Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
File: B2356D1A180911EB962CB216C4F9AE02.roa (raw, json)
Hash identifier: Fp1TJ1Mbd3VWESMXXvk8el1Q1QgoDrJME4tHr7SUS8U=
Subject key identifier: 11:D1:0A:1F:38:0C:22:E1:DC:D3:8E:C6:FE:E0:E5:CA:0C:91:BF:6D
Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial: 06C1
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
Signing time: Wed 05 Jun 2024 00:12:19 +0000
ROA not before: Wed 05 Jun 2024 00:12:19 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135423
IP address blocks: 45.250.156.0/22 maxlen: 22
45.250.156.0/24 maxlen: 24
45.250.157.0/24 maxlen: 24
45.250.158.0/24 maxlen: 24
45.250.159.0/24 maxlen: 24
103.219.68.0/22 maxlen: 22
103.219.68.0/24 maxlen: 24
103.219.69.0/24 maxlen: 24
103.219.70.0/24 maxlen: 24
103.219.71.0/24 maxlen: 24
2405:4d80::/32 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617D
Validity
Not Before: Jun 5 00:12:19 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665fad63-759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:9b:12:c9:95:db:3c:4e:6f:33:48:76:73:
52:9b:c8:65:b4:31:0f:02:b4:4b:43:2d:1f:26:c4:
58:a6:cf:37:f7:8d:45:7e:4c:9c:f7:86:9c:23:00:
f2:63:d1:47:62:5f:86:93:96:dd:ed:b1:6f:87:86:
7d:3d:78:40:fb:4b:19:12:4b:68:2a:c4:2b:10:6c:
7e:d7:23:83:db:1d:89:52:c1:67:1b:59:e7:2a:a9:
81:e6:7d:43:cd:7a:94:5c:83:9e:1e:52:85:91:94:
52:ca:37:ec:8f:ce:d7:9e:6f:6f:be:ba:41:d2:63:
29:e7:fc:9f:da:92:2a:e2:9c:d9:d9:03:51:5c:41:
46:50:5f:35:9e:99:2f:86:92:94:c3:ad:f9:4e:67:
4e:5d:03:dc:21:6a:0c:41:e8:cd:01:4f:15:8b:2e:
5f:4c:32:b1:d3:d9:9e:3e:88:4a:9f:93:87:33:b0:
e7:31:d9:3e:77:8a:27:a2:e4:cf:54:e2:30:d8:83:
66:ea:a0:86:6d:00:a1:e8:f1:4a:7b:13:b4:34:ab:
60:2d:81:fa:fb:22:75:0d:7f:39:a2:ec:b3:ef:b4:
c7:9a:dc:cd:60:72:46:fe:f5:be:0a:c6:21:60:33:
f9:e8:be:26:59:1d:19:a3:75:14:ea:14:f7:77:cd:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:0A:1F:38:0C:22:E1:DC:D3:8E:C6:FE:E0:E5:CA:0C:91:BF:6D
X509v3 Authority Key Identifier:
keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.156.0/22
103.219.68.0/22
IPv6:
2405:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
22:a0:5d:27:49:35:0b:22:1d:86:35:f0:1a:f8:89:f9:36:6c:
f3:7d:5d:6d:df:94:ea:1f:99:55:d0:1e:d6:d7:6b:49:89:f6:
da:cc:d0:a7:59:bd:09:b8:bc:d5:e7:ed:ba:1c:cd:75:a7:f5:
ea:07:6c:33:53:af:e8:a1:9e:c4:9a:ef:54:f3:c3:03:c8:34:
01:a4:af:0f:df:b3:ef:5e:72:61:f9:56:40:81:9d:1b:cd:80:
d9:b4:c8:04:e9:33:74:f9:ac:e9:26:fe:07:97:d7:de:e9:86:
62:07:bc:83:31:9e:8a:5a:e8:31:62:97:e0:22:56:a8:b8:5e:
44:ac:cc:6a:ea:a2:5a:99:8f:4d:c1:b5:84:30:2c:70:ea:a2:
9b:ac:f9:b4:8c:46:88:e4:61:ca:bf:72:7d:d1:10:2a:bf:ff:
b9:72:49:76:84:38:35:f6:5b:16:f0:55:6f:a8:4b:ce:d7:14:
42:76:f9:cb:bf:8b:c0:95:6c:07:14:d2:da:7f:3a:1f:7e:e8:
97:65:0c:6c:26:38:97:31:bd:46:dc:b2:f0:9e:7d:e4:93:19:
df:7a:a2:bb:34:de:94:8c:2a:ce:4e:fd:d2:eb:09:52:4d:00:
e1:00:5d:c4:d9:f6:7f:8e:c2:22:c4:f5:68:a7:0b:d1:16:e2:
d2:fc:1c:0c
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF
Njc0MkYyMjEwHhcNMjQwNjA1MDAxMjE5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVmYWQ2My03NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLKbEsmV2zxObzNIdnNSm8hltDEPArRLQy0fJsRYps83941Ffkyc94acIwDy
Y9FHYl+Gk5bd7bFvh4Z9PXhA+0sZEktoKsQrEGx+1yOD2x2JUsFnG1nnKqmB5n1D
zXqUXIOeHlKFkZRSyjfsj87Xnm9vvrpB0mMp5/yf2pIq4pzZ2QNRXEFGUF81npkv
hpKUw635TmdOXQPcIWoMQejNAU8Viy5fTDKx09mePohKn5OHM7DnMdk+d4onouTP
VOIw2INm6qCGbQCh6PFKexO0NKtgLYH6+yJ1DX85ouyz77THmtzNYHJG/vW+CsYh
YDP56L4mWR0Zo3UU6hT3d83PoQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBHRCh84
DCLh3NOOxv7g5coMkb9tMB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4
MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTYxN0QvMThEQzU3NDIxODA4MTFFQkE4NTczMDEyQzRGOUFFMDIvQjIzNTZEMUEx
ODA5MTFFQjk2MkNCMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAIt+pwDBAJn20QwDQQCAAIwBwMFACQFTYAwDQYJKoZIhvcN
AQELBQADggEBACKgXSdJNQsiHYY18Br4ifk2bPN9XW3flOofmVXQHtbXa0mJ9trM
0KdZvQm4vNXn7boczXWn9eoHbDNTr+ihnsSa71TzwwPINAGkrw/fs+9ecmH5VkCB
nRvNgNm0yATpM3T5rOkm/geX197phmIHvIMxnopa6DFil+AiVqi4XkSszGrqolqZ
j03BtYQwLHDqopus+bSMRojkYcq/cn3RECq//7lySXaEODX2WxbwVW+oS87XFEJ2
+cu/i8CVbAcU0tp/Oh9+6JdlDGwmOJcxvUbcsvCefeSTGd96ors03pSMKs5O/dLr
CVJNAOEAXcTZ9n+OwiLE9WinC9EW4tL8HAw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:30:46 2025 by rpki-client