Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa
File: 6923942E252711EF948A5E18C4F9AE02.roa (raw, json)
Hash identifier: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=
Subject key identifier: 63:7E:49:4B:FE:A9:A2:7C:F2:EF:A7:41:47:6B:3B:7A:80:92:C4:57
Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial: 99
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa
Signing time: Wed 05 Mar 2025 06:52:33 +0000
ROA not before: Wed 05 Mar 2025 06:52:33 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45152
IP address blocks: 103.210.148.0/22 maxlen: 22
103.210.148.0/24 maxlen: 24
103.210.149.0/24 maxlen: 24
103.210.150.0/24 maxlen: 24
103.210.151.0/24 maxlen: 24
119.252.184.0/22 maxlen: 22
119.252.184.0/24 maxlen: 24
119.252.185.0/24 maxlen: 24
119.252.186.0/24 maxlen: 24
119.252.187.0/24 maxlen: 24
119.252.188.0/24 maxlen: 24
139.5.52.0/22 maxlen: 22
139.5.52.0/24 maxlen: 24
139.5.53.0/24 maxlen: 24
139.5.54.0/24 maxlen: 24
139.5.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F65
Validity
Not Before: Mar 5 06:52:33 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c7f4b1-7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:84:78:0d:23:d9:7d:07:b3:82:69:98:fe:
e4:83:5c:df:f8:d5:b5:85:c8:9b:15:4f:e7:7a:29:
b5:e2:15:90:74:17:a8:12:aa:a5:07:68:72:05:d3:
53:d0:75:95:43:58:22:84:7a:6d:12:16:cc:19:54:
c9:5a:6b:b9:81:41:9d:ee:71:c2:bd:91:50:e8:04:
05:8f:3b:09:9b:b0:f3:de:18:b7:45:0d:cb:ef:eb:
a0:47:9b:e4:74:e7:51:f9:bf:e3:1a:76:dd:a6:7f:
2b:35:19:30:70:9b:a5:0c:f7:9a:f4:fb:df:32:33:
ee:76:de:3b:89:9c:a6:33:53:4b:af:28:84:98:97:
a5:65:09:23:31:89:4d:e0:3f:97:76:45:e1:8d:bb:
d8:a6:55:8b:68:7e:8e:a0:b9:eb:75:33:3f:93:a9:
d9:5e:9a:41:5a:2e:16:3a:7e:d0:33:23:7f:ba:87:
f5:8b:dd:ba:55:a0:72:65:de:49:f7:7c:2e:49:c8:
b8:56:22:83:00:4f:37:29:88:e0:b6:a2:6a:79:3b:
b1:c1:66:48:d6:09:20:c2:51:85:92:cb:97:35:3a:
5a:23:89:48:7b:fe:86:e5:ac:dd:bb:fe:d8:cd:90:
2d:28:28:04:19:aa:2d:b1:29:7a:e2:bd:60:f6:4b:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:49:4B:FE:A9:A2:7C:F2:EF:A7:41:47:6B:3B:7A:80:92:C4:57
X509v3 Authority Key Identifier:
keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.148.0/22
119.252.184.0-119.252.188.255
139.5.52.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ad:97:56:63:b8:da:e3:b9:ac:af:9e:88:50:78:a4:36:57:
07:83:8b:2e:0e:22:28:d2:7a:10:fc:98:c0:72:62:55:7d:43:
83:08:4f:10:4d:08:29:5c:3c:39:c5:d5:d4:d4:e8:b4:3a:70:
db:43:99:34:4c:d1:46:72:32:41:08:0e:4a:47:a3:da:57:95:
16:82:ed:c5:b9:e2:40:3e:45:91:da:6d:60:48:7d:17:2f:1b:
68:4e:8d:d3:13:26:5b:7f:fa:05:04:8a:3e:d3:77:ad:5b:b9:
eb:68:69:28:61:a5:a1:c1:1d:fe:b4:f0:b2:a9:64:70:f6:b9:
87:cc:fb:bc:69:cd:a2:07:65:26:4a:43:0a:7d:df:cc:77:80:
49:ca:28:79:8c:ed:6d:fc:f9:ca:b2:46:c1:ec:7d:86:00:10:
65:1a:cc:b9:c0:5c:89:45:55:e8:3b:87:f2:6b:b4:be:cd:e1:
fd:c9:aa:a2:27:c4:79:b1:22:37:a2:a9:3a:fe:0b:ae:c6:93:
5a:dd:2a:ea:75:e6:65:24:a9:a2:5b:8a:fa:80:64:5b:37:1d:
82:b9:3c:87:c4:fc:22:e2:ec:3c:a7:1c:af:0f:b1:2a:38:04:
fd:79:ee:ee:c4:ce:d9:0b:1c:3c:37:27:7d:7b:bb:af:ed:2a:
a3:59:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:29:05 2025 by rpki-client