Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa
File: AA709C8EDD9811ECA143AA87C4F9AE02.roa (raw, json)
Hash identifier: riygWa0/GrSD5XaXx9iMJ+Ods4C/Z8Lld9nBdOuF1Kw=
Subject key identifier: 12:1F:8C:91:DE:5F:A7:56:69:05:02:A2:11:CC:D9:86:76:16:BE:93
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4555
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:17 +0000
ROA not before: Thu 05 Sep 2024 03:32:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131428
IP address blocks: 45.117.76.0/22 maxlen: 24
45.117.172.0/22 maxlen: 24
103.99.228.0/22 maxlen: 24
103.238.212.0/24 maxlen: 24
103.238.213.0/24 maxlen: 24
103.254.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17749 (0x4555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:17 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92641-5255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:5b:ed:dd:e2:0d:3e:75:97:56:8b:9a:c4:
a6:19:21:b1:f0:64:11:62:a8:9b:8a:e0:03:d8:ff:
cf:1f:d4:f4:0a:da:57:f9:c7:f3:ea:52:62:38:20:
36:89:93:1f:bc:ca:99:0d:7f:2b:ec:51:a8:56:36:
d6:fc:0c:e1:0c:40:9c:cb:50:82:dd:57:3b:50:27:
6d:fb:b7:fe:7e:85:cb:9a:5b:66:6e:a3:e1:63:29:
98:b5:0c:41:da:e3:62:d2:de:28:ae:13:7d:00:18:
60:a2:69:ca:e1:e4:22:e4:d6:07:cb:cd:94:05:b2:
c5:d3:eb:2d:aa:ca:21:21:b4:ec:67:aa:31:30:ef:
ca:02:c6:e8:dc:35:f8:8d:72:91:0d:85:3d:fd:0c:
59:70:d3:51:f6:73:e7:23:97:b7:f5:02:c1:7a:08:
24:68:f0:31:c4:0a:56:ae:16:20:2b:58:a0:e2:69:
c9:9f:5a:a4:c5:d3:ed:2f:83:f1:a1:d6:15:d2:b0:
66:c6:07:72:b5:54:e1:d6:13:6d:e4:50:27:be:35:
35:9a:b2:cc:0c:57:ca:d0:a7:ca:25:d1:66:db:9c:
75:95:d2:81:e4:48:e3:39:06:d0:96:3d:6d:5a:9d:
e6:a8:03:4e:7a:df:b2:78:6a:c9:4c:76:24:0c:38:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:8C:91:DE:5F:A7:56:69:05:02:A2:11:CC:D9:86:76:16:BE:93
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.76.0/22
45.117.172.0/22
103.99.228.0/22
103.238.212.0/23
103.254.12.0/22
Signature Algorithm: sha256WithRSAEncryption
78:18:b5:85:c2:2a:25:ea:25:5d:55:44:ee:36:51:60:e8:5e:
ef:d3:da:bd:03:57:f9:21:88:9a:a9:40:8a:ab:96:fe:fd:8e:
a7:9f:b8:37:3d:f4:fb:2e:3d:83:86:6c:57:3d:d6:23:5c:7a:
c7:39:cc:97:93:42:dc:79:76:a6:54:42:4b:fe:67:2b:8d:4b:
97:e5:50:18:55:c3:7f:2e:97:0b:d5:6e:72:ad:15:8d:15:79:
91:b3:78:80:88:92:0f:4b:6d:85:2d:8c:aa:41:ea:f3:aa:f3:
0d:3c:08:a0:17:7d:08:bd:04:19:ea:7a:53:2c:66:d1:5a:e0:
ad:23:dc:87:39:20:33:1e:99:ae:25:54:d4:c8:53:8d:4b:4e:
f5:d3:48:85:a8:fe:7a:24:35:ed:14:36:2a:6a:74:d0:53:44:
fb:aa:0d:76:35:e5:0c:eb:7f:42:96:c1:e4:ab:6e:58:0c:59:
3b:ff:b5:6d:0e:78:6a:46:10:2c:bd:98:da:67:b1:4d:d4:21:
f9:dc:a6:89:1e:24:94:30:27:74:c1:ea:e5:02:56:7a:cb:da:
42:aa:e6:92:12:0f:39:f6:5b:e2:a6:70:04:69:7f:3e:18:f2:
b4:c5:54:ba:b7:a2:71:f1:c2:07:14:eb:58:cc:d9:8b:20:88:
28:f3:d7:74
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICRVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY0MS01MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm1b7d3iDT51l1aLmsSmGSGx8GQRYqibiuAD2P/PH9T0CtpX+cfz6lJiOCA2
iZMfvMqZDX8r7FGoVjbW/AzhDECcy1CC3Vc7UCdt+7f+foXLmltmbqPhYymYtQxB
2uNi0t4orhN9ABhgomnK4eQi5NYHy82UBbLF0+stqsohIbTsZ6oxMO/KAsbo3DX4
jXKRDYU9/QxZcNNR9nPnI5e39QLBeggkaPAxxApWrhYgK1ig4mnJn1qkxdPtL4Px
odYV0rBmxgdytVTh1hNt5FAnvjU1mrLMDFfK0KfKJdFm25x1ldKB5EjjOQbQlj1t
Wp3mqANOet+yeGrJTHYkDDiPXQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBIfjJHe
X6dWaQUCohHM2YZ2Fr6TMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUE3MDlDOEVE
RDk4MTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAItdUwDBAItdawDBAJnY+QDBAFn7tQDBAJn/gwwDQYJKoZI
hvcNAQELBQADggEBAHgYtYXCKiXqJV1VRO42UWDoXu/T2r0DV/khiJqpQIqrlv79
jqefuDc99PsuPYOGbFc91iNcesc5zJeTQtx5dqZUQkv+ZyuNS5flUBhVw38ulwvV
bnKtFY0VeZGzeICIkg9LbYUtjKpB6vOq8w08CKAXfQi9BBnqelMsZtFa4K0j3Ic5
IDMema4lVNTIU41LTvXTSIWo/nokNe0UNipqdNBTRPuqDXY15Qzrf0KWweSrblgM
WTv/tW0OeGpGECy9mNpnsU3UIfncpokeJJQwJ3TB6uUCVnrL2kKq5pISDzn2W+Km
cARpfz4Y8rTFVLq3onHxwgcU61jM2YsgiCjz13Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:53 2025 by rpki-client