Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
File: C01674A86BF011EA87B33D25C4F9AE02.roa (raw, json)
Hash identifier: 70ds0/DyF5wXCHSmR464rx4ZYg97rO4f023Z3VGG144=
Subject key identifier: 07:C7:D3:69:1B:3B:1B:73:9B:8C:D3:4A:B0:A2:73:B3:B4:1F:89:16
Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial: 099A
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
Signing time: Fri 26 Jul 2024 21:09:20 +0000
ROA not before: Fri 26 Jul 2024 21:09:20 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135590
IP address blocks: 103.95.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Validity
Not Before: Jul 26 21:09:20 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a41080-cef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:f5:07:f3:54:2b:a1:d5:7e:b1:af:00:0f:
76:dd:6d:1b:8a:26:9d:2e:d3:76:e3:85:82:7b:57:
63:c8:c5:31:b0:5d:0b:26:ce:c9:df:81:8e:d1:8d:
c5:d3:33:62:b5:90:aa:14:f2:bb:0e:30:f5:e5:7d:
f1:6a:9c:df:08:c4:99:b1:9a:7e:9d:45:9b:94:d5:
e9:48:18:e3:c7:95:9f:3d:02:c5:78:77:f6:1a:ef:
b7:a3:24:68:0d:ea:50:10:6a:95:ca:54:62:12:64:
c8:98:f4:c1:9e:aa:81:80:6d:49:5e:d3:53:87:43:
11:ca:69:d8:6d:3b:24:fe:1c:e0:77:64:e5:af:3d:
16:f8:05:56:18:37:29:a1:d9:2b:23:36:62:7b:3c:
0a:d6:8f:fd:b8:8c:8c:e4:75:60:d1:23:eb:08:a6:
46:7c:3f:05:46:39:26:1a:c0:ea:a7:81:07:05:ab:
c9:87:c5:a4:dd:1a:5f:b2:20:2c:e0:ab:4e:72:e7:
b1:1f:59:fc:9f:06:e1:1e:ee:e5:ef:6e:5c:8a:31:
ac:8a:af:5b:52:dc:d8:61:69:18:9a:e8:f6:0a:fe:
a7:3a:fb:fd:47:4a:2f:cd:37:df:78:57:19:0e:cb:
1b:e5:60:45:a2:46:dd:2c:b2:33:3f:e7:58:95:24:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:D3:69:1B:3B:1B:73:9B:8C:D3:4A:B0:A2:73:B3:B4:1F:89:16
X509v3 Authority Key Identifier:
keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:92:94:27:e7:74:47:28:4b:ea:70:24:71:12:ba:a8:4a:ef:
ac:89:55:db:1a:58:6a:cb:e0:c6:85:0f:0a:e9:23:ea:21:fd:
57:f3:f6:47:09:9e:c0:29:43:85:2d:9c:5f:99:cf:56:97:b7:
31:98:3c:79:b3:f2:82:3e:42:cc:aa:78:34:1f:79:1a:d1:ba:
fd:0b:69:28:14:90:5b:c2:64:4b:b3:bf:6f:1e:cf:c6:87:f7:
6a:2e:e7:66:cc:b0:97:04:6a:46:bd:c2:9a:54:ab:fa:19:c4:
e1:6d:ba:d0:59:71:24:93:d2:4a:ff:88:73:a2:b3:b3:4a:15:
9e:c8:98:13:37:fe:0b:97:88:7e:4f:fe:86:52:4a:46:6c:cb:
f9:58:2b:ae:e2:8a:6c:c7:bf:0a:33:9d:4b:f8:4c:12:20:bb:
38:b2:87:c8:88:00:6b:70:c6:7e:19:2d:e5:61:12:a4:f7:3d:
bb:74:c9:34:c8:d5:10:a9:4f:b2:8b:c2:6f:71:65:56:7b:ab:
e4:f0:72:2c:1f:c3:e6:af:a8:03:fd:82:36:93:c0:e3:47:30:
48:c8:3f:84:8e:a7:af:23:79:49:78:8e:8c:3d:da:01:d2:5c:
61:c9:b4:8d:36:38:fb:d7:c0:7e:95:53:3a:8b:68:6e:28:72:
e4:65:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:55 2025 by rpki-client