Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/A4F9DF48313611EEA18FB25AC4F9AE02.roa
File: A4F9DF48313611EEA18FB25AC4F9AE02.roa (raw, json)
Hash identifier: 0HJJe1PCvmhxE9Es0jRKRVtdSAE2r2mzrH+0zcVMwMA=
Subject key identifier: 54:A9:E4:79:38:93:20:BA:4A:06:46:85:2D:71:88:A7:4D:59:F9:F3
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 08CA
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/A4F9DF48313611EEA18FB25AC4F9AE02.roa
Signing time: Wed 02 Aug 2023 13:16:44 +0000
ROA not before: Wed 02 Aug 2023 13:16:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58895
IP address blocks: 103.92.20.0/22 maxlen: 22
103.92.20.0/24 maxlen: 24
103.92.21.0/24 maxlen: 24
103.92.22.0/24 maxlen: 24
103.92.23.0/24 maxlen: 24
103.203.44.0/24 maxlen: 24
103.203.45.0/24 maxlen: 24
103.203.46.0/24 maxlen: 24
116.213.32.0/24 maxlen: 24
116.213.33.0/24 maxlen: 24
116.213.34.0/24 maxlen: 24
116.213.35.0/24 maxlen: 24
123.253.92.0/22 maxlen: 22
123.253.92.0/24 maxlen: 24
123.253.93.0/24 maxlen: 24
123.253.94.0/24 maxlen: 24
123.253.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC
Validity
Not Before: Aug 2 13:16:44 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ca573c-aabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:75:2f:50:35:6d:95:c2:2a:72:be:9a:7c:
98:34:3f:b8:ea:10:59:2f:fb:05:14:09:22:36:8e:
78:c9:ed:96:33:f2:ed:00:db:b9:20:e6:9a:6c:b1:
79:fe:c4:1a:ae:b3:49:c9:d6:8d:22:57:97:be:9f:
21:c5:c2:8d:a9:f1:f4:aa:0e:c1:3e:a5:9b:62:c5:
2a:e1:b1:29:d9:f0:81:32:f3:3c:17:26:16:6b:84:
2a:1f:d4:83:2b:83:4c:f0:6e:d3:d6:27:91:f1:e0:
78:69:3b:04:4a:4f:55:21:9a:09:04:01:89:c3:3c:
2c:e4:cf:7c:fc:16:19:94:cf:1f:b3:8e:27:c3:bb:
68:7a:d7:17:38:e4:07:dd:7e:27:90:84:22:11:21:
1a:45:94:57:c1:29:20:3e:1e:02:fa:d5:14:5e:8d:
fe:17:31:eb:c8:28:b0:ce:ef:65:47:a1:14:e0:ca:
89:07:14:7d:60:5c:1f:d5:63:85:3b:5c:51:16:10:
d7:a2:34:0a:40:53:88:09:e4:ac:8d:1f:b8:1d:6e:
6c:1d:05:db:63:51:42:8f:55:d0:1a:e8:c6:4f:a8:
1c:e7:02:68:b3:35:b3:ee:ac:bd:c1:ad:b3:1f:d5:
ef:95:8c:91:34:22:c4:64:44:53:d0:77:a2:fa:f7:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:E4:79:38:93:20:BA:4A:06:46:85:2D:71:88:A7:4D:59:F9:F3
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/A4F9DF48313611EEA18FB25AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.20.0/22
103.203.44.0-103.203.46.255
116.213.32.0/22
123.253.92.0/22
Signature Algorithm: sha256WithRSAEncryption
77:cc:dc:32:90:87:32:de:90:c8:d1:e4:e0:a3:07:89:4e:2f:
00:79:e3:84:c4:6c:77:07:3b:1a:30:43:f8:6b:32:c5:d8:cd:
ab:a2:58:20:a9:ea:b7:e3:b3:86:b8:04:dd:2f:cc:e4:8d:71:
59:87:0e:74:3c:b3:3f:c7:fe:64:b5:6f:de:54:e9:ff:84:0f:
f4:bc:c1:4e:c1:7d:68:85:7f:8f:9d:65:22:15:c9:ec:e1:1d:
d9:53:f7:8d:2d:f4:70:55:7c:40:77:2a:b4:99:39:01:79:f2:
1d:01:66:be:99:75:d0:66:73:02:85:b6:8a:1f:50:b8:5d:c9:
1c:df:38:f6:6b:b4:89:ae:60:bc:bc:32:1d:db:2d:fa:5e:d9:
52:2b:e9:a5:c7:06:34:7e:0f:bd:0c:65:ce:8c:69:23:ef:a0:
82:68:8b:35:d7:44:92:ee:ca:f7:3f:46:c2:5d:c3:bb:b0:73:
09:2b:cf:16:59:03:d5:b2:9b:63:a8:b8:88:89:87:a2:0c:d3:
ae:9d:d8:f2:94:36:a4:be:80:ca:23:1d:72:51:72:d3:a5:95:
b3:0b:23:7f:2a:a1:15:ad:17:0b:78:40:5c:6f:d4:da:40:96:
47:a6:33:01:33:99:75:69:f3:f4:cf:75:c9:1c:02:3a:c0:ff:
23:a2:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:06 2025 by rpki-client