Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE7DDDAEEECB11EF8016F87DC4F9AE02.roa
File: AE7DDDAEEECB11EF8016F87DC4F9AE02.roa (raw, json)
Hash identifier: YEHPUlUDmGbzHk+qDsdAyrer60w+zWiDuJVfRgnDqlM=
Subject key identifier: 25:1E:33:DB:9F:9A:B2:5D:E6:9A:77:09:D9:49:C8:A4:8A:44:16:E5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 49B5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE7DDDAEEECB11EF8016F87DC4F9AE02.roa
Signing time: Wed 19 Feb 2025 14:13:24 +0000
ROA not before: Wed 19 Feb 2025 14:13:24 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140803
IP address blocks: 103.161.176.0/23 maxlen: 23
103.161.176.0/24 maxlen: 24
103.161.177.0/24 maxlen: 24
103.162.28.0/23 maxlen: 23
103.162.28.0/24 maxlen: 24
103.162.29.0/24 maxlen: 24
103.178.228.0/23 maxlen: 23
103.179.186.0/23 maxlen: 23
103.180.146.0/23 maxlen: 23
103.180.148.0/23 maxlen: 23
2407:f540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18869 (0x49b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Feb 19 14:13:24 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67b5e704-eeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:d9:87:55:3d:50:4c:fb:b3:b3:19:36:ef:
d4:02:56:98:d3:67:69:a6:0c:52:30:78:e7:d0:2a:
06:aa:c2:d4:e7:32:94:e4:ec:ac:02:b8:c0:87:a2:
34:97:70:69:39:72:8e:e0:a1:46:56:57:6a:96:a6:
20:67:2c:94:d6:6a:21:d5:2a:10:22:59:6b:e0:14:
37:52:88:48:28:0c:b3:f8:54:ef:72:8d:86:45:80:
f1:23:4a:84:c0:8d:7c:65:ba:f0:6a:1a:e0:a0:2c:
04:ea:03:4a:4a:7b:02:be:26:89:f0:c5:0c:19:dd:
7d:be:27:ef:c2:e2:fe:58:d3:ca:4d:89:4e:b0:5f:
cc:1b:26:37:23:42:e9:7e:73:88:84:b2:a3:aa:a9:
7f:f9:7e:01:0d:4c:dd:ce:83:2f:29:99:b7:d6:f0:
1c:ad:d4:19:70:de:2c:23:6b:bb:02:bd:4b:3b:84:
78:a1:27:19:f3:70:29:29:29:f0:4d:9a:dc:58:05:
81:22:6e:f7:d0:b6:4b:2a:ff:a1:43:9f:ee:a8:04:
2e:ec:23:bc:bc:ed:54:7a:80:db:c6:43:60:4b:38:
59:a2:93:66:e7:0c:ad:dd:59:8d:b8:4e:56:dd:a3:
4d:0d:e1:11:8f:5b:b6:78:72:89:72:7d:11:d5:33:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:33:DB:9F:9A:B2:5D:E6:9A:77:09:D9:49:C8:A4:8A:44:16:E5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE7DDDAEEECB11EF8016F87DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.176.0/23
103.162.28.0/23
103.178.228.0/23
103.179.186.0/23
103.180.146.0-103.180.149.255
IPv6:
2407:f540::/48
Signature Algorithm: sha256WithRSAEncryption
59:24:ae:a2:62:0e:01:52:c7:8a:12:f1:9c:ef:b5:85:cb:8c:
61:70:77:e7:3d:1e:21:49:df:68:5c:e3:80:02:cf:65:0c:9e:
ca:7b:20:20:85:b2:1e:2c:8e:20:27:37:ec:da:13:db:d3:72:
2a:78:ee:ef:1b:64:f7:30:7c:f6:f8:07:91:03:ab:68:cb:92:
18:f7:4f:7a:c6:39:f1:53:55:a9:c1:e4:5f:40:20:32:69:9c:
87:b9:62:d5:3c:51:58:c3:e5:dd:80:68:f1:f9:a6:3e:0f:dd:
2c:05:b0:a2:cc:31:48:e5:28:eb:0d:66:99:cb:d8:f3:a4:ab:
20:0d:bf:a6:5f:74:29:6f:76:ee:b4:66:6c:77:eb:4a:01:bf:
2c:e8:70:44:30:0d:b0:03:59:24:00:aa:fb:de:72:33:18:09:
e7:31:15:e3:8b:41:af:81:2c:76:be:4f:ae:c4:75:9b:86:70:
2d:95:7f:6f:1b:b2:e6:c1:0d:6f:a1:18:e9:d1:6d:b2:74:5e:
83:73:12:24:f0:a3:55:35:30:17:b3:92:c7:f1:52:fc:4c:a7:
80:41:07:06:5f:0b:51:b0:ae:5c:5b:f6:f3:08:2e:5f:b8:32:
a3:bb:44:fb:6c:00:c4:7f:9a:3e:b3:c6:32:75:ca:00:9c:d9:
dc:fe:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:03 2025 by rpki-client