Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
File: 1489D376FB2611EFBA3F0167C4F9AE02.roa (raw, json)
Hash identifier: karA/YQlpy7zX5oLbIQ0uZqmFNyEF0ZWvUejTbcSFns=
Subject key identifier: 6F:78:60:88:F8:14:5A:10:2B:10:8A:D5:13:27:69:10:29:0C:0A:45
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: 04
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
Signing time: Fri 07 Mar 2025 07:34:01 +0000
ROA not before: Fri 07 Mar 2025 07:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135357
IP address blocks: 103.212.228.0/22 maxlen: 22
103.212.228.0/24 maxlen: 24
103.212.229.0/24 maxlen: 24
103.212.230.0/24 maxlen: 24
103.212.231.0/24 maxlen: 24
160.202.168.0/22 maxlen: 22
160.202.168.0/24 maxlen: 24
160.202.169.0/24 maxlen: 24
160.202.170.0/24 maxlen: 24
160.202.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769
Validity
Not Before: Mar 7 07:34:01 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67caa169-cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:95:2b:91:84:01:f7:6b:68:4a:18:38:e0:
7c:e0:97:64:d2:b0:20:3b:5f:35:ed:32:04:a0:6e:
ea:84:33:21:35:93:10:44:91:32:bb:9d:14:11:d3:
86:49:ac:ff:12:31:f0:49:4f:e0:bf:08:09:34:54:
63:56:65:6a:bb:7a:26:9b:f6:7b:27:29:80:a2:61:
e6:97:8b:d4:cb:fc:80:74:29:1c:1c:5c:16:7d:27:
ce:39:3d:8a:53:cd:ad:bc:99:ff:70:cb:68:c3:2d:
48:75:ff:56:b1:49:55:2f:b2:59:78:61:0d:2d:c8:
8d:49:6b:9c:e8:f2:11:a2:92:df:ca:50:a3:b5:f6:
90:31:2a:d1:5c:56:d0:2a:be:86:5a:e6:34:a5:ad:
5d:f9:f2:bb:98:87:1f:2a:12:4a:83:51:de:04:06:
66:1d:2f:d2:69:3d:ae:5b:63:56:8c:11:a6:40:79:
59:73:f6:d1:25:2e:cb:c6:cf:66:b3:c6:b0:94:6e:
55:6a:eb:d2:f4:e2:cb:be:a4:85:4f:25:84:ca:d4:
74:eb:82:59:f2:66:b1:c1:1a:16:69:ad:db:e2:cf:
17:fe:25:e7:a9:0e:4d:f6:40:a8:9f:54:25:6f:dc:
10:7d:ac:1b:b3:3c:45:09:aa:92:d0:1a:f6:89:b4:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:60:88:F8:14:5A:10:2B:10:8A:D5:13:27:69:10:29:0C:0A:45
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.228.0/22
160.202.168.0/22
Signature Algorithm: sha256WithRSAEncryption
11:4c:95:71:41:79:fb:43:33:41:6d:91:e3:f6:61:98:9d:7c:
59:94:99:af:2d:63:40:46:b9:a2:6a:ba:df:00:1e:b3:fe:b7:
66:92:5c:a7:a5:51:9a:b8:35:3a:8d:e8:d6:21:61:c8:3e:01:
77:c2:08:37:22:46:b8:ef:03:a4:86:d6:f7:f6:c1:6b:0f:70:
8d:13:3e:35:03:24:a6:8e:e0:17:42:b3:63:fd:91:2a:b1:1d:
cd:6e:87:3d:78:a2:8c:c7:f5:c3:1a:7a:3b:5a:30:cc:f9:d8:
f4:57:ea:07:61:6c:97:39:da:4e:32:f3:3f:f3:b3:aa:fb:60:
1c:96:f6:60:b1:85:96:41:de:96:68:54:bc:6b:dc:f1:fc:4f:
20:78:bb:f0:a2:b9:ab:69:21:d3:3e:4a:4c:53:eb:07:c5:08:
ee:e9:d2:9a:81:42:11:db:5e:31:2b:4b:4f:10:14:f0:7d:eb:
3a:8e:fe:ad:b4:17:c3:95:94:e5:76:8b:de:3c:4e:c5:9d:79:
94:79:8b:ac:09:8e:52:1c:a1:b7:f4:3f:7f:2e:77:26:31:25:
df:01:84:af:8e:fb:12:b9:13:44:e4:af:ca:7f:b0:d3:5f:cf:
f6:69:3f:4c:c4:d4:e9:42:35:01:06:10:e1:a3:2a:0d:d2:2f:
45:f9:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:36:53 2025 by rpki-client