Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa
File: 3408D944DC0311EC879DE280C4F9AE02.roa (raw, json)
Hash identifier: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=
Subject key identifier: FC:A3:34:F3:E3:D6:7D:25:F7:5E:A6:86:18:2F:AF:D5:F0:D8:4C:07
Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial: 2DC1
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa
Signing time: Wed 22 Jan 2025 15:52:01 +0000
ROA not before: Wed 22 Jan 2025 15:52:00 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 135097
IP address blocks: 103.255.44.0/22 maxlen: 22
103.255.44.0/24 maxlen: 24
103.255.45.0/24 maxlen: 24
103.255.46.0/24 maxlen: 24
103.255.47.0/24 maxlen: 24
202.61.84.0/22 maxlen: 22
202.61.84.0/24 maxlen: 24
202.61.85.0/24 maxlen: 24
202.61.86.0/24 maxlen: 24
202.61.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11713 (0x2dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156021
Validity
Not Before: Jan 22 15:52:00 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67911420-cd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:72:e7:a5:17:f3:e2:ce:e0:e0:7b:e7:5d:
a2:25:04:e4:58:76:0e:c3:86:84:23:00:1a:80:dc:
ec:e6:a1:41:d3:5e:f9:7f:67:66:c3:61:fb:f0:44:
e5:86:e0:c8:c5:b5:50:f8:26:51:c5:70:10:b2:2b:
fa:91:28:92:c1:8c:cf:32:50:36:ee:ab:e1:65:40:
39:cf:9d:f8:be:8f:da:96:86:c5:e0:36:78:5f:5c:
9a:c4:c4:ce:96:82:fd:cf:39:62:52:70:8d:92:7c:
d5:59:c8:f3:47:89:85:9d:16:44:00:52:e8:1c:41:
01:40:d6:e4:76:92:ff:d8:aa:96:3d:ef:26:85:d5:
ba:ea:46:4b:e7:fd:9a:08:25:1f:9d:18:3d:46:2c:
2c:f5:d2:7a:71:80:f4:f5:65:7c:d1:90:50:bd:06:
c0:d6:11:de:39:80:82:16:44:a2:78:63:59:43:67:
61:6f:e5:06:73:83:1c:b6:f8:d7:2a:55:7f:a4:0a:
17:68:68:63:88:7c:18:91:95:c5:e3:8c:74:45:b4:
25:8e:26:8f:59:fd:18:34:af:b3:99:13:c5:f7:60:
92:f8:22:ab:7d:d3:91:bd:af:90:6c:87:18:78:a2:
93:9e:60:15:96:06:5b:87:c2:de:d4:6b:79:71:0c:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:34:F3:E3:D6:7D:25:F7:5E:A6:86:18:2F:AF:D5:F0:D8:4C:07
X509v3 Authority Key Identifier:
keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.44.0/22
202.61.84.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0e:cb:9a:df:7b:17:1c:78:44:ec:b0:96:55:16:8c:19:c9:
e9:ef:d3:a7:89:76:18:88:89:9d:f5:e1:ee:bd:2e:16:8d:7f:
64:a6:1d:35:aa:a2:8e:ed:e8:04:c9:8b:aa:bc:d7:03:00:d3:
20:cd:05:71:78:22:12:b8:30:7d:cd:dc:4d:fb:38:23:24:dc:
f8:a7:71:dd:6c:ac:a2:ec:f0:51:6a:42:ad:e3:02:07:78:61:
87:b7:2d:5d:1c:5f:b1:c8:cf:81:d6:6f:6e:10:4f:0a:d8:75:
e5:b5:fa:fa:b4:c1:eb:bf:02:0d:bb:b9:c5:68:de:df:3a:2a:
67:e4:a1:c7:37:5f:57:4d:4d:54:26:91:18:d3:5d:9d:b3:38:
f1:85:8f:e3:40:15:19:85:1d:04:3d:93:ec:a6:e9:b4:bc:d3:
9a:09:70:98:99:ce:d4:e0:fb:49:1f:ea:13:b9:12:91:e6:3e:
0a:e7:e8:64:49:5e:e4:e7:c8:9b:39:92:d9:d1:1e:72:1f:cb:
19:af:e2:c8:d4:07:cb:73:9f:e3:64:57:12:74:ac:77:26:23:
c3:65:39:36:02:b8:08:e4:5d:b9:32:63:3f:14:ad:60:58:5a:
d4:99:10:02:67:15:20:45:d2:31:a3:ae:e4:50:e7:09:51:87:
36:2d:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:55:45 2025 by rpki-client