Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
File: 089F5864771611EE908B571BC4F9AE02.roa (raw, json)
Hash identifier: +ywFK7qPgtSz0tT8/ynJt1rLpjtVXaMcBVj/NUkbZE8=
Subject key identifier: 10:9D:CE:17:38:0E:A8:59:85:47:ED:7E:48:09:7C:F8:83:21:63:FA
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 018F
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
Signing time: Sat 21 Dec 2024 02:26:11 +0000
ROA not before: Sat 21 Dec 2024 02:26:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150661
IP address blocks: 103.48.162.0/23 maxlen: 23
103.48.162.0/24 maxlen: 24
103.48.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Dec 21 02:26:11 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67662742-bff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:1b:08:d1:b8:be:fd:01:cd:dd:ad:6a:e1:
8f:cf:c8:51:30:9c:46:af:98:4b:6c:76:a8:52:88:
6c:26:23:92:e7:1e:43:53:1e:f3:93:c4:6c:70:cd:
3e:1c:01:b4:ee:33:92:01:a5:99:af:b9:17:d1:b8:
03:bd:9b:62:6f:ab:06:d0:4a:25:2c:86:ef:be:02:
6b:e3:46:cf:4e:6d:50:26:76:5a:17:7d:7d:00:47:
dd:1b:85:4a:1c:ff:a2:f7:a3:0a:a9:28:c4:13:47:
b1:b2:87:30:45:d1:14:10:ab:75:e0:6e:c5:13:0c:
2d:69:56:cc:ef:0d:2b:00:3c:20:01:5b:dd:ce:70:
5d:5f:35:d1:e6:78:ed:d3:92:4f:97:77:c6:f3:20:
ca:eb:dc:b3:fe:8a:58:ed:4c:98:30:45:10:b4:a2:
29:4f:44:19:7c:c9:4e:09:63:a9:5a:2e:c5:82:ba:
cb:d2:d4:4c:df:52:15:53:14:5f:7b:c6:a1:6e:fc:
9c:71:69:f6:1d:7c:87:e5:a0:0f:9e:38:0c:d7:f5:
8b:ff:bc:43:a7:ce:5a:e0:7a:29:6d:22:b4:45:d2:
8d:7f:8a:fe:b5:ab:c2:32:28:c6:20:69:5a:10:f3:
6b:65:ea:5c:7a:32:e9:b0:6f:cc:50:1e:2f:dc:40:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9D:CE:17:38:0E:A8:59:85:47:ED:7E:48:09:7C:F8:83:21:63:FA
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.162.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:09:fa:7d:89:d6:15:65:7f:66:be:f3:ad:3a:79:d5:72:b1:
8c:ec:87:34:e0:8a:67:f5:f3:0f:91:38:7b:98:7a:86:9c:df:
74:53:b8:8c:43:19:51:cf:9d:00:7b:5a:e2:ff:f2:ca:b1:06:
96:41:d0:b7:53:7f:0e:33:43:54:2d:43:04:8c:3a:f1:72:3c:
82:dc:56:77:12:a3:0d:b6:e0:72:1b:75:d4:38:60:bf:1f:7c:
9a:ba:c3:ca:a8:73:62:18:a8:40:fb:c9:07:4d:c7:99:47:4c:
ac:b4:b4:e5:22:1a:0c:97:99:63:bf:12:96:7e:cd:9c:a7:2e:
52:61:55:e6:97:f1:41:49:7b:50:5c:58:c1:ee:09:33:29:7f:
77:61:70:82:fd:6e:e4:bd:42:76:d6:24:7f:56:2a:e0:72:50:
ee:32:bf:ee:91:85:55:40:4d:44:c8:90:f0:37:a5:57:69:6d:
1c:d2:cf:b1:ed:62:07:17:9a:35:35:ef:3d:19:10:4e:22:5f:
11:51:18:2d:79:4d:6b:df:09:42:8d:78:94:6a:17:b0:2d:a9:
4c:b8:4d:aa:bb:57:0d:51:32:4a:0f:c8:e4:3a:03:61:a4:80:
21:28:3e:01:33:46:2c:47:cf:8f:63:b9:f8:30:48:ae:77:67:
d3:78:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:39 2025 by rpki-client