Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
File: 204459886A4211EDB5C5EC63C4F9AE02.roa (raw, json)
Hash identifier: ZuWy8t8vOBcHzpV9P9qo9z+PkEjJr/PsZxa0Afdq3t0=
Subject key identifier: 39:74:99:AF:36:E3:BA:58:A1:15:6D:45:9A:5E:39:AE:23:9B:91:1B
Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial: 0D1B
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
Signing time: Thu 06 Feb 2025 18:16:17 +0000
ROA not before: Thu 06 Feb 2025 18:16:17 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 58682
IP address blocks: 103.204.208.0/22 maxlen: 22
103.204.208.0/24 maxlen: 24
103.204.209.0/24 maxlen: 24
103.204.210.0/24 maxlen: 24
103.204.211.0/24 maxlen: 24
202.181.16.0/24 maxlen: 24
202.181.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA28B
Validity
Not Before: Feb 6 18:16:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a4fc71-896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:32:92:ca:aa:7b:05:a0:b0:30:00:a7:b6:
a7:06:80:36:91:d4:a1:c3:62:32:07:b7:51:8b:d9:
e4:07:eb:c7:aa:09:23:d0:8d:ab:88:87:45:af:4d:
d4:f4:d2:d8:34:a3:32:47:cf:8c:8c:64:43:ec:55:
34:62:6a:5d:1f:83:17:f1:37:2d:f1:6a:46:4f:74:
37:f2:c0:b4:79:b3:7d:12:c0:9c:a0:6f:71:91:89:
aa:e5:f1:73:e6:6b:29:38:49:2b:5a:25:34:6a:d2:
6a:a7:42:57:7e:9f:00:a7:7d:86:7f:17:90:68:d4:
e4:d3:8f:c5:a9:80:3d:3d:41:5f:37:b0:16:19:e2:
9f:da:a9:c5:46:dd:79:de:c7:4c:48:2d:5a:ec:a5:
52:6f:dc:db:58:bc:2f:7c:bf:a0:fd:88:59:af:0d:
1e:41:9e:4e:5c:c2:74:ad:b6:19:a2:5e:a5:0d:1d:
c8:a1:98:fd:90:66:25:f2:b0:6a:b3:bf:9a:c3:e4:
09:f5:2b:e5:5d:c5:f5:d8:fc:18:5b:75:5b:2b:5e:
a2:df:5c:2b:eb:8d:66:b3:00:69:bc:4a:ab:be:05:
2e:1e:c3:01:b3:15:ac:e6:8c:13:72:9d:ee:f5:b6:
e8:7f:10:25:3d:79:6c:1b:c6:08:be:10:7c:9e:62:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:99:AF:36:E3:BA:58:A1:15:6D:45:9A:5E:39:AE:23:9B:91:1B
X509v3 Authority Key Identifier:
keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.208.0/22
202.181.16.0/23
Signature Algorithm: sha256WithRSAEncryption
92:e5:88:6d:68:a2:79:9b:f2:1a:6b:76:d7:08:7a:8f:d7:2f:
cc:7c:8c:80:88:40:97:2f:dc:67:09:ba:6c:91:67:53:6a:89:
30:7e:ca:5f:7a:68:26:ce:6b:d3:15:b9:72:8e:8a:a3:b8:94:
d6:1a:33:c0:9a:60:08:b0:9c:41:79:39:c0:ed:9a:76:c3:b0:
43:19:2c:49:40:51:ae:b8:c9:e8:49:25:ce:10:8d:34:6d:d8:
75:07:c5:49:1f:8d:75:ee:14:b6:cc:f8:9e:a8:a5:a4:25:4f:
22:9b:4e:0b:32:27:75:3b:1c:52:07:e6:6c:d5:99:3d:a4:1b:
91:66:f3:41:e3:35:06:1a:22:c1:96:2c:0e:f2:1c:0c:32:5a:
49:d8:f3:a9:0f:19:04:e1:69:48:e1:3a:7f:36:9a:0b:0f:81:
e9:e9:f6:ab:24:a3:ce:d2:e3:79:79:12:73:f4:73:34:21:51:
94:f9:44:eb:e1:85:54:6e:70:e5:1e:d0:95:34:be:7c:36:75:
32:4d:db:57:eb:f5:fa:97:6c:24:4c:22:83:bd:a1:9b:92:42:
2e:3c:f9:a1:8e:e1:86:98:e1:6d:ff:99:ab:73:df:bc:e6:61:
0c:eb:80:00:f0:94:98:ad:df:74:a3:f0:2e:d3:30:0a:ff:7c:
2e:b4:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:57:48 2025 by rpki-client