Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
File: A14437C0FAD311EDBF5E232DC4F9AE02.roa (raw, json)
Hash identifier: ZlfYUyzNDkY/Hdhzuxohezq9neeAWh1nZPe5y6PK9CQ=
Subject key identifier: C7:9B:92:48:58:BD:09:FE:89:94:26:BE:D2:9B:27:54:29:98:5D:26
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4575
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:44 +0000
ROA not before: Thu 05 Sep 2024 03:32:44 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135944
IP address blocks: 103.159.54.0/24 maxlen: 24
103.159.55.0/24 maxlen: 24
103.165.144.0/23 maxlen: 23
103.165.144.0/24 maxlen: 24
103.165.145.0/24 maxlen: 24
103.199.8.0/22 maxlen: 22
103.199.8.0/23 maxlen: 23
103.199.8.0/24 maxlen: 24
103.199.9.0/24 maxlen: 24
103.199.11.0/24 maxlen: 24
103.216.124.0/22 maxlen: 24
116.118.88.0/22 maxlen: 24
116.118.92.0/22 maxlen: 24
157.119.248.0/22 maxlen: 22
180.93.172.0/22 maxlen: 24
180.93.176.0/22 maxlen: 24
180.93.180.0/22 maxlen: 24
2001:df7:cc00::/48 maxlen: 48
2404:ef80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17781 (0x4575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:44 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9265c-4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:e1:9f:b7:cc:c3:ab:4f:73:b6:12:43:3e:
16:f5:ed:bb:94:2c:c7:b5:78:08:77:43:05:a0:a7:
5d:14:3b:72:24:c9:85:68:50:40:60:19:bc:7a:29:
c5:2e:a4:86:47:b0:f3:5a:f5:8a:6b:6a:7b:7d:4a:
98:ab:eb:62:4b:27:c0:e9:d1:cf:56:5d:7c:b8:c9:
c4:75:40:7e:3c:ee:2e:1d:13:22:c1:26:9a:eb:05:
9a:57:32:ec:bd:9a:ec:bb:1c:98:a8:56:d5:ee:58:
58:4e:d9:86:65:d3:79:06:44:f5:00:14:7c:6c:fc:
9e:07:d2:1b:89:9a:7b:ce:bf:a3:f7:9a:6a:0a:a6:
09:4e:22:6b:6f:5d:de:e8:06:26:c9:6e:fc:3e:c3:
05:a6:d3:b7:77:f5:b7:f7:64:82:c8:23:64:9b:19:
be:f2:05:23:9b:dc:b0:80:4b:09:93:52:97:55:07:
bf:a0:62:6c:15:a3:4c:b1:8e:5a:3a:8a:aa:4f:6f:
6d:e6:dd:9b:f4:49:86:a2:aa:03:37:f6:39:92:77:
b4:9b:71:99:87:b7:f6:98:6a:60:a7:2b:83:d2:c8:
f8:21:d9:df:8e:64:4c:f6:43:4f:53:94:30:f6:48:
46:7c:19:61:a6:d6:1e:e2:33:5d:b9:7a:02:94:1c:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:92:48:58:BD:09:FE:89:94:26:BE:D2:9B:27:54:29:98:5D:26
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.54.0/23
103.165.144.0/23
103.199.8.0/22
103.216.124.0/22
116.118.88.0/21
157.119.248.0/22
180.93.172.0-180.93.183.255
IPv6:
2001:df7:cc00::/48
2404:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
24:ed:32:7c:95:9e:b0:ee:64:70:49:98:79:d8:de:24:89:55:
74:dc:cb:56:dc:4d:41:29:db:40:73:3c:d1:11:47:a1:c2:39:
20:ad:0b:fd:86:c2:b0:be:52:6b:62:f5:ec:12:32:14:eb:17:
42:cd:94:8e:b6:bc:f9:0f:ce:62:bd:0e:c6:db:c1:46:e3:bb:
45:df:cf:39:8c:e2:d0:e6:6c:eb:9e:7b:b8:de:b2:04:f0:c0:
31:ae:1e:fd:8f:6f:29:69:48:46:88:36:aa:4a:21:d5:3e:fc:
7c:31:58:00:9f:96:19:10:60:5e:ef:ea:7b:52:f2:c2:0d:e1:
11:3e:5c:0c:e4:8d:d3:35:be:66:63:01:b7:96:0d:fc:01:a0:
37:37:41:2b:4e:4d:99:fe:c4:9a:8e:0f:86:20:8e:56:20:53:
cf:75:48:12:45:63:83:d5:0e:b7:74:4e:05:09:2f:da:9e:7d:
48:98:ba:0e:51:7d:60:5b:2f:c9:9a:61:80:74:c5:2a:52:26:
df:55:cb:77:a2:68:0a:85:91:7c:e2:0c:86:5b:39:7c:21:7a:
b4:3d:76:2d:b7:ce:c7:a9:25:21:bc:b7:17:f9:bb:f6:e0:fc:
1d:c7:c4:59:2a:ad:cc:8c:48:fb:cb:04:c9:0b:98:a8:9b:2a:
d0:db:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:14:18 2025 by rpki-client