Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa
File: 17679A100BCE11EC85811A0DC4F9AE02.roa (raw, json)
Hash identifier: K4jESE87qttWdzH55euloSsk0IBNZb6PG/YPIPEToao=
Subject key identifier: AF:51:C6:E9:F2:0F:A7:E4:6B:51:56:37:21:24:35:D5:8D:D7:EB:2F
Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Certificate serial: 044A
Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa
Signing time: Fri 17 May 2024 02:06:12 +0000
ROA not before: Fri 17 May 2024 02:06:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53587
IP address blocks: 43.248.168.0/22 maxlen: 22
43.248.168.0/24 maxlen: 24
43.248.169.0/24 maxlen: 24
43.248.170.0/24 maxlen: 24
43.248.171.0/24 maxlen: 24
103.228.92.0/22 maxlen: 22
103.228.92.0/24 maxlen: 24
103.228.93.0/24 maxlen: 24
103.228.94.0/24 maxlen: 24
103.228.95.0/24 maxlen: 24
2401:9d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852BA
Validity
Not Before: May 17 02:06:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6646bb93-3c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:8c:df:22:ba:f4:fc:3c:da:85:ef:e9:50:
32:6b:1c:ec:b6:e6:e7:f7:e4:66:48:c8:73:65:6e:
21:b6:b7:13:94:41:6d:4b:a4:c6:21:78:a4:65:ba:
47:cd:3f:3d:f6:94:a2:5a:00:a3:ad:9f:ba:c5:c1:
52:d0:7f:9e:57:bf:65:4b:01:65:ea:df:8e:4e:60:
0e:95:00:70:1a:a8:3f:81:0a:90:45:ed:ab:30:af:
ea:52:e9:c0:0b:c6:b0:77:62:64:13:86:63:d0:39:
6f:a2:26:c9:31:4b:24:82:b5:85:3e:f6:14:cb:2b:
7d:3b:15:7b:4c:23:ca:99:3e:c6:07:03:16:b3:65:
2e:04:e8:4c:2a:40:91:b0:7e:d7:9d:12:d9:d3:a0:
9e:85:ee:4c:62:e5:f1:74:e1:39:bb:79:a8:cf:a8:
ae:aa:ae:f2:6a:23:89:46:32:c2:66:a5:d7:dd:fd:
f3:4a:21:18:56:e9:62:74:9b:80:f8:dc:7d:77:79:
84:79:6e:cf:e2:5b:c3:8a:7d:83:81:16:46:a7:da:
db:08:1a:74:f5:41:7c:9b:56:3c:b9:34:a8:40:f8:
9d:3c:d0:2f:1a:fe:62:8e:83:ee:3a:f7:da:05:10:
80:3c:82:58:c5:a5:79:0f:47:4d:cf:78:94:60:62:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:51:C6:E9:F2:0F:A7:E4:6B:51:56:37:21:24:35:D5:8D:D7:EB:2F
X509v3 Authority Key Identifier:
keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.168.0/22
103.228.92.0/22
IPv6:
2401:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
65:0d:43:d7:5a:11:ec:5f:22:d0:50:4f:2c:f3:09:c8:07:69:
11:e8:ae:8f:e9:1c:e2:18:89:58:65:8b:c0:55:41:8b:8a:c0:
64:5e:3d:f8:57:45:b3:e5:bb:14:bb:2c:ab:85:4a:4c:29:85:
dd:48:c8:fb:c1:f5:3a:f0:0b:69:4b:7c:f4:6b:e9:65:a0:29:
1c:c0:e1:f5:af:e8:f8:53:79:33:92:75:0c:56:b7:dc:b4:13:
e7:22:39:24:cb:b1:1d:2b:dc:d1:e3:e8:e6:0d:1f:88:b5:b6:
df:60:7d:7e:6a:72:77:b9:68:6c:e3:07:82:c5:1e:eb:12:83:
77:2d:28:0f:65:45:5a:39:d6:13:3d:da:79:c3:06:71:7c:32:
ea:47:bc:a4:fc:e4:ea:b1:e8:82:d5:d4:89:b2:50:f4:54:47:
3d:32:f9:6a:2b:2e:85:78:c7:d5:0b:93:a7:8f:9c:66:e7:a3:
e8:9c:e2:f2:3f:a1:31:fe:2c:ce:2a:81:e2:f6:99:d2:01:1d:
5a:75:85:69:f6:83:7c:59:75:3d:74:e5:cb:6b:ae:f0:23:cb:
6a:10:61:40:8e:63:1d:83:0b:d0:c0:e9:75:85:ad:4d:3d:bf:
d8:cc:5d:3f:12:99:bf:55:2f:8d:3e:15:be:b3:ad:02:3a:66:
ec:20:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:46:31 2025 by rpki-client