Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
File: 1E809CD0845111EAA961467EC4F9AE02.roa (raw, json)
Hash identifier: H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=
Subject key identifier: 80:C3:81:F8:66:E7:C8:66:8A:F0:0A:0B:59:63:3A:CB:A3:67:2C:E5
Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial: 0914
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
Signing time: Sat 06 Jul 2024 21:08:38 +0000
ROA not before: Sat 06 Jul 2024 21:08:38 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 131287
IP address blocks: 103.68.197.0/24 maxlen: 24
103.150.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Validity
Not Before: Jul 6 21:08:38 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6689b256-2ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:84:96:13:ea:d0:e2:a6:bc:6c:bf:70:f6:
34:bc:0d:fd:1b:44:72:73:5d:d4:d2:7d:d7:ec:5f:
7e:f3:2c:38:0b:a3:53:1f:7d:5f:99:0b:ec:19:48:
83:bf:2f:a3:70:59:ab:31:8a:f0:e4:08:2b:5f:56:
84:79:52:bf:e5:8b:b7:dc:a0:5d:53:91:7f:89:e2:
f4:5f:93:d1:d4:b4:10:38:de:e6:b9:56:18:67:2d:
d4:23:a8:97:e5:62:0b:45:ee:10:5a:1c:4b:24:f3:
3d:0d:5a:41:93:cb:65:a9:8f:08:0e:0b:df:1a:35:
4a:c9:dd:85:3e:d7:cc:6c:31:3e:05:95:91:4d:f5:
65:a9:26:d1:4d:f7:ef:13:00:80:62:7d:05:74:04:
60:9d:e6:88:a8:fb:68:ea:a2:a2:35:e8:c1:3b:97:
15:14:da:71:47:e9:6c:4d:a2:4c:aa:19:62:8c:94:
2f:82:a3:0a:fa:1f:a2:82:73:53:cc:92:3b:98:fc:
33:35:9e:54:7a:35:97:27:4a:b5:d8:bf:71:ad:b6:
52:2e:11:d0:6e:33:be:4f:3f:94:49:5a:ef:6a:95:
67:cd:90:dc:30:18:17:c1:05:cf:cf:e2:c4:d9:5e:
d0:54:95:f9:fc:f4:55:d4:ba:4c:dc:47:4a:01:04:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:81:F8:66:E7:C8:66:8A:F0:0A:0B:59:63:3A:CB:A3:67:2C:E5
X509v3 Authority Key Identifier:
keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.197.0/24
103.150.170.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b2:6c:69:14:19:24:9b:70:56:d2:2d:cf:de:85:9e:1a:ff:
b3:5c:e4:8e:ae:d7:c2:2e:09:fb:d4:c7:ab:49:50:42:07:b0:
16:a8:01:b4:be:05:b9:8f:8a:68:f0:6a:9c:43:af:45:5b:ab:
a7:63:e5:3f:5d:5b:6d:fc:82:89:2f:5e:35:87:9a:57:62:ce:
04:58:e3:78:05:14:33:44:59:65:e8:8c:e1:51:5b:0e:b8:cc:
f6:71:9c:7d:6b:65:48:d2:3e:3d:a4:11:71:62:4f:ff:a9:00:
26:78:b3:31:3a:0f:af:de:2f:43:24:e4:d1:01:a8:df:d7:c2:
b1:11:41:e7:e7:50:65:7d:4d:79:1b:f3:b9:e3:8c:87:50:3c:
31:a5:52:5c:b5:c7:ca:93:55:2d:b6:6f:d5:dd:8e:65:5b:c3:
a9:d7:e0:f3:37:16:98:67:42:f6:a6:ca:92:ee:13:0b:41:2e:
2f:76:ba:25:33:20:02:da:56:12:c4:5a:a3:89:6c:c2:0f:15:
ce:e4:09:76:f6:c4:6b:80:ea:e6:98:91:8e:9d:dc:a2:ea:e1:
82:88:46:94:66:03:a5:d3:d0:0f:69:92:31:80:fe:b8:41:32:
5f:f0:db:b3:b2:6c:62:2e:82:c5:33:a9:2e:19:56:f8:44:fb:
f4:94:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:40 2025 by rpki-client