Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa
File: 452D6C36BD1411EAA4875216C4F9AE02.roa (raw, json)
Hash identifier: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=
Subject key identifier: BB:01:8E:EE:FA:E8:3B:44:6F:F8:7E:C1:A4:05:B8:30:AA:1D:A3:D2
Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial: 1A37
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa
Signing time: Tue 04 Mar 2025 16:53:55 +0000
ROA not before: Tue 04 Mar 2025 16:53:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 58411
IP address blocks: 103.210.232.0/24 maxlen: 24
103.210.233.0/24 maxlen: 24
103.210.234.0/24 maxlen: 24
103.210.235.0/24 maxlen: 24
160.20.52.0/24 maxlen: 24
160.20.53.0/24 maxlen: 24
160.20.54.0/24 maxlen: 24
160.20.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6711 (0x1a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF4E
Validity
Not Before: Mar 4 16:53:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c73023-7e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:b1:07:e7:f2:c5:0e:3f:c8:45:b1:98:64:
2d:90:e6:19:cf:b8:30:fc:ed:8a:f8:d1:72:92:17:
da:2f:81:55:be:6d:2c:65:32:02:02:0d:74:66:00:
68:56:86:29:2e:31:8e:41:f3:90:e5:28:23:c8:b7:
70:9f:65:fd:b9:7d:d2:9d:5d:df:39:f1:18:79:db:
c4:c8:87:33:27:43:c3:6a:6c:21:fa:73:49:96:72:
d3:7d:f6:d4:c9:d4:32:f3:0c:c9:a1:1f:1e:1d:8f:
84:a7:aa:99:dc:f0:10:91:7a:14:8a:cb:53:56:d2:
41:13:bc:aa:3b:ae:b8:15:7b:7c:f8:ff:41:47:51:
5e:ac:b0:14:f2:fe:59:d3:49:b7:79:75:6f:38:e1:
a0:56:22:41:39:56:7b:d9:86:69:00:ec:75:b3:fe:
09:c8:9e:4d:5d:57:13:3c:f2:dd:2a:6c:38:66:e3:
15:94:8c:54:f5:7a:f3:1d:cb:a4:f5:af:cd:4e:d0:
c5:38:08:55:03:22:43:dc:ee:ca:c0:cc:da:26:0c:
de:7f:e2:58:d2:af:dd:16:43:17:73:40:8d:4a:90:
61:8e:a9:09:ff:c1:0d:70:c8:4a:b8:1d:bb:93:b3:
0d:bf:21:0c:44:ca:4c:5a:bb:e5:80:a3:8a:c1:3d:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:8E:EE:FA:E8:3B:44:6F:F8:7E:C1:A4:05:B8:30:AA:1D:A3:D2
X509v3 Authority Key Identifier:
keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.232.0/22
160.20.52.0/22
Signature Algorithm: sha256WithRSAEncryption
74:74:61:03:3f:40:6b:ef:cd:6c:94:82:ce:19:a8:8a:76:58:
f1:b6:9a:ef:20:a4:83:eb:22:62:5e:cf:db:1c:18:b5:dd:15:
13:e6:aa:d2:d6:5b:1d:ed:31:c5:ec:a4:1e:ba:6f:83:7d:5d:
ac:18:f9:5d:62:15:33:74:72:5a:44:86:00:43:84:62:06:c1:
2b:5a:0a:e3:f7:b4:45:16:d7:6d:59:cf:92:c6:55:c3:d7:db:
d0:66:10:fd:c9:5d:61:56:bc:59:16:7e:14:79:54:8c:9d:43:
7f:d6:7e:ef:85:b0:fd:26:3d:17:bd:ad:92:53:42:c9:6d:21:
56:02:0d:63:11:65:fb:c8:97:84:35:df:c7:ba:aa:d9:4f:cb:
99:cf:da:61:cc:50:a9:15:52:76:ed:80:65:66:03:5a:86:34:
52:50:4d:71:03:0f:cd:3d:a1:f5:57:19:25:1f:ad:14:6e:c2:
d7:79:d9:e1:8e:25:b1:35:ba:fc:f3:87:8e:ba:b0:e0:d1:be:
76:1c:e0:86:02:4a:63:39:5f:a4:41:78:6c:a1:a9:f9:f3:e9:
1e:f9:fb:c0:ff:76:6a:a5:54:54:6f:01:4c:ca:16:af:3f:ed:
e5:ca:b0:ef:98:c4:39:fe:29:80:96:59:36:22:ea:df:30:24:
5e:0a:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:27 2025 by rpki-client