Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/64DF1E90EE3F11ECA9E43485C4F9AE02.roa
File: 64DF1E90EE3F11ECA9E43485C4F9AE02.roa (raw, json)
Hash identifier: R4wKoMPeQ3UGGkIZrKyg+7OgRaUI3SWwP8Ts3EpomTQ=
Subject key identifier: 69:E1:A7:D2:37:74:E3:5D:2B:FA:B7:E9:2B:EE:E8:3C:88:EF:A8:95
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 02DA
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/64DF1E90EE3F11ECA9E43485C4F9AE02.roa
Signing time: Fri 23 Aug 2024 13:32:14 +0000
ROA not before: Fri 23 Aug 2024 13:32:14 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 58945
IP address blocks: 103.26.112.0/22 maxlen: 24
103.35.156.0/23 maxlen: 24
103.35.159.0/24 maxlen: 24
106.0.52.0/22 maxlen: 24
2401:4440::/32 maxlen: 32
2401:4440::/36 maxlen: 36
2401:4440::/48 maxlen: 48
2401:4440:1000::/36 maxlen: 36
2401:4440:2000::/36 maxlen: 36
2401:4440:3000::/36 maxlen: 36
2401:4440:4000::/36 maxlen: 36
2401:4440:5000::/36 maxlen: 36
2401:4440:6000::/36 maxlen: 36
2401:4440:7000::/36 maxlen: 36
2401:4440:8000::/36 maxlen: 36
2401:4440:9000::/36 maxlen: 36
2401:4440:a000::/36 maxlen: 36
2401:4440:a001::/48 maxlen: 48
2401:4440:a002::/48 maxlen: 48
2401:4440:b000::/36 maxlen: 36
2401:4440:c000::/36 maxlen: 36
2401:4440:d000::/36 maxlen: 36
2401:4440:e000::/36 maxlen: 36
2401:4440:f000::/36 maxlen: 36
2401:4440:fb00::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Aug 23 13:32:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c88f5e-97d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:3a:d3:f4:c7:98:41:0d:be:2d:29:b3:96:
8b:22:b4:20:d2:de:ee:14:09:93:c8:fd:3f:f3:49:
13:2c:f1:98:85:e0:8f:ac:4f:87:22:02:00:27:ba:
42:9a:93:7d:e6:97:8a:7d:45:7b:f7:2d:1a:41:d7:
3e:0c:0f:b8:f1:98:1b:44:69:e6:13:05:d4:f4:a7:
66:4e:0e:87:dc:30:c0:03:83:3c:58:4a:42:a2:8b:
ab:09:52:8e:af:ac:50:94:54:86:ff:00:3b:ee:70:
d8:69:36:48:b1:8f:1f:6c:98:ee:85:64:e7:63:f7:
e5:e3:0a:78:4e:fa:cf:4a:a2:c5:9e:cd:ef:9f:26:
2c:e1:e1:35:ef:03:5d:ab:55:45:94:9a:2b:36:57:
bb:d4:e1:5e:69:ce:f8:13:7f:f5:a0:65:76:9c:48:
03:47:01:48:f7:1b:63:11:ab:7e:d6:86:53:b8:05:
3c:a1:52:01:97:67:55:01:81:66:b6:41:94:b4:6a:
ff:80:ee:12:54:c2:7a:93:79:59:a3:0b:a9:fa:42:
20:09:31:97:8d:96:cd:c6:ee:f3:4c:5b:40:19:c8:
56:fe:78:28:37:e9:a8:1b:fb:08:01:5c:cb:b0:5f:
51:f5:41:93:34:a9:d1:9c:d0:fc:08:26:e3:0e:9b:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E1:A7:D2:37:74:E3:5D:2B:FA:B7:E9:2B:EE:E8:3C:88:EF:A8:95
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/64DF1E90EE3F11ECA9E43485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.112.0/22
103.35.156.0/23
103.35.159.0/24
106.0.52.0/22
IPv6:
2401:4440::/32
Signature Algorithm: sha256WithRSAEncryption
46:ea:8a:81:8e:77:4f:9e:e7:0e:75:b9:67:58:7a:97:b9:2b:
9b:f3:f0:fc:97:34:50:e6:e0:11:40:ec:84:f5:de:8b:89:f6:
f7:44:67:69:4f:c7:8a:4b:b1:bb:52:40:4b:22:a6:c8:8c:0b:
73:73:ac:0e:a4:9e:07:2d:bf:f0:5d:32:f6:28:3c:6f:eb:62:
07:18:a9:90:dc:eb:94:c8:17:10:2f:dd:78:f9:8e:11:5a:d3:
0c:d2:0f:61:d4:d6:6d:90:e4:d4:3a:13:ab:27:96:f2:38:9c:
24:e1:7d:16:ea:69:03:ef:fc:53:99:24:ef:97:b2:49:de:ab:
39:42:5c:93:9b:ab:8c:fe:13:e0:65:7d:ac:4b:49:a3:10:64:
d5:82:7d:c5:4d:13:40:eb:67:7b:e2:77:a2:68:d6:29:c1:8a:
7d:41:86:0f:d6:61:ae:90:43:e4:7e:c6:49:2a:05:e0:4e:bb:
1d:85:29:86:5d:2b:b6:3d:25:16:e9:c3:43:58:46:7d:0b:87:
6b:d6:eb:2f:35:60:27:9a:8f:a1:ba:80:4c:b9:1d:45:25:b8:
c4:b0:4d:29:e1:c0:6e:38:b8:75:43:1c:1a:a5:5b:ab:0d:2b:
ac:6a:11:4d:55:81:4c:a0:2b:34:07:86:82:e0:cb:d6:ca:07:
70:41:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:32:01 2024 by rpki-client on console.sobornost.net