Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
File: 75AB676E747811EDA48E0D52C4F9AE02.roa (raw, json)
Hash identifier: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=
Subject key identifier: E6:44:6E:3A:FC:8D:08:A0:85:24:1F:13:AB:A7:78:B6:CD:5A:B1:A5
Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial: 34B1
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
Signing time: Mon 10 Mar 2025 14:30:53 +0000
ROA not before: Mon 10 Mar 2025 14:30:53 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 17660
IP address blocks: 45.64.248.0/22 maxlen: 22
103.245.240.0/22 maxlen: 22
103.245.242.0/23 maxlen: 23
119.2.96.0/19 maxlen: 19
202.144.128.0/19 maxlen: 19
202.144.128.0/19 maxlen: 24
202.144.128.0/20 maxlen: 20
202.144.144.0/20 maxlen: 20
2405:d000::/32 maxlen: 32
2405:d000::/32 maxlen: 48
2405:d000:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13489 (0x34b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D99A
Validity
Not Before: Mar 10 14:30:53 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cef79c-36dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:02:ab:32:e4:ca:10:db:3a:62:88:b9:38:
45:1a:43:5e:de:68:b8:1b:9f:8f:a0:88:09:d5:76:
7d:46:8a:1e:17:a5:57:34:76:00:d5:2c:19:b6:f9:
f5:43:e8:0d:97:ab:d1:a9:7d:a0:d2:42:3a:2c:1b:
b1:e9:f6:a7:d2:03:dc:f5:7f:2a:6c:e2:a8:69:be:
20:09:76:06:8d:4e:61:0f:d5:09:84:21:f3:8f:e9:
19:d6:39:8f:0f:86:a4:28:5c:6d:9b:54:9a:f6:d8:
f4:52:a5:ed:27:7d:ac:80:8d:89:45:45:ce:2d:7d:
15:cb:ce:95:f1:33:62:58:a3:f8:1e:d4:c3:1f:ca:
5b:92:2a:f3:9a:79:c4:19:c0:cc:b4:62:18:59:09:
61:a5:98:2e:ae:2f:31:c7:9f:e3:78:2b:81:f1:ec:
52:10:21:e0:df:b6:fb:bf:6a:7e:16:41:12:5c:0a:
6b:d2:b8:78:74:89:be:4b:cc:5a:b4:d9:71:f9:a0:
c3:6c:f4:61:ef:26:38:71:e5:7b:f8:6f:2b:c2:02:
0b:d2:f6:72:5b:8f:68:18:ba:67:60:af:ab:b7:9b:
4e:43:02:a3:1c:1a:fd:81:e6:ae:f3:15:b7:f1:f8:
e3:00:8b:7e:ca:a1:6c:66:84:4c:75:11:0e:a3:77:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:6E:3A:FC:8D:08:A0:85:24:1F:13:AB:A7:78:B6:CD:5A:B1:A5
X509v3 Authority Key Identifier:
keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.248.0/22
103.245.240.0/22
119.2.96.0/19
202.144.128.0/19
IPv6:
2405:d000::/32
Signature Algorithm: sha256WithRSAEncryption
aa:b9:61:2c:bd:dd:5a:f0:1e:08:c8:f4:0c:ee:52:09:78:6d:
d2:af:9b:0a:84:9a:e7:b9:f6:85:4a:a3:1c:d1:69:c5:e5:46:
af:79:ca:04:31:15:6a:43:c7:e2:65:9d:17:82:bd:f6:72:c2:
50:2e:32:ec:52:d2:61:9a:b9:0b:1e:35:11:01:0c:70:e3:47:
c4:4a:94:81:54:73:32:50:9d:c8:cb:5b:fa:95:f5:5e:7a:2f:
4c:30:71:0b:32:7d:5e:66:67:9a:7d:d5:ae:81:07:ca:56:70:
c5:28:e6:f2:6e:4a:3f:a1:78:e4:c5:45:a9:3a:f3:80:0d:c9:
b2:42:2d:e0:39:32:f4:80:f7:f6:45:5f:67:ed:c1:e6:38:75:
7c:c1:62:b6:12:bc:e2:f5:8e:05:f3:84:dc:4b:41:9a:f6:b6:
e2:3f:41:83:68:b3:1b:43:fc:19:2b:8a:1d:6f:66:2f:32:c3:
a4:39:a4:3c:26:73:fa:6e:e4:ec:f2:a9:b8:81:c3:e8:74:c7:
57:b1:c1:14:80:49:61:9a:16:ef:fd:dc:63:69:98:8d:99:10:
0a:07:a8:96:f5:ab:66:96:d8:c0:ff:0a:f4:f3:9b:6c:37:8c:
5a:8b:3f:40:3b:23:e4:58:2e:39:f9:b4:68:b2:fc:28:24:13:
03:1c:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:02 2025 by rpki-client