Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa
File: A4BC2B80195911ED9A037633C4F9AE02.roa (raw, json)
Hash identifier: YxJtnQenIJzYnRaxSkl98vpypMNerpFDYAHSMy3VrC8=
Subject key identifier: 1C:4F:E1:FB:AD:E3:13:E9:DB:D0:37:D6:4C:FC:3B:5C:F8:E8:C2:71
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 494A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa
Signing time: Thu 09 Jan 2025 03:53:53 +0000
ROA not before: Thu 09 Jan 2025 03:53:53 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131423
IP address blocks: 42.96.16.0/20 maxlen: 24
45.119.212.0/22 maxlen: 24
103.2.224.0/22 maxlen: 24
103.48.84.0/22 maxlen: 24
103.48.192.0/22 maxlen: 24
103.78.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18762 (0x494a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Jan 9 03:53:53 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=677f4851-93a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:f3:b9:0a:4e:d8:97:35:bf:75:d6:74:c3:
04:0f:ce:90:28:24:50:c8:d6:0c:37:8f:76:a9:f1:
80:87:d7:2f:24:79:24:07:61:ac:13:d5:54:62:e5:
0a:f7:73:13:25:da:b5:d9:4b:37:8b:c6:aa:b0:90:
aa:89:7c:11:07:9e:60:22:81:b2:ae:ac:99:dd:86:
b7:2e:eb:a1:73:2a:f5:71:1a:7e:80:15:cf:15:30:
0b:32:8d:5e:ce:7c:5d:71:aa:cf:96:80:9d:05:17:
49:21:06:2e:c8:b4:36:3d:a0:dc:4c:ae:5b:dc:be:
8e:3e:b3:ea:32:ef:8a:12:b3:a0:69:fd:0f:d8:63:
f1:41:60:12:22:d9:22:89:4a:2d:1e:c3:64:16:8c:
55:24:67:78:c3:9c:0e:be:19:0c:ff:59:35:6c:98:
7a:7a:37:a4:c9:ad:0f:b8:5e:7f:46:80:19:af:1a:
fc:fa:70:52:a3:77:88:f6:36:a3:79:b7:0e:67:89:
bd:a0:d8:f2:3c:72:24:52:3d:98:3e:35:18:bf:fd:
fd:f7:40:78:05:d7:29:a8:d4:bf:d3:82:af:31:b6:
91:26:b1:3b:4a:c8:0a:bd:b4:90:60:d8:c9:2b:ae:
89:98:d8:6a:de:86:86:5a:74:7c:ac:1b:95:ab:28:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:E1:FB:AD:E3:13:E9:DB:D0:37:D6:4C:FC:3B:5C:F8:E8:C2:71
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.16.0/20
45.119.212.0/22
103.2.224.0/22
103.48.84.0/22
103.48.192.0/22
103.78.88.0/22
Signature Algorithm: sha256WithRSAEncryption
75:0f:35:46:47:3e:4c:fc:96:b6:72:88:59:3c:31:65:0d:13:
8c:8c:d2:79:82:23:4e:b5:e8:51:f6:97:15:e6:27:cd:1e:b3:
b5:90:a5:aa:36:ae:e0:51:53:01:5f:9e:59:7d:87:4e:d7:b8:
1d:70:20:07:1c:0e:8d:e4:a9:a0:76:80:23:9a:09:f8:95:37:
fe:27:84:b7:7d:87:73:ac:fd:21:9a:11:e2:7e:32:ae:5c:59:
1e:13:dc:7d:e7:6d:d6:d5:fc:9c:3f:c8:76:12:01:07:2b:0a:
50:f0:1d:97:8c:c0:69:5c:79:a4:5b:cb:a5:53:26:f1:ea:1e:
b7:1c:88:2b:d9:6d:9f:67:94:51:07:05:61:f0:6c:96:5f:e5:
e8:de:65:33:b4:2c:10:bf:2a:31:8a:6f:b8:db:38:cf:41:7f:
d2:d7:d1:96:f1:5c:bc:ad:ca:19:ce:15:4b:27:0a:a3:32:96:
44:60:d3:b0:53:2b:b1:d4:e1:3a:b6:16:43:1f:43:37:f0:5e:
16:df:fa:f4:ba:b7:76:ad:d6:b2:53:e5:9b:37:20:2d:ca:81:
8e:40:a7:2c:d8:64:71:22:d0:6f:7c:8f:ab:73:0f:a0:49:77:
91:ee:ba:b7:a8:f2:87:89:86:c9:0c:51:9f:aa:26:66:19:90:
9d:89:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:20 2025 by rpki-client