Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
File: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=
Subject key identifier: 4B:89:1E:31:A1:5B:F6:BB:99:47:33:61:A4:F0:B1:91:9C:17:8A:8C
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 131D
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
Signing time: Sat 08 Mar 2025 17:06:19 +0000
ROA not before: Sat 08 Mar 2025 17:06:19 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133200
IP address blocks: 103.23.136.0/24 maxlen: 24
103.23.138.0/24 maxlen: 24
103.23.139.0/24 maxlen: 24
103.25.92.0/24 maxlen: 24
103.25.94.0/24 maxlen: 24
103.244.251.0/24 maxlen: 24
110.235.223.0/24 maxlen: 24
123.108.252.0/24 maxlen: 24
124.199.112.0/24 maxlen: 24
124.199.113.0/24 maxlen: 24
124.199.115.0/24 maxlen: 24
124.199.116.0/24 maxlen: 24
124.199.121.0/24 maxlen: 24
124.199.122.0/24 maxlen: 24
124.199.123.0/24 maxlen: 24
124.199.124.0/24 maxlen: 24
163.53.196.0/24 maxlen: 24
163.53.198.0/24 maxlen: 24
163.53.199.0/24 maxlen: 24
202.124.32.0/24 maxlen: 24
202.124.33.0/24 maxlen: 24
202.124.36.0/24 maxlen: 24
202.124.37.0/24 maxlen: 24
202.124.38.0/24 maxlen: 24
202.124.44.0/24 maxlen: 24
203.80.160.0/24 maxlen: 24
203.80.162.0/24 maxlen: 24
203.80.163.0/24 maxlen: 24
203.80.164.0/24 maxlen: 24
203.80.165.0/24 maxlen: 24
203.80.166.0/24 maxlen: 24
203.80.167.0/24 maxlen: 24
203.167.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4893 (0x131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436
Validity
Not Before: Mar 8 17:06:19 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67cc790a-831e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:3b:13:f5:a2:88:4c:9d:aa:8a:c2:ee:d7:
f1:db:89:a1:78:50:89:70:36:99:ba:03:89:9c:62:
d2:3b:ab:f6:be:16:b5:f1:ae:72:df:99:1d:91:20:
04:34:9d:4b:d9:16:1a:0d:33:0d:89:6b:c8:bb:5e:
c6:45:1b:dc:90:d2:4d:69:0c:6b:dc:ef:52:13:77:
ed:34:65:f9:bd:bb:1b:83:b7:e9:82:b8:27:70:8b:
10:fa:c4:77:ac:f1:ea:27:16:8a:a9:b3:dc:96:90:
65:c8:5f:eb:18:6d:1e:cc:aa:a5:72:1d:15:3a:9f:
d7:6e:fb:bc:3a:ce:43:45:ec:73:ca:69:40:5a:2e:
03:f9:55:a1:88:46:a8:69:2e:7d:63:81:7e:67:cb:
4d:ef:6c:46:23:26:94:4b:a6:9c:44:e2:2d:38:b6:
83:5a:48:31:16:ea:e7:d2:ec:77:af:f8:7f:25:18:
86:07:79:e5:fc:73:94:cd:7a:07:6f:32:43:2d:9f:
2a:d1:41:c0:7b:8f:2d:c0:3e:0e:1e:9a:cb:9a:76:
a6:1e:2e:d6:92:4b:28:8f:a6:00:9a:7c:14:f5:87:
96:42:56:20:ed:73:af:ac:93:ed:12:75:ec:fc:1f:
d3:68:9e:cc:61:ae:ab:f2:e9:9f:4c:65:9c:10:42:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:1E:31:A1:5B:F6:BB:99:47:33:61:A4:F0:B1:91:9C:17:8A:8C
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.136.0/24
103.23.138.0/23
103.25.92.0/24
103.25.94.0/24
103.244.251.0/24
110.235.223.0/24
123.108.252.0/24
124.199.112.0/23
124.199.115.0-124.199.116.255
124.199.121.0-124.199.124.255
163.53.196.0/24
163.53.198.0/23
202.124.32.0/23
202.124.36.0-202.124.38.255
202.124.44.0/24
203.80.160.0/24
203.80.162.0-203.80.167.255
203.167.18.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7e:4a:86:4f:8e:9c:98:05:04:9f:47:93:b5:6a:66:d6:15:
11:b5:fe:83:8a:1d:f6:97:b8:87:58:13:a2:e6:95:c7:73:84:
f8:93:02:8d:5f:c5:e4:3b:90:bb:c6:6a:d8:d9:89:62:2d:cd:
ea:52:1e:0e:83:44:7c:2c:83:23:df:eb:80:e4:14:e8:04:97:
82:de:81:97:63:5f:8a:17:fc:f2:0c:b0:e8:ef:7c:a2:d4:2b:
0d:3f:8d:9e:f9:00:4e:18:28:3a:dc:f2:c0:e6:1d:41:22:cc:
d7:9c:a7:4f:ce:c5:0f:44:9b:e7:4a:d0:ca:83:c7:09:5c:b6:
2c:a7:d8:74:00:53:21:4a:49:a7:d1:28:89:8c:cc:cd:73:eb:
ae:f2:54:db:e2:d3:32:00:ec:c3:04:26:08:79:89:a0:3a:cc:
fb:41:70:3f:78:2c:d5:a3:d6:3e:19:c2:fe:a5:90:6d:ac:05:
4a:6d:0a:21:79:51:3a:31:50:82:15:b8:6d:af:0b:9d:d0:9c:
9b:0d:ae:f3:8d:1a:32:53:05:cd:3c:85:06:b9:f4:b3:90:65:
d2:43:e7:2f:7c:b6:3f:9e:db:d1:9a:1f:91:3c:eb:d4:ea:73:
3d:74:d2:fe:0f:89:8a:2e:96:6f:b4:42:7d:c9:57:5b:72:7d:
61:78:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:12:10 2025 by rpki-client