Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/A94C046C6BAD11EDAD6BE535C4F9AE02.roa
File: A94C046C6BAD11EDAD6BE535C4F9AE02.roa (raw, json)
Hash identifier: npcWyMB4wyP6EAau+8e0yKhVjdC/WsbQq3kEGlO+Rhg=
Subject key identifier: C3:A9:81:95:1B:3E:7B:00:04:0A:38:68:40:31:29:21:30:3B:BF:13
Certificate issuer: /CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Certificate serial: 0718
Authority key identifier: A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/A94C046C6BAD11EDAD6BE535C4F9AE02.roa
Signing time: Thu 02 Mar 2023 23:09:21 +0000
ROA not before: Thu 02 Mar 2023 23:09:21 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 38195
IP address blocks: 103.237.16.0/22 maxlen: 22
163.53.144.0/22 maxlen: 24
220.233.4.0/22 maxlen: 24
220.233.8.0/22 maxlen: 24
220.233.36.0/22 maxlen: 24
220.233.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A58, serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Validity
Not Before: Mar 2 23:09:21 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64012ca0-4ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:03:f9:ec:98:62:f4:f4:e4:82:ea:5d:18:
23:35:a7:3a:d5:69:d1:ce:2c:9a:e4:8e:df:9b:db:
f7:09:92:fd:73:b9:bb:7c:08:fd:dd:63:f5:0a:78:
44:b3:ab:55:db:fa:cb:66:86:10:07:76:35:67:82:
c6:b3:12:f3:6a:13:01:d7:ea:5f:b2:d7:27:f7:8c:
2b:81:6b:b6:34:81:ed:ab:37:58:e2:f7:4d:d2:ba:
4b:a4:11:ee:87:23:9a:35:2c:85:77:c9:0b:c0:cb:
da:96:15:3c:3e:8f:46:c6:c1:57:9a:d3:30:c4:6f:
e6:d9:72:f7:42:a1:66:32:74:98:f2:a5:23:05:42:
00:33:16:d1:a5:a3:11:4f:57:d3:ed:55:80:b7:5f:
5c:04:07:3e:eb:90:9e:c6:d2:3c:4e:2a:9a:23:b0:
5d:b5:a9:66:2e:e9:83:2e:30:7b:ff:78:d5:01:94:
fb:80:39:49:25:f1:ab:fe:33:5f:32:ed:7c:1d:3e:
87:15:bf:93:43:a6:0f:20:20:da:4e:a8:db:11:0b:
e0:83:bb:00:ab:50:9b:66:ed:77:4f:f9:27:11:79:
77:c8:38:43:ad:ab:e2:2f:a0:66:0a:27:14:b7:6f:
b0:94:36:5c:db:b3:42:78:ac:19:fb:f2:ce:6c:98:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:81:95:1B:3E:7B:00:04:0A:38:68:40:31:29:21:30:3B:BF:13
X509v3 Authority Key Identifier:
keyid:A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/p__qGOCaOaCqbzdaCoO1cI7CLYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/A94C046C6BAD11EDAD6BE535C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.16.0/22
163.53.144.0/22
220.233.4.0-220.233.11.255
220.233.36.0/22
220.233.44.0/22
Signature Algorithm: sha256WithRSAEncryption
76:60:a5:87:a8:ab:3f:67:2a:59:34:e7:0e:f6:13:30:7c:be:
c1:3d:a6:2c:e1:a5:13:ec:45:49:75:0d:98:8d:70:2f:1a:1c:
2b:64:ce:e3:b4:19:cf:58:14:ad:dd:d0:16:eb:e7:6e:7c:2e:
84:96:54:0c:8c:4c:40:44:25:de:88:22:e6:c5:70:e1:f1:44:
75:34:76:1d:56:11:3f:2c:87:3f:66:42:fe:52:7f:88:a7:9c:
74:b6:40:a4:2e:f8:49:c4:ec:f4:9c:49:49:dc:7a:76:d2:6a:
40:f4:14:92:5e:92:c1:a0:c8:8c:31:05:c8:54:a0:37:6c:5b:
6f:d6:01:ba:c4:c5:7c:3e:72:39:b7:d7:5d:a0:8c:d7:fd:56:
c7:e6:98:a3:19:8f:28:41:42:9a:60:33:1b:24:10:aa:f9:19:
ee:c8:fb:e9:4e:2d:3e:97:15:3f:57:97:4d:10:95:30:96:e9:
2e:28:26:1a:fa:97:68:93:7f:d1:64:df:22:04:0a:6f:ed:9e:
6a:01:a8:44:ee:b2:e1:0f:ba:1e:35:36:f6:25:2c:9b:a3:25:
0c:18:2a:bf:d3:c4:ba:c5:87:10:17:a7:d2:51:ef:83:65:f9:
c6:8c:c7:e6:07:a7:72:df:a2:7a:ed:72:8e:21:2a:d2:c5:5e:
70:bb:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:24:53 2025 by rpki-client