Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa
File: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (raw, json)
Hash identifier: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=
Subject key identifier: 47:49:6A:C8:5C:ED:59:74:37:C8:DC:E2:FA:D3:59:59:01:41:26:9D
Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063
Certificate serial: 04B4
Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa
Signing time: Thu 02 Jan 2025 23:53:05 +0000
ROA not before: Thu 02 Jan 2025 23:53:05 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 59239
IP address blocks: 45.115.12.0/22 maxlen: 22
45.115.12.0/23 maxlen: 23
45.115.12.0/24 maxlen: 24
45.115.13.0/24 maxlen: 24
45.115.14.0/23 maxlen: 23
45.115.14.0/24 maxlen: 24
45.115.15.0/24 maxlen: 24
103.253.160.0/22 maxlen: 22
103.253.160.0/23 maxlen: 23
103.253.160.0/24 maxlen: 24
103.253.161.0/24 maxlen: 24
103.253.162.0/23 maxlen: 23
103.253.162.0/24 maxlen: 24
103.253.163.0/24 maxlen: 24
2407:e740::/32 maxlen: 32
2407:e740:1::/48 maxlen: 48
2407:e740:a::/48 maxlen: 48
2407:e740:100::/48 maxlen: 48
2407:e740:101::/48 maxlen: 48
2407:e740:102::/48 maxlen: 48
2407:e740:10a::/48 maxlen: 48
2407:e740:12a::/48 maxlen: 48
2407:e740:12b::/48 maxlen: 48
2407:e740:f800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918681B
Validity
Not Before: Jan 2 23:53:05 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677726e1-6535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:50:40:10:32:ca:45:d2:f1:56:0e:d7:bb:
35:f3:fa:c1:2a:8a:a9:a1:8f:15:12:95:b3:be:60:
7f:dc:63:53:dc:da:49:ae:c6:24:c7:e4:9a:4d:c1:
c2:63:bf:87:66:8f:5d:fb:18:4c:49:c4:c1:8f:9a:
5c:a5:5d:49:2f:ab:10:eb:35:33:90:43:dd:67:be:
7c:7e:29:97:65:d7:5a:43:13:65:43:de:ce:98:f9:
99:77:6f:2b:2d:1b:4a:8d:14:c8:1d:11:03:d8:b1:
84:31:93:c9:85:64:03:8e:16:dc:79:6d:2e:5f:30:
16:08:af:0f:87:6e:91:77:6f:e0:1c:f9:56:37:b0:
eb:4c:7c:ae:61:23:ea:ca:77:14:13:ee:c3:12:a8:
4d:25:7c:08:14:2f:c7:15:47:43:df:61:5d:e9:44:
04:bf:db:23:96:79:90:f8:88:55:4c:cf:2d:32:eb:
54:f3:05:6c:ec:18:37:10:13:02:95:ac:74:47:12:
a0:14:4b:ff:09:dc:6b:93:6e:10:29:df:31:f8:4a:
2d:0b:87:95:d5:df:a6:b9:98:e5:56:c6:bc:1a:ce:
7f:63:bf:3e:1c:b7:e2:01:03:b3:5a:60:32:b1:96:
64:4d:f4:d4:9b:86:49:39:87:f5:3a:2b:4c:96:5e:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:6A:C8:5C:ED:59:74:37:C8:DC:E2:FA:D3:59:59:01:41:26:9D
X509v3 Authority Key Identifier:
keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.12.0/22
103.253.160.0/22
IPv6:
2407:e740::/32
Signature Algorithm: sha256WithRSAEncryption
57:76:40:51:4b:67:6a:ed:bf:15:40:38:33:e5:fb:6e:60:db:
cf:78:37:67:a1:f4:eb:2e:e6:ed:ba:63:9d:4e:99:cd:ed:4d:
d2:c8:cd:d3:b0:d5:61:2a:f8:3d:3d:0f:11:47:5a:82:32:ee:
66:13:8c:93:54:06:0b:a2:2b:3a:ed:6c:26:a8:0b:49:ae:f3:
d9:09:37:e5:52:2e:70:3c:4a:95:e8:aa:a4:4e:28:0b:5a:5c:
17:70:54:81:09:2d:70:36:c8:4d:f2:c3:33:2e:e1:ca:7c:41:
94:3c:6c:62:6a:55:21:5a:05:90:b0:ec:8f:3d:be:4e:c7:c8:
73:29:ec:a7:61:d5:38:4c:25:8a:34:52:9f:ee:ab:44:d9:28:
dd:a0:a3:91:8b:24:02:14:5e:0f:97:d8:bd:1d:74:69:59:c3:
dc:c1:6e:d1:10:ab:70:fc:31:9f:c2:e6:68:62:7d:58:2d:fe:
76:6f:60:96:b5:64:ed:22:06:98:9e:49:50:e2:ba:dd:5b:5e:
cb:cd:b1:0e:25:b9:bf:7d:9c:fa:1b:f8:fa:81:f6:66:a6:f5:
ee:f3:b8:26:bd:cf:9f:c6:fe:99:50:c0:12:53:49:ab:fe:92:
3f:bf:00:46:78:af:98:ed:92:02:89:89:0c:12:93:db:58:28:
96:cd:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:27 2025 by rpki-client