Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa
File: 171130AE15F011EC805A0A2FC4F9AE02.roa (raw, json)
Hash identifier: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=
Subject key identifier: D1:CD:FF:F7:7E:84:C0:21:12:85:9D:48:99:2D:2E:95:15:44:29:E9
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 2518
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa
Signing time: Thu 22 Aug 2024 16:12:43 +0000
ROA not before: Thu 22 Aug 2024 16:12:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 56099
IP address blocks: 103.89.236.0/22 maxlen: 24
223.25.0.0/22 maxlen: 24
223.25.4.0/22 maxlen: 24
223.25.8.0/22 maxlen: 24
223.25.12.0/22 maxlen: 24
223.25.16.0/22 maxlen: 24
223.25.20.0/22 maxlen: 24
223.25.24.0/22 maxlen: 24
223.25.28.0/22 maxlen: 24
223.25.32.0/22 maxlen: 24
223.25.36.0/22 maxlen: 24
223.25.40.0/22 maxlen: 24
223.25.44.0/22 maxlen: 24
223.25.48.0/22 maxlen: 24
223.25.52.0/22 maxlen: 24
223.25.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9496 (0x2518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119
Validity
Not Before: Aug 22 16:12:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c7637b-9c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:e1:d3:bc:ec:23:6b:eb:42:81:5f:75:66:
ec:06:62:9d:a9:31:8c:65:af:f4:1b:27:85:c4:e3:
76:41:de:66:2b:65:0b:8d:3d:25:5d:ff:29:f9:45:
87:f3:28:af:cf:91:4e:2f:60:67:93:13:cd:05:13:
d1:ec:f4:56:1d:6e:ff:fc:a9:a8:eb:41:4e:ab:a6:
ac:7e:05:02:3b:07:4b:48:9a:ce:49:5d:12:bd:c2:
5a:24:91:83:23:f9:f1:bb:12:96:91:67:b0:ed:9d:
a6:2e:11:72:67:53:7a:03:d1:8f:f3:a5:7c:f1:2c:
97:6c:e4:66:1f:39:11:aa:78:54:99:aa:01:b7:82:
2b:88:90:ab:a1:eb:46:40:27:cd:41:78:e0:3e:f7:
cb:0b:d4:3b:86:c7:15:a1:b0:41:36:a4:98:6d:a8:
71:1c:26:43:dd:c8:3b:05:12:fa:c8:b2:da:4a:1b:
23:b2:af:d4:30:ed:c3:d7:d2:02:b4:82:12:e8:ee:
2e:29:02:59:6a:89:59:a0:f0:03:58:aa:ef:b9:ef:
65:76:e4:12:ed:42:72:3a:bb:3b:f1:6f:cd:a6:a5:
aa:79:7a:1b:c1:ca:ed:2d:94:e6:9f:18:65:f7:bd:
ea:bd:bc:01:ba:87:c0:5c:02:14:22:a4:fe:b9:c9:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:FF:F7:7E:84:C0:21:12:85:9D:48:99:2D:2E:95:15:44:29:E9
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.236.0/22
223.25.0.0-223.25.59.255
Signature Algorithm: sha256WithRSAEncryption
1f:b4:00:7d:03:20:fe:0d:a1:96:bd:bc:81:4a:5c:3f:77:5a:
3d:63:ca:ba:9a:75:b4:72:0f:36:48:b4:0e:39:77:f4:e4:29:
29:14:56:2e:0a:1f:7a:1d:2c:b7:88:5d:01:40:e7:56:b6:8d:
c1:f2:b7:6f:87:9f:66:09:07:4e:c7:5c:d5:ed:f2:15:dd:d0:
18:ff:03:b5:a7:f7:66:31:0a:2f:ea:8a:7c:b5:19:fa:d0:2a:
50:9b:ab:2b:2c:7b:f3:00:9b:bb:bd:95:da:a7:07:9c:4d:9d:
e3:6c:25:58:6f:25:ca:3d:b3:2d:62:e4:67:b5:3d:61:9e:4b:
bd:8a:9f:8f:40:79:38:c7:07:4d:27:12:c2:99:ba:37:cc:c7:
59:a3:7f:10:71:2e:ad:3d:ce:5b:ca:45:a2:fb:aa:6e:3a:cd:
81:8a:22:ba:30:d8:ea:d9:7d:cb:ce:4f:ae:e9:de:c7:ff:27:
7d:ab:46:8b:ac:68:14:09:0c:ea:84:10:3d:ee:7b:6a:02:e4:
66:f9:2a:1d:93:96:30:bb:45:3c:b5:8f:c2:ac:1c:2c:f6:99:
c7:54:a2:4b:a9:0e:0d:06:6b:d4:ac:2b:a2:77:eb:1e:56:95:
23:93:57:22:16:ab:27:66:39:17:1d:75:ea:7e:40:af:df:86:
0b:cd:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:14 2025 by rpki-client