Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
File: A2836372A1C011EB9CD78934C4F9AE02.roa (raw, json)
Hash identifier: SRLXUpvNSIH8Kj677LlVjOkGHvs28yofUcZ5i2mqY+Q=
Subject key identifier: 1D:19:BA:2A:6A:F0:69:50:53:91:6E:DC:D0:56:69:1E:FD:F4:8A:0F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 49FD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
Signing time: Mon 10 Mar 2025 09:10:13 +0000
ROA not before: Mon 10 Mar 2025 09:10:13 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 63737
IP address blocks: 36.50.52.0/23 maxlen: 23
42.96.10.0/23 maxlen: 23
103.14.154.0/23 maxlen: 23
103.15.94.0/23 maxlen: 23
103.30.10.0/23 maxlen: 23
103.39.124.0/23 maxlen: 23
103.57.128.0/23 maxlen: 23
103.57.130.0/23 maxlen: 24
103.74.104.0/22 maxlen: 22
103.122.140.0/23 maxlen: 23
103.140.250.0/23 maxlen: 23
103.149.136.0/23 maxlen: 23
103.167.84.0/23 maxlen: 23
103.167.90.0/23 maxlen: 23
103.167.92.0/23 maxlen: 23
103.170.254.0/23 maxlen: 23
103.171.0.0/23 maxlen: 23
103.176.110.0/23 maxlen: 23
103.176.112.0/23 maxlen: 23
103.177.108.0/23 maxlen: 23
103.180.150.0/23 maxlen: 23
103.180.152.0/23 maxlen: 23
103.182.18.0/23 maxlen: 23
103.183.114.0/23 maxlen: 23
103.183.118.0/23 maxlen: 23
103.186.66.0/23 maxlen: 23
103.187.4.0/23 maxlen: 23
103.190.80.0/23 maxlen: 23
103.209.60.0/23 maxlen: 23
103.232.52.0/22 maxlen: 22
103.253.22.0/23 maxlen: 24
202.55.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18941 (0x49fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 10 09:10:13 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67ceac75-f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:c5:47:ec:de:1a:c1:a0:ea:7e:cb:c0:1f:
fb:31:9c:29:eb:ea:53:4c:b9:e2:e8:a0:89:83:53:
3a:e2:ed:fd:7a:71:fe:fd:04:78:c2:e4:23:73:68:
ac:75:ff:0d:97:48:f4:cf:07:89:71:1f:8a:27:af:
4a:f9:4b:10:d7:3e:a6:ef:00:ff:ac:50:ad:dd:02:
31:54:0e:03:75:f7:76:5a:fc:4d:f0:99:d8:1a:a7:
df:d9:a7:40:af:e9:7e:b9:1e:ed:b2:29:4b:c5:be:
16:46:a9:f4:90:1c:cc:d5:e5:38:29:41:e0:07:b6:
d0:0c:12:0e:fe:c7:0a:dc:6c:cc:60:b8:1f:ea:e3:
0c:86:67:87:cd:8c:6c:80:f9:25:b3:d4:8b:22:b7:
1b:d4:df:24:97:91:3d:5f:5a:52:9e:8b:9f:42:ca:
9b:6c:7a:68:a9:1b:23:6f:0e:c2:23:c6:3e:0c:5a:
05:f9:10:27:2b:f9:de:4e:47:42:ee:27:d6:97:1b:
c9:4b:1e:36:b1:9f:51:92:e8:f7:6a:8f:d5:5c:97:
ef:af:fe:ef:a0:de:87:f2:90:94:3f:f0:dd:4f:f3:
15:8d:8d:01:8f:e6:9d:0c:f5:6b:bb:9b:c4:77:a5:
5f:39:d4:46:b7:21:7b:2d:86:fe:50:81:c3:d7:df:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:19:BA:2A:6A:F0:69:50:53:91:6E:DC:D0:56:69:1E:FD:F4:8A:0F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.52.0/23
42.96.10.0/23
103.14.154.0/23
103.15.94.0/23
103.30.10.0/23
103.39.124.0/23
103.57.128.0/22
103.74.104.0/22
103.122.140.0/23
103.140.250.0/23
103.149.136.0/23
103.167.84.0/23
103.167.90.0-103.167.93.255
103.170.254.0-103.171.1.255
103.176.110.0-103.176.113.255
103.177.108.0/23
103.180.150.0-103.180.153.255
103.182.18.0/23
103.183.114.0/23
103.183.118.0/23
103.186.66.0/23
103.187.4.0/23
103.190.80.0/23
103.209.60.0/23
103.232.52.0/22
103.253.22.0/23
202.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:87:34:dc:47:5e:57:84:81:fb:29:9e:09:53:55:63:3a:9e:
37:ca:88:41:86:d4:b3:a8:52:6a:51:fc:da:a2:78:0c:a2:4c:
1c:67:18:a7:79:1c:5a:97:52:b5:d2:9a:8b:e9:c1:1f:eb:83:
7e:5e:79:58:ad:92:5c:71:ec:7f:31:fb:ca:ea:f0:a5:ef:3b:
d5:31:d0:05:41:7a:a8:c1:b5:00:db:15:54:42:50:60:9e:87:
58:6c:89:fc:9b:b6:49:42:e1:ab:b3:f5:60:05:6b:89:77:cc:
3e:a5:d5:4a:c8:e6:16:58:c7:3a:38:16:30:58:30:29:ee:01:
2b:79:77:bf:58:2c:b9:cc:92:19:96:54:d8:eb:d3:d8:57:dd:
46:d9:9d:a1:b9:61:f7:16:a3:d6:c8:45:52:f4:d5:e8:f6:6c:
6b:70:a9:c1:9f:92:96:37:2e:ae:92:6d:b9:88:20:7e:95:5d:
79:6d:69:5f:5a:40:65:22:5e:50:f0:ef:cf:55:f6:2c:92:cc:
29:15:2d:94:47:96:f9:fc:34:48:63:40:49:ed:fa:fb:a4:62:
d1:9c:92:69:b5:9f:35:4f:ad:93:19:3c:43:c0:75:17:e5:72:
74:64:a4:ae:89:2a:bf:85:1f:3a:f1:84:8d:84:6a:d7:dc:b6:
e6:bc:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:35:52 2025 by rpki-client