Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa
File: 8120226CBEE111ECBFC4F882C4F9AE02.roa (raw, json)
Hash identifier: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=
Subject key identifier: 21:F0:5F:01:7B:87:81:71:6A:F6:3B:CC:78:11:92:EF:62:C8:BB:CD
Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial: 03C2
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa
Signing time: Wed 05 Jun 2024 03:38:46 +0000
ROA not before: Wed 05 Jun 2024 03:38:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 56224
IP address blocks: 103.150.152.0/23 maxlen: 23
103.150.152.0/24 maxlen: 24
103.150.153.0/24 maxlen: 24
202.12.80.0/22 maxlen: 22
202.12.80.0/23 maxlen: 23
202.12.80.0/24 maxlen: 24
202.12.81.0/24 maxlen: 24
202.12.82.0/23 maxlen: 23
202.12.82.0/24 maxlen: 24
202.12.83.0/24 maxlen: 24
2405:3e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9467
Validity
Not Before: Jun 5 03:38:46 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665fddc6-9905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:2e:25:f9:0f:e0:91:15:91:fd:9c:a9:da:
cb:a5:4a:f0:89:fd:b5:81:ea:c4:62:b3:47:44:88:
5a:7d:b0:25:3d:26:64:02:97:dd:5e:a2:b1:78:9f:
41:18:20:f7:01:24:1a:0a:c2:5f:3c:c5:2d:f3:57:
d6:2b:cb:7e:bb:b5:59:c8:b0:ee:5b:35:7a:38:12:
43:b2:f6:87:95:ef:7e:87:9d:80:6a:c6:a7:df:c0:
47:2d:6c:db:66:2a:9d:c2:e3:78:2c:34:3b:61:79:
f9:79:eb:f8:1c:61:51:5b:35:ce:9b:a8:d3:cf:2b:
f2:d3:b9:eb:21:e2:e7:a6:80:59:af:87:e5:cb:24:
8e:b6:66:36:db:5f:d9:e0:90:26:df:71:b1:1c:79:
95:ea:2b:3a:2e:6f:b9:60:5b:38:ba:37:b0:8b:fa:
df:88:fd:a1:53:65:88:89:ae:be:69:38:9b:6c:a3:
d7:75:73:a5:1c:c9:f5:86:bd:99:d1:ee:81:ed:d2:
85:b7:0f:d0:87:41:e6:7f:dc:05:e9:47:64:e6:bd:
9a:4b:80:0b:3d:45:0e:e6:b5:7d:82:e3:bd:df:9b:
8e:ce:42:a3:bd:09:da:cb:e5:86:73:70:5c:9b:9f:
31:a7:68:19:5f:04:99:1c:94:c7:ff:ba:5a:a1:96:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:5F:01:7B:87:81:71:6A:F6:3B:CC:78:11:92:EF:62:C8:BB:CD
X509v3 Authority Key Identifier:
keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.152.0/23
202.12.80.0/22
IPv6:
2405:3e40::/32
Signature Algorithm: sha256WithRSAEncryption
03:d0:08:19:f3:bd:13:09:a1:37:47:2f:e7:d6:35:81:63:48:
35:70:b3:27:23:85:71:5a:3d:33:6c:03:ee:5b:14:ac:7c:4d:
f4:7e:e8:c7:ef:c8:00:85:c5:74:73:10:28:42:87:8f:e1:a5:
03:69:15:c4:6f:28:1f:78:73:50:1c:e5:68:35:ab:74:a5:98:
5c:0b:e0:3c:79:2d:97:9f:8a:b4:b5:6f:46:8b:f6:6a:06:b7:
8e:a5:bf:7e:60:12:5b:1f:c9:15:c3:82:bf:9a:c8:12:99:7e:
2c:e7:86:b3:b3:8d:5f:d1:3e:82:25:6b:cb:fc:e9:f7:d5:5e:
1c:31:9b:43:e0:91:c6:f1:b1:9e:cb:e4:52:77:28:e2:13:90:
1c:26:8d:e1:02:ba:83:b3:ea:5e:52:b0:c7:1f:9b:7b:8d:80:
61:71:e0:3e:28:b6:a7:8f:3f:a9:11:ba:85:88:35:5d:2e:d3:
42:f7:42:1f:7b:7b:1b:ab:bf:fd:30:e7:f8:78:68:f7:65:d7:
94:df:ec:4e:41:19:12:1a:a1:ee:76:df:ce:e5:48:c0:39:bb:
7a:86:74:13:1d:f3:1c:b9:20:10:9a:a5:51:41:3c:60:bd:85:
09:c4:3a:4f:0e:83:82:06:ae:69:b8:5d:0a:b9:b3:8a:12:36:
26:05:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:03:25 2025 by rpki-client