Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
File: 4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa (raw, json)
Hash identifier: Czui+HDUTbCQHf1Z1UvG6M4J11XXIGg8duaMwz00CHs=
Subject key identifier: 31:28:B5:34:81:EE:10:99:7B:2F:D2:89:A5:0F:66:0B:87:DB:90:94
Certificate issuer: /CN=A915B0ED/serialNumber=CD02985AF159C75D531A81DAB52C40E848DB0012
Certificate serial: 223F
Authority key identifier: CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
Signing time: Tue 16 Aug 2022 04:34:53 +0000
ROA not before: Tue 16 Aug 2022 04:34:53 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 4788
IP address blocks: 27.146.0.0/16 maxlen: 24
58.139.0.0/16 maxlen: 24
103.4.140.0/22 maxlen: 24
114.133.0.0/16 maxlen: 24
202.171.192.0/20 maxlen: 24
202.178.0.0/19 maxlen: 19
202.178.32.0/19 maxlen: 24
202.178.64.0/20 maxlen: 24
2001:4470::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8767 (0x223f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0ED
Validity
Not Before: Aug 16 04:34:53 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb1e6d-30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:47:53:66:c7:c7:80:28:ab:25:bc:f1:32:
ca:a7:e3:f7:61:49:3a:60:1d:95:12:95:74:0e:34:
af:70:b7:a4:03:10:5e:9e:4c:cd:f8:64:d9:02:9c:
eb:f1:af:1c:e9:dc:c1:6b:fc:de:56:fd:0d:cd:6d:
7f:cb:a2:be:15:5d:f8:1d:74:30:cc:6b:be:57:3d:
79:74:33:9d:62:bf:81:6b:5d:9e:fa:a5:02:f2:10:
fc:04:3d:00:32:6a:a9:54:6e:f0:55:ac:f9:7b:9f:
12:b2:c0:d0:45:90:8f:23:50:66:e6:27:51:30:44:
92:60:c9:15:6f:c3:ab:4c:c3:a0:88:08:3f:f6:26:
07:2c:47:42:4d:61:60:18:85:a4:c2:c6:12:cb:f2:
92:4a:14:fa:52:d0:f8:80:0c:09:5f:6d:c5:53:6a:
ac:99:8c:81:29:71:23:cd:78:6c:ff:15:1d:0f:90:
0b:dc:8d:f4:31:d3:4b:f6:97:0d:a8:16:ba:ca:0c:
f9:10:d9:9c:ec:cb:92:7d:57:0f:09:df:1b:e2:aa:
3d:da:aa:f8:45:d9:5e:ff:bc:02:75:d3:42:90:5c:
ef:01:bb:71:23:6d:15:7b:08:1d:12:27:f6:13:65:
89:85:34:9f:a6:40:6d:58:8b:df:31:a7:b0:40:ba:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:B5:34:81:EE:10:99:7B:2F:D2:89:A5:0F:66:0B:87:DB:90:94
X509v3 Authority Key Identifier:
keyid:CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/zQKYWvFZx11TGoHatSxA6EjbABI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.146.0.0/16
58.139.0.0/16
103.4.140.0/22
114.133.0.0/16
202.171.192.0/20
202.178.0.0-202.178.79.255
IPv6:
2001:4470::/32
Signature Algorithm: sha256WithRSAEncryption
bd:d2:07:16:61:68:f3:db:24:8a:1d:c4:b5:65:2c:c1:5e:8c:
a8:49:05:42:58:03:ea:b0:3d:e9:5f:a0:d2:35:c9:76:0b:8e:
95:36:6f:11:f3:63:b0:be:4b:53:77:49:9c:e8:06:ff:c6:19:
2e:f9:f5:56:10:de:cc:28:05:8e:bb:ab:ac:54:b4:c0:73:24:
09:65:46:b4:f6:7e:5b:1b:6c:59:96:11:4b:fd:7b:88:60:0c:
ad:04:7b:d9:05:4c:a1:1e:4b:0c:46:7b:ef:68:26:b0:42:8b:
29:7e:05:51:81:ff:28:f5:96:ec:df:e3:55:f5:c7:e6:2b:87:
43:b6:d3:dc:f8:5a:b3:6f:e5:fb:54:03:20:20:da:53:36:19:
eb:bb:71:7b:40:79:9e:d8:46:0d:19:cf:46:1c:22:7e:7b:2e:
59:6b:45:25:bb:73:52:fc:57:3a:ca:8c:69:96:ab:88:86:cd:
27:60:f7:31:50:0d:bc:11:eb:b5:f7:f8:91:7e:00:58:91:b8:
90:94:05:7c:34:41:72:bd:6e:55:04:5e:c5:57:a5:f2:85:47:
ae:98:9e:67:fe:20:0a:be:9b:46:62:79:7e:01:93:7b:45:62:
fc:56:1e:ef:62:d8:bc:6e:e2:19:33:4f:9f:0e:4a:de:04:db:
00:b5:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:30:00 2025 by rpki-client