Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json)
Hash identifier: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=
Subject key identifier: 6B:69:B2:92:2F:74:E0:34:C6:29:70:06:54:21:05:3B:2C:58:8D:24
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 084A
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
Signing time: Mon 02 Sep 2024 21:29:56 +0000
ROA not before: Mon 02 Sep 2024 21:29:56 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139468
IP address blocks: 45.116.134.0/23 maxlen: 23
45.116.134.0/24 maxlen: 24
103.9.94.0/23 maxlen: 23
103.28.28.0/22 maxlen: 22
103.37.132.0/22 maxlen: 22
103.37.134.0/23 maxlen: 23
103.240.12.0/22 maxlen: 22
103.240.13.0/24 maxlen: 24
103.245.4.0/22 maxlen: 22
103.245.4.0/23 maxlen: 23
103.245.7.0/24 maxlen: 24
2405:9e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1
Validity
Not Before: Sep 2 21:29:56 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d62e54-1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:2c:64:ac:78:5d:f4:bd:91:d8:3f:42:e1:
be:b9:18:20:59:d2:a8:60:09:f8:c9:c4:1b:b0:d6:
93:12:5b:58:50:86:e6:cb:bd:56:b8:86:ec:8b:d1:
bd:50:17:b6:74:9e:44:06:60:c3:f4:10:00:03:e9:
86:55:e8:17:41:9f:64:81:41:07:be:1b:21:ff:62:
22:99:f9:d3:81:d8:ef:0b:16:15:ba:4a:f6:67:08:
18:79:40:8a:e6:a6:20:24:9e:0e:1a:89:7d:52:08:
f0:a2:a9:3d:9f:4e:7e:0e:a4:9e:43:ff:94:00:78:
12:9d:1a:1c:76:8c:7f:df:33:06:58:df:4c:03:d6:
9c:14:f3:02:5b:62:09:77:f4:f0:50:31:28:e8:68:
34:75:91:e3:a0:64:3c:d7:28:6b:3f:00:14:14:bc:
25:38:36:5d:d3:59:ac:a7:a2:64:93:f3:7b:6b:12:
80:a8:64:f5:d2:4b:b5:62:17:ff:4d:4b:e6:0d:de:
18:48:c9:9a:88:03:18:be:64:56:bf:e4:69:a7:86:
b1:fe:21:5a:54:35:22:13:64:20:37:8e:3c:1b:f0:
7f:db:20:af:13:e6:08:93:65:e1:5a:f3:c0:62:48:
5f:f3:e4:16:2a:e5:9a:70:52:db:b5:33:3a:3e:a9:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:B2:92:2F:74:E0:34:C6:29:70:06:54:21:05:3B:2C:58:8D:24
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.134.0/23
103.9.94.0/23
103.28.28.0/22
103.37.132.0/22
103.240.12.0/22
103.245.4.0/22
IPv6:
2405:9e40::/32
Signature Algorithm: sha256WithRSAEncryption
44:47:3b:44:56:59:e7:4a:5b:d0:6c:48:2c:53:59:e5:c5:d4:
c3:76:de:3b:82:45:50:7f:03:ec:d2:d1:9e:ce:dc:b6:5e:fb:
75:13:f9:d2:f0:00:62:29:fe:3e:e9:45:0f:46:b5:e8:89:27:
c6:74:30:ce:e7:e0:15:7e:40:c4:c6:ae:88:af:9e:4e:a5:a4:
10:0d:19:3f:b9:e6:aa:f8:e0:2f:21:05:5b:93:a8:a9:88:82:
19:ea:f0:f3:b0:d2:17:4b:e9:ab:b4:5c:68:dd:3a:1a:8d:cd:
b3:ab:7b:ec:ad:de:9a:51:8f:79:08:f3:42:68:72:c8:44:b0:
de:81:2d:8f:f1:2d:66:0b:e5:b6:d5:cb:cf:9f:e9:65:f0:cc:
c0:b5:fe:53:ea:36:1c:5e:90:90:38:e1:1d:57:c8:08:91:56:
74:21:76:c3:00:bd:fe:eb:29:73:b9:75:a6:ef:07:23:17:e4:
82:0a:41:d1:eb:ee:4b:b3:74:cd:c7:36:c2:a1:e1:3c:88:03:
15:61:89:ff:c6:7c:34:54:2b:25:ee:e1:28:6a:57:09:73:9d:
c2:a0:eb:2e:f3:61:a5:e3:34:96:43:16:e3:24:c8:f3:d6:f4:
43:bf:d4:ad:49:8c:81:b7:e9:0e:0a:4c:29:11:9e:cf:2a:50:
9b:99:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:19 2025 by rpki-client