Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
File: A460738A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: oAGQFbj2IEqbU9xlBn5xAWX/dft4PHm/DFOI11pjjcg=
Subject key identifier: 92:9B:77:C7:CD:5D:64:DA:9B:05:75:78:E3:F7:F0:AA:EA:36:09:B7
Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial: 0154
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
Signing time: Thu 06 Feb 2025 04:32:19 +0000
ROA not before: Thu 06 Feb 2025 04:32:19 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132280
IP address blocks: 45.250.176.0/22 maxlen: 22
45.250.176.0/24 maxlen: 24
103.14.8.0/22 maxlen: 22
103.14.8.0/24 maxlen: 24
119.110.192.0/18 maxlen: 19
119.110.192.0/21 maxlen: 22
119.110.196.0/24 maxlen: 24
119.110.197.0/24 maxlen: 24
119.110.198.0/24 maxlen: 24
119.110.199.0/24 maxlen: 24
119.110.200.0/21 maxlen: 22
119.110.201.0/24 maxlen: 24
119.110.208.0/21 maxlen: 22
119.110.208.0/24 maxlen: 24
119.110.215.0/24 maxlen: 24
119.110.216.0/21 maxlen: 22
119.110.220.0/24 maxlen: 24
119.110.223.0/24 maxlen: 24
119.110.224.0/21 maxlen: 22
119.110.228.0/24 maxlen: 24
119.110.232.0/21 maxlen: 22
119.110.233.0/24 maxlen: 24
119.110.236.0/22 maxlen: 23
119.110.240.0/21 maxlen: 22
119.110.246.0/24 maxlen: 24
119.110.248.0/21 maxlen: 22
119.110.248.0/23 maxlen: 23
119.110.252.0/24 maxlen: 24
119.110.254.0/24 maxlen: 24
119.110.255.0/24 maxlen: 24
2400:6280:4::/48 maxlen: 48
2400:6280:5::/48 maxlen: 48
2400:6280:6::/48 maxlen: 48
2400:6280:7::/48 maxlen: 48
2400:6280:8::/48 maxlen: 48
2400:6280:9::/48 maxlen: 48
2400:6280:a::/48 maxlen: 48
2400:6280:15::/48 maxlen: 48
2400:6280:16::/48 maxlen: 48
2400:6280:17::/48 maxlen: 48
2400:6280:43::/48 maxlen: 48
2400:6280:87::/48 maxlen: 48
2400:6280:96::/48 maxlen: 48
2400:6280:129::/48 maxlen: 48
2400:6280:13c::/48 maxlen: 48
2400:6280:140::/48 maxlen: 48
2400:6280:144::/48 maxlen: 48
2400:6280:148::/48 maxlen: 48
2400:6280:149::/48 maxlen: 48
2400:6280:150::/48 maxlen: 48
2400:6280:155::/48 maxlen: 48
2400:6280:158::/48 maxlen: 48
2400:6280:178::/48 maxlen: 48
2400:6280:6280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C
Validity
Not Before: Feb 6 04:32:19 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67a43b52-4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:d2:4d:d7:6c:eb:a8:39:fe:74:ce:b7:80:
e0:9a:64:d9:33:ff:00:2d:6b:90:2c:d0:3c:62:18:
5c:6c:fe:2e:3e:29:28:b4:e2:ed:f8:94:8d:f4:97:
3b:98:12:c5:e6:32:71:a5:a1:a7:99:25:33:87:66:
80:c3:a0:b3:2a:80:c5:29:d2:73:90:a9:85:57:e6:
7d:f0:eb:ca:d8:6f:34:9f:a0:e2:8e:73:73:e2:ee:
31:63:a6:1f:a2:f5:32:ca:c1:8e:66:32:8d:2f:7e:
a3:8d:ec:d4:7e:93:ea:5b:db:01:66:fc:d1:6d:70:
51:d4:73:6c:55:b4:38:cd:50:a9:e4:97:8c:21:50:
04:86:f6:9e:21:51:a2:45:dc:30:68:14:df:89:95:
62:e2:b0:5c:57:f0:98:ba:a7:84:ce:f3:a4:2a:3a:
a2:a0:45:4b:0d:99:7b:b1:55:60:4c:fa:a9:b7:a6:
c5:38:ea:42:c3:98:e9:ab:b7:b9:84:5a:36:56:cf:
d2:7d:01:5e:8d:b0:f3:11:6e:f4:d2:39:28:32:26:
a2:42:62:c9:c3:03:dd:99:b2:f5:e4:dd:39:1a:2f:
e0:b0:b3:c3:82:86:18:6b:ba:e7:60:ca:6c:a5:f7:
50:a6:60:f1:87:00:33:46:d1:c3:d0:4b:98:b5:36:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:77:C7:CD:5D:64:DA:9B:05:75:78:E3:F7:F0:AA:EA:36:09:B7
X509v3 Authority Key Identifier:
keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A460738A366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.176.0/22
103.14.8.0/22
119.110.192.0/18
IPv6:
2400:6280:4::-2400:6280:a:ffff:ffff:ffff:ffff:ffff
2400:6280:15::-2400:6280:17:ffff:ffff:ffff:ffff:ffff
2400:6280:43::/48
2400:6280:87::/48
2400:6280:96::/48
2400:6280:129::/48
2400:6280:13c::/48
2400:6280:140::/48
2400:6280:144::/48
2400:6280:148::/47
2400:6280:150::/48
2400:6280:155::/48
2400:6280:158::/48
2400:6280:178::/48
2400:6280:6280::/48
Signature Algorithm: sha256WithRSAEncryption
2c:54:16:b6:37:f3:b9:15:e1:fb:9b:ce:1c:e3:c9:7c:ff:3a:
28:0c:4b:a2:d3:1d:e7:cb:b6:ce:ed:32:e2:96:cc:97:5b:7a:
38:49:fc:63:41:04:a8:de:ec:74:75:d7:2f:f9:51:07:ce:ed:
98:43:6c:f7:ed:bf:c4:66:e5:a2:72:71:b0:75:40:30:37:0f:
90:a3:92:7b:21:90:bf:a4:7c:a6:a9:ee:99:0f:d8:4f:ca:50:
ee:6a:4b:f0:2c:bd:ec:ca:90:36:d6:d4:7c:c7:82:0d:c9:a4:
86:bb:4b:cf:7b:cf:aa:ab:ce:06:d6:77:da:0d:3b:81:15:ef:
04:62:95:35:b5:b6:70:4e:08:ac:c7:0f:e9:4d:3e:c1:b1:06:
cf:ab:3e:6d:51:94:da:6d:6a:64:52:eb:27:31:ee:88:40:ba:
3e:df:29:f6:06:8c:6a:05:ff:bb:47:0e:46:07:0d:89:39:f4:
7b:07:23:79:b1:b3:cb:52:a7:0b:2b:6b:5d:f5:62:7c:17:06:
48:53:ba:ed:3a:6a:2f:df:27:85:a6:69:45:13:11:e9:13:83:
59:09:6f:ec:91:44:2e:70:a2:3d:e7:dc:eb:ca:3c:5a:62:3f:
f6:d3:5e:80:7a:5e:ce:02:f4:f0:05:9d:5a:69:54:6c:e9:ff:
07:a6:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:26:06 2025 by rpki-client