Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C4EDCCE46311EFBF82BA25C4F9AE02.roa
File: 15C4EDCCE46311EFBF82BA25C4F9AE02.roa (raw, json)
Hash identifier: cE1/NgZ5FGD+/zMU8N1eIv7zUPVevbE9OZDCCspWfr0=
Subject key identifier: FA:91:35:C3:FD:2C:A7:8C:ED:8C:01:79:39:26:C3:65:53:5E:90:CE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A518
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C4EDCCE46311EFBF82BA25C4F9AE02.roa
Signing time: Fri 07 Feb 2025 04:56:22 +0000
ROA not before: Fri 07 Feb 2025 04:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134937
IP address blocks: 45.127.104.0/24 maxlen: 24
45.127.105.0/24 maxlen: 24
45.127.106.0/24 maxlen: 24
45.127.107.0/24 maxlen: 24
103.51.24.0/23 maxlen: 24
103.51.26.0/24 maxlen: 24
103.51.27.0/24 maxlen: 24
103.97.96.0/22 maxlen: 24
103.133.8.0/22 maxlen: 24
103.133.48.0/22 maxlen: 24
103.148.168.0/23 maxlen: 24
103.157.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42264 (0xa518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 04:56:22 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a59276-0cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:68:4c:ce:01:ec:b0:22:29:fa:56:4d:81:
5e:f5:78:f8:eb:f9:7e:6f:b8:ce:ba:a0:8c:e9:4a:
45:e5:c5:8e:84:3f:ed:77:0d:74:f4:7d:eb:ed:ed:
e2:4f:5f:45:4b:f2:40:fe:6a:f6:48:5e:a6:38:24:
16:27:87:82:63:2e:ea:ba:10:f5:5d:f2:a4:31:7e:
a4:71:dd:66:21:ea:24:61:44:bb:18:c4:89:bc:63:
84:76:ae:69:26:d2:ea:c0:30:9a:6a:7a:1c:04:5e:
99:13:fe:5f:fa:2d:72:82:61:4d:6c:80:fe:3a:31:
43:bf:11:db:81:1b:f1:27:28:9b:77:fe:8e:ad:55:
b4:fc:14:77:05:c7:32:69:b5:8e:c9:18:a5:c4:7e:
54:b2:98:13:f3:2a:e0:84:97:77:12:74:9a:d0:7b:
e0:a3:13:89:67:e6:4b:57:a8:4a:b8:c9:46:42:5e:
bb:93:99:94:4d:3a:2c:64:6b:cc:6f:75:93:d8:7f:
a9:68:ed:d8:16:75:ba:9d:50:ea:12:fb:4f:d6:54:
c1:5b:be:f5:7d:86:da:6e:ff:e4:4c:ea:83:43:d9:
e2:00:89:18:a2:6a:f2:19:8c:00:b1:f0:73:c5:b6:
31:5e:b8:3d:e3:83:b8:f2:31:32:44:67:35:4e:52:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:35:C3:FD:2C:A7:8C:ED:8C:01:79:39:26:C3:65:53:5E:90:CE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C4EDCCE46311EFBF82BA25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.104.0/22
103.51.24.0/22
103.97.96.0/22
103.133.8.0/22
103.133.48.0/22
103.148.168.0/23
103.157.176.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:30:77:f2:3d:2c:27:00:50:6c:eb:be:14:3c:a8:67:fa:09:
1d:3e:f6:37:42:f0:a2:16:18:eb:44:a2:e2:d6:77:e6:e0:6c:
c1:f6:21:52:8c:2c:82:95:8f:ec:4a:b5:ee:79:a5:62:b2:04:
6e:ec:e4:b5:e7:d1:4c:13:16:25:93:ce:9e:aa:81:75:5b:cb:
46:3f:23:b2:01:69:ab:04:3c:02:c7:75:1d:45:46:1c:5b:14:
94:cb:f6:a8:b3:b5:1c:f8:f7:27:03:40:e0:2e:cf:90:68:b0:
67:63:65:63:1f:00:ef:4e:31:63:65:32:63:28:9f:0d:b1:15:
76:8a:fa:bc:5c:99:b6:ef:01:f0:e9:ba:59:59:59:1d:9a:bc:
0e:0f:10:4e:16:3d:de:3c:b9:18:9d:ba:f0:ce:bd:9c:0e:03:
a7:93:5c:a4:8f:ce:99:1e:f1:1a:a0:f6:17:83:1a:6d:9e:dd:
df:49:c2:7c:48:34:8c:e6:93:26:fa:21:65:e8:2b:58:ad:75:
51:fb:ff:48:de:c5:e9:b6:2e:57:3a:1f:4d:94:d7:b2:26:0c:
a7:44:1b:30:3e:c6:70:f1:c9:93:4c:72:bd:ab:b6:7e:e8:03:
15:da:d6:eb:86:b2:b3:dc:94:94:79:11:55:a3:bd:74:5d:c4:
92:8c:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:57 2025 by rpki-client