Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/E6ED434AE94011EFA772F638C4F9AE02.roa
File: E6ED434AE94011EFA772F638C4F9AE02.roa (raw, json)
Hash identifier: Iru0VqIheD6n+eN0MhwMT6xIF+ecr7X6Jd0HkYJP6E8=
Subject key identifier: 5C:EC:F6:17:AC:3D:90:33:FF:EF:2E:C7:36:A9:35:D0:65:FC:02:8C
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: 14
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/E6ED434AE94011EFA772F638C4F9AE02.roa
Signing time: Tue 18 Feb 2025 23:00:29 +0000
ROA not before: Tue 18 Feb 2025 23:00:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9336
IP address blocks: 27.113.240.0/21 maxlen: 24
45.64.56.0/22 maxlen: 24
45.113.244.0/22 maxlen: 24
103.18.124.0/22 maxlen: 24
103.53.200.0/22 maxlen: 24
103.233.224.0/22 maxlen: 24
118.127.96.0/19 maxlen: 24
121.200.208.0/21 maxlen: 22
121.200.208.0/22 maxlen: 24
121.200.212.0/24 maxlen: 24
121.200.213.0/24 maxlen: 24
121.200.214.0/23 maxlen: 24
202.90.48.0/21 maxlen: 21
203.153.192.0/20 maxlen: 24
218.185.232.0/21 maxlen: 24
2403:3600::/32 maxlen: 33
2403:3600::/33 maxlen: 40
2403:3600:8000::/34 maxlen: 34
2403:3600:8000::/35 maxlen: 37
2403:3600:8000::/36 maxlen: 40
2403:3600:9000::/37 maxlen: 40
2403:3600:9800::/38 maxlen: 38
2403:3600:9800::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC
Validity
Not Before: Feb 18 23:00:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67b5110d-85ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:34:c6:2e:fc:7a:6a:b8:60:30:ae:9c:38:
62:6a:46:49:03:62:6b:da:38:dd:6a:bd:73:a9:3f:
8a:21:4d:64:e8:fc:41:47:85:3e:74:47:ab:60:c3:
e4:4f:ac:7a:2f:af:7d:91:ad:94:48:15:0b:e4:b2:
57:a2:a8:b7:18:4a:f0:29:d5:d2:e2:6a:d5:d6:6c:
e0:e7:a4:f1:ba:7e:1b:86:69:ce:49:b0:17:3d:17:
98:c6:34:0d:30:76:f3:82:60:8b:80:66:7d:ae:e9:
fa:b2:35:e2:da:65:e6:5e:02:e5:2f:75:6b:db:69:
a3:c0:0c:17:e4:51:67:28:0b:19:73:f2:fd:c1:8a:
10:f2:45:34:51:72:35:81:09:4f:21:30:1d:72:44:
1b:37:3c:6d:03:8f:22:3b:0a:ae:cd:e5:12:0a:03:
c6:35:de:b0:88:3a:70:7e:c6:85:93:0c:7e:72:11:
be:a3:d7:e0:fb:11:5f:f4:25:3a:95:78:5b:77:53:
12:be:9e:19:e1:fd:ae:0a:f0:80:43:65:73:53:f5:
cc:69:e8:a0:bb:5a:5d:22:83:71:68:42:b0:d5:bc:
c5:43:3f:50:fb:8f:60:9a:16:f5:3f:53:57:67:db:
59:aa:5b:ff:bf:c7:84:80:7d:04:14:6b:94:e0:21:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:F6:17:AC:3D:90:33:FF:EF:2E:C7:36:A9:35:D0:65:FC:02:8C
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/E6ED434AE94011EFA772F638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.113.240.0/21
45.64.56.0/22
45.113.244.0/22
103.18.124.0/22
103.53.200.0/22
103.233.224.0/22
118.127.96.0/19
121.200.208.0/21
202.90.48.0/21
203.153.192.0/20
218.185.232.0/21
IPv6:
2403:3600::/32
Signature Algorithm: sha256WithRSAEncryption
28:4c:3d:1f:33:44:05:31:6c:0d:fc:d4:ac:5b:6c:9e:42:3e:
5b:1c:04:ea:20:09:c6:ba:61:57:b6:48:91:e4:42:0b:76:95:
93:a7:21:69:ea:c0:53:4f:0c:e4:87:3c:fd:0f:cb:b3:e3:6d:
01:d8:d6:65:45:37:8e:ce:a5:6f:e7:b9:88:7e:37:82:bf:ce:
e3:f3:3e:92:7c:7f:96:06:29:a6:28:3e:b2:7d:3b:a6:da:73:
28:14:f7:40:a9:e1:ad:1b:09:a2:3e:22:da:38:2f:08:25:f7:
3a:fc:e8:03:23:e6:e1:2a:94:17:f2:b3:ed:77:ad:91:7e:74:
3a:f2:73:a0:1c:a2:7a:0c:d1:29:fd:54:88:ad:78:fb:a1:27:
d2:2c:61:de:00:1a:e3:50:69:85:e9:c9:d0:21:00:7a:80:a6:
f0:ff:25:09:f6:16:84:62:ee:79:c7:30:78:46:b9:d4:01:97:
a8:54:81:13:44:b8:59:ba:c5:cd:e2:ae:74:eb:4c:80:b5:a1:
ab:31:5d:5c:d7:45:2c:9e:a5:ab:aa:30:9d:8b:c9:e2:fa:a1:
c1:a3:b2:b7:18:44:7c:71:13:76:f7:7e:47:c1:cc:c4:42:27:
81:a0:42:73:98:28:a8:f7:82:1d:b3:54:90:74:4e:f0:d5:eb:
5e:a3:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:32:20 2025 by rpki-client