300::/48 maxlen: 48
2405:acc0:1304::/48 maxlen: 48
2405:acc0:1305::/48 maxlen: 48
2405:acc0:1306::/48 maxlen: 48
2405:acc0:1307::/48 maxlen: 48
2405:acc0:1310::/48 maxlen: 48
2405:acc0:1400::/48 maxlen: 48
2405:acc0:1410::/48 maxlen: 48
2405:acc0:1504::/48 maxlen: 48
2405:acc0:1505::/48 maxlen: 48
2405:acc0:1510::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1
Validity
Not Before: Jan 26 22:51:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796bc8b-2b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:03:5a:14:4e:09:b5:e5:5a:14:5d:8f:35:
c7:99:4a:4f:ad:b8:b9:5b:e7:ec:b2:1e:54:40:56:
b1:44:86:bd:44:80:cf:75:50:e3:0a:bb:f3:2c:93:
33:05:8e:6e:a0:ac:c1:bb:c9:d6:7d:5e:13:c8:f4:
e4:dd:df:3e:b3:5b:a1:d8:a7:de:d5:0a:4d:2d:a8:
41:66:78:8a:7e:cb:de:f4:12:92:80:21:cc:38:4f:
5b:01:0f:81:e4:d6:2d:57:e0:7e:62:d1:ee:ea:80:
ef:5f:4e:c9:5f:e9:70:c3:5d:bd:9c:00:b4:48:45:
0b:93:4d:a2:22:00:da:13:d3:f4:f1:d4:32:e8:75:
5c:36:da:55:a5:c5:5b:c2:5b:c8:4d:b8:00:c5:f3:
60:00:c2:fa:0c:33:72:d6:ba:5c:8e:5a:df:04:fc:
71:0c:b4:d7:ce:bd:6e:10:f2:53:d9:c0:72:4d:55:
2f:49:cb:ab:46:cc:46:0e:13:ce:93:13:46:9e:07:
4d:9f:44:9e:67:e2:29:cc:ea:9d:23:86:9b:cf:22:
04:b9:4e:9a:d9:d4:9f:f2:08:9f:7b:60:0d:18:ca:
e1:17:6f:59:54:04:4d:72:36:34:50:a7:ce:fd:54:
d0:6b:9f:fd:e6:26:6e:e4:d4:07:b6:5f:44:6c:7b:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:28:3B:D7:7F:BE:A3:9D:73:86:CB:B5:7F:45:58:8B:64:99:ED
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/96E3EB58B2B711EEAE882255C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.62.0/23
IPv6:
2405:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
30:99:c0:0d:de:1f:54:42:13:25:a2:b9:97:02:f6:ae:61:28:
47:0d:ae:92:bd:bd:da:37:8f:a0:8b:f7:73:a3:10:68:20:91:
b7:04:cf:29:2c:2f:95:af:0f:f7:59:66:bc:c2:4a:f3:fa:97:
cb:60:40:92:73:e2:0c:98:85:e7:f2:92:8c:12:a0:c0:68:ef:
a4:f3:79:d2:32:fb:83:bd:0d:bf:b6:e1:a5:48:c9:c3:de:65:
cf:d4:59:5a:d0:8c:8b:1d:4a:06:d7:f2:91:3b:42:89:fc:1e:
6c:17:0a:f0:3f:20:11:a0:fa:e1:88:4d:63:13:2e:4c:54:9d:
0d:13:91:5f:93:3e:d1:80:ba:6f:ca:28:c5:8a:2c:f5:a9:8c:
e3:bb:ba:e4:25:9b:59:2d:12:74:95:8f:d6:0f:4f:cb:0a:27:
ed:d8:91:24:5b:c6:9e:cc:98:91:75:2d:8f:34:c9:cc:94:bd:
37:b4:78:f6:4e:22:84:dd:93:f3:73:f8:ab:20:ba:6d:1d:90:
c5:50:7a:bc:fe:6b:a4:2d:3a:8f:8d:d0:fc:1a:a0:59:ae:0a:
50:ef:62:18:76:b8:fd:a3:92:e6:19:33:b6:c0:ef:62:62:2c:
2b:f5:df:80:e1:06:d5:bc:3a:bc:23:a7:01:3d:22:da:6a:29:
3b:87:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:00 2025 by rpki-client