Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/8DE488088A6011EDADD5AD41C4F9AE02.roa
File: 8DE488088A6011EDADD5AD41C4F9AE02.roa (raw, json)
Hash identifier: xhDfxF4fy5wpjO/d6OpvIoYxUYNzkQo1Q3LMnmWVZxw=
Subject key identifier: C3:19:EF:8C:B0:4A:D1:6E:B9:75:09:C9:96:E3:DA:FC:27:D6:88:A9
Certificate issuer: /CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Certificate serial: 01AB
Authority key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/8DE488088A6011EDADD5AD41C4F9AE02.roa
Signing time: Fri 31 Jan 2025 02:46:15 +0000
ROA not before: Fri 31 Jan 2025 02:46:15 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 150422
IP address blocks: 103.38.208.0/23 maxlen: 23
103.38.208.0/24 maxlen: 24
103.38.209.0/24 maxlen: 24
2400:c060::/32 maxlen: 40
2400:c060::/48 maxlen: 48
2400:c060:1::/48 maxlen: 48
2400:c060:2::/48 maxlen: 48
2400:c060:3::/48 maxlen: 48
2400:c060:4::/48 maxlen: 48
2400:c060:5::/48 maxlen: 48
2400:c060:6::/48 maxlen: 48
2400:c060:7::/48 maxlen: 48
2400:c060:8::/48 maxlen: 48
2400:c060:9::/48 maxlen: 48
2400:c060:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Validity
Not Before: Jan 31 02:46:15 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c3977-34dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:6f:5a:8a:d4:3a:13:cb:c9:28:22:e2:0e:
10:0c:3c:c0:06:3d:a3:24:5d:bd:35:15:b3:54:90:
84:e5:e3:6a:51:b9:e1:1b:87:58:7d:af:74:a7:45:
6b:fa:ed:9f:1d:1d:e8:7d:f9:35:fe:9a:57:b5:95:
8d:c6:df:62:84:66:3a:6e:7a:1e:a8:9c:57:da:76:
3e:f0:ee:6f:24:6c:2b:65:e9:2d:7a:67:6d:50:95:
2b:c6:24:44:c6:60:b0:57:01:14:70:fb:21:0c:a1:
98:6e:73:3b:51:c9:d7:27:2c:89:de:d0:bd:d0:e3:
ba:e1:e1:99:4b:b2:b9:f7:3f:7e:66:dc:af:f9:f2:
60:af:e7:5b:8e:65:63:8e:a4:a6:52:a1:ac:c5:97:
d7:53:d6:c1:a3:9d:02:d1:30:77:62:9f:42:7b:8e:
e5:c9:be:95:bd:da:a4:d6:de:fe:57:21:1e:df:99:
2d:3b:36:f3:8f:20:24:4e:39:55:be:75:a5:f9:8a:
93:02:42:50:25:90:ca:9a:82:63:ba:d7:30:86:0a:
a1:01:98:78:51:cc:29:26:dc:54:c0:0f:7b:60:9d:
f8:e0:03:5d:69:19:d3:df:a7:9c:0c:95:74:cf:69:
0b:57:76:fd:f5:a9:9b:57:7a:bb:0e:29:37:bd:b2:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:EF:8C:B0:4A:D1:6E:B9:75:09:C9:96:E3:DA:FC:27:D6:88:A9
X509v3 Authority Key Identifier:
keyid:C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/8DE488088A6011EDADD5AD41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.208.0/23
IPv6:
2400:c060::/32
Signature Algorithm: sha256WithRSAEncryption
96:16:ac:11:a3:04:47:d1:4c:1b:48:b1:d0:b0:ff:41:71:e1:
63:f1:a8:54:09:5b:fa:49:b0:9a:07:46:fb:e5:91:6c:5b:a6:
ff:7e:28:dc:a8:cb:0d:9e:32:e9:26:7e:4e:96:51:0e:a8:3c:
0a:9c:04:2f:ac:7e:27:cf:86:ec:2f:84:ea:e9:dd:7a:b3:cb:
95:5f:4d:67:8b:5f:a9:89:53:1e:f5:ed:69:e5:b1:26:7a:65:
22:3a:6c:fc:99:97:8a:44:07:6d:31:d2:43:84:91:0b:d3:c1:
e5:2a:09:08:00:95:47:bb:9b:38:6a:db:37:ac:e7:68:79:38:
7c:49:0b:0b:2d:3f:34:a2:4f:c3:1e:70:c7:91:45:2a:c8:fc:
b3:70:b7:28:dc:3d:ce:86:e6:7a:2d:3d:60:6a:3c:22:a7:30:
9b:cd:68:a3:c2:b1:89:30:ba:bc:0a:6c:71:5d:93:39:9c:a2:
46:28:43:bd:6a:4a:2d:a5:a6:2f:a6:14:3d:cd:02:dc:f2:8b:
9f:ed:37:7a:31:cb:ff:7f:f9:bb:16:e4:ca:c5:64:20:f3:41:
8b:c4:41:ba:27:f5:e8:27:31:36:1f:24:86:9e:1f:f2:a1:b5:
7b:91:db:a2:f6:6f:03:be:4e:e1:4a:9b:6e:2e:c5:89:15:73:
c9:10:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:15 2025 by rpki-client