Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa
File: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (raw, json)
Hash identifier: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=
Subject key identifier: EA:B8:4C:0E:8F:4D:1E:B3:31:11:19:C0:1B:39:AE:2B:E8:C7:F0:D8
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: FB
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa
Signing time: Fri 03 Jan 2025 04:07:31 +0000
ROA not before: Fri 03 Jan 2025 04:07:31 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 40065
IP address blocks: 103.94.185.0/24 maxlen: 24
103.99.115.0/24 maxlen: 24
103.99.178.0/24 maxlen: 24
103.99.179.0/24 maxlen: 24
202.91.33.0/24 maxlen: 24
202.91.34.0/24 maxlen: 24
202.91.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Jan 3 04:07:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67776283-0442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:27:24:99:0a:65:23:f0:c9:3e:30:c5:a0:
c3:2c:e9:67:8b:24:64:6f:04:af:f3:3e:aa:53:15:
4d:76:04:50:c1:b2:e6:7b:9b:44:4f:09:6e:2f:1d:
a3:a7:44:7c:b7:b2:a3:6e:87:ec:b7:54:c6:4b:86:
9d:43:4d:d1:b1:59:5d:2c:b9:76:55:87:8a:d9:0b:
47:0b:13:29:95:07:8f:00:b6:7c:84:ca:a7:c7:bf:
e2:a6:82:26:8f:2e:a8:f4:e6:47:d4:0c:1b:1c:4b:
c8:3c:ba:ec:ea:5f:ae:26:b3:5e:fe:26:1a:17:bb:
82:4e:52:83:fd:ae:62:f4:7b:b2:47:4e:38:1c:c9:
9c:fe:f1:1c:ea:20:c6:a2:41:7c:8e:c2:a2:de:37:
65:34:9b:2c:1c:86:16:a3:48:b9:41:79:49:d4:28:
5c:e8:d6:44:c8:7d:19:b3:1d:a5:64:1b:e4:c5:e8:
a6:cd:5b:ce:fc:67:f0:a8:d4:04:c6:2a:5c:b8:13:
7c:58:95:4b:52:45:b3:2a:c4:8c:62:af:ee:90:da:
60:e7:ac:43:7b:20:af:cc:cc:b0:0e:21:2c:d0:82:
74:9e:02:f8:2c:c1:24:51:4b:ce:3f:47:3d:1a:75:
47:83:05:f1:b8:00:93:0e:75:51:0d:2d:0c:c9:c4:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:4C:0E:8F:4D:1E:B3:31:11:19:C0:1B:39:AE:2B:E8:C7:F0:D8
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.185.0/24
103.99.115.0/24
103.99.178.0/23
202.91.33.0-202.91.35.255
Signature Algorithm: sha256WithRSAEncryption
6c:2a:18:2e:97:b2:87:a7:af:0a:a7:5e:2a:0a:4c:34:20:67:
68:c3:6d:a4:3a:5d:3f:51:be:44:ea:93:dd:89:1c:18:75:d6:
8d:0e:94:d3:32:7e:00:e1:7e:87:b7:93:06:98:1a:6f:24:39:
09:68:6c:5f:05:f6:f2:b2:d2:34:15:c3:3d:e0:84:5f:af:ed:
10:4c:df:e1:48:bf:15:a0:60:82:fd:53:06:a7:83:4c:38:13:
02:11:6b:a1:4c:6f:a1:db:15:5a:bd:c7:96:ab:37:a3:dd:75:
fe:96:e7:0c:b2:e1:f4:7f:e1:cb:f0:ac:d4:62:4f:3b:a5:42:
0e:4f:74:8c:68:4b:c2:7f:48:34:cf:89:a2:17:ad:c9:15:b6:
0f:d5:af:b4:ba:22:8a:0a:d5:e4:54:97:50:cf:04:80:34:26:
ef:bc:94:71:bc:af:47:3e:30:7b:69:c1:74:ae:fa:72:bf:ab:
5d:34:ac:93:dd:7f:63:5a:9c:3c:f1:61:b3:e0:4e:5b:6b:c4:
58:e3:5e:56:74:5d:91:c2:54:5f:7e:a6:e5:e5:be:6a:d6:75:
f7:94:87:32:e3:1d:ec:12:16:ae:7a:e4:31:94:41:49:29:26:
bb:87:ce:36:b0:f6:b9:4b:a0:b6:db:ca:34:43:22:85:33:d6:
a4:30:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:31 2025 by rpki-client