Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa
File: A1021498C53311E7B0B0744BC4F9AE02.roa (raw, json)
Hash identifier: Ns6MCGMpSR+zeyD0qeQ8GuU0GoV9G94RijEmcRmZDOc=
Subject key identifier: 7B:3E:E5:21:DC:92:80:4E:7C:6D:30:4D:C8:D2:46:FE:77:F6:D5:0E
Certificate issuer: /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA
Certificate serial: 171D
Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa
Signing time: Sun 16 Jun 2024 17:28:10 +0000
ROA not before: Sun 16 Jun 2024 17:28:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135425
IP address blocks: 103.90.58.0/23 maxlen: 24
103.112.200.0/22 maxlen: 24
103.219.120.0/22 maxlen: 24
103.219.144.0/23 maxlen: 24
2405:6480::/32 maxlen: 32
2405:6680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5917 (0x171d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E116E
Validity
Not Before: Jun 16 17:28:10 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666f20aa-06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:f4:0d:72:b7:cf:70:43:c3:a4:87:65:1c:
f3:de:e2:bc:52:dc:7d:c0:c4:74:de:a1:04:9f:0e:
31:61:e2:04:96:35:62:21:93:4c:94:59:06:8f:94:
88:9f:7b:d1:61:f9:4e:0f:1a:f2:39:5e:ab:d9:2e:
bb:79:d6:a8:ed:ba:b9:3f:df:6c:0d:7e:f6:3d:16:
69:e3:68:d7:ac:06:19:8b:b4:e7:d5:92:a5:0f:85:
29:67:7f:68:c2:47:af:63:54:c9:89:05:3f:a4:b0:
28:3f:0c:be:41:a4:7a:49:f7:1d:af:12:18:95:0e:
f7:a2:22:3e:51:e4:ff:67:f6:fa:9c:16:5f:a8:3b:
89:eb:5b:8b:72:12:55:53:a3:3f:dd:94:8d:c6:ee:
a6:6f:17:aa:8d:2c:47:c0:25:39:66:be:f9:00:5f:
f7:d4:13:b6:a7:40:63:2f:3c:f0:a5:5a:52:5d:c4:
45:92:e2:92:19:62:35:69:4c:2c:29:91:ab:6a:eb:
dc:04:ae:b2:a5:ed:e7:bc:f0:49:d1:a3:cf:77:2f:
8c:3f:85:69:d2:93:be:78:af:0a:79:16:db:53:2f:
f9:4a:73:89:95:db:12:9a:5f:52:79:7d:c1:f3:ce:
27:ee:f6:44:88:af:75:01:90:09:47:cc:57:e5:31:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:E5:21:DC:92:80:4E:7C:6D:30:4D:C8:D2:46:FE:77:F6:D5:0E
X509v3 Authority Key Identifier:
keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.58.0/23
103.112.200.0/22
103.219.120.0/22
103.219.144.0/23
IPv6:
2405:6480::/32
2405:6680::/32
Signature Algorithm: sha256WithRSAEncryption
34:29:d4:1a:a2:48:f6:14:f3:35:61:ad:de:a7:48:13:61:31:
9b:cc:43:6c:41:fb:20:48:bd:23:0f:88:a2:28:47:64:f1:e1:
d4:78:6d:df:d6:80:81:e3:a6:78:09:94:63:e4:08:70:2f:0d:
28:3e:0a:07:7e:ca:ed:43:ba:d8:f4:49:e0:69:57:a5:0f:5c:
2e:c7:98:1e:62:88:2d:5f:c3:71:65:15:e9:5c:54:35:0b:69:
bc:98:a6:43:9c:ba:f6:a7:00:b4:ef:d4:37:67:20:9d:50:dc:
a9:21:b3:bf:78:1d:99:56:6e:1e:9a:c7:09:7f:c3:d2:25:ac:
9b:74:0c:fe:da:63:4f:cd:85:ea:18:07:e6:e0:7a:cf:5f:3b:
08:ef:8b:9e:60:b6:0f:c5:65:c2:40:07:c0:98:c2:9d:48:bd:
71:51:16:4f:35:7b:db:61:80:9f:c5:48:31:86:ad:b2:d7:92:
2f:40:f4:23:f2:3f:3d:15:a4:a6:3c:de:09:54:80:68:fd:db:
f2:9c:6c:52:f1:fd:7a:a4:39:22:01:3d:0d:9d:e4:88:66:64:
48:f5:82:23:a7:1d:d0:ff:7a:09:5f:6a:c1:a5:eb:fc:d8:00:
70:13:9d:64:fd:e5:f8:39:2b:0f:b7:13:58:1d:17:d4:9f:bd:
a2:5f:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:30:07 2025 by rpki-client