Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa
File: C8A09F34F11C11EA83A6D247C4F9AE02.roa (raw, json)
Hash identifier: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=
Subject key identifier: AE:E2:9E:47:1A:D1:47:CC:0D:04:B5:4F:77:DC:BB:C8:A7:7E:E4:A4
Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial: 0AB2
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa
Signing time: Thu 12 Dec 2024 19:38:20 +0000
ROA not before: Thu 12 Dec 2024 19:38:20 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138418
IP address blocks: 103.114.60.0/23 maxlen: 23
103.114.60.0/24 maxlen: 24
103.114.61.0/24 maxlen: 24
103.125.28.0/22 maxlen: 22
103.125.28.0/23 maxlen: 23
103.125.28.0/24 maxlen: 24
103.125.29.0/24 maxlen: 24
103.125.30.0/23 maxlen: 23
103.125.30.0/24 maxlen: 24
103.125.31.0/24 maxlen: 24
2403:eb40::/32 maxlen: 32
2403:eb40::/48 maxlen: 48
2403:eb40:1000::/48 maxlen: 48
2403:eb40:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2738 (0xab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Validity
Not Before: Dec 12 19:38:20 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675b3bac-e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:ba:88:13:a5:15:0b:47:75:de:5b:e9:ff:
f0:f0:6a:59:2b:4f:d3:77:4e:31:c4:dc:45:e2:d2:
6f:f8:c4:12:28:23:bf:7b:b2:26:b8:af:73:3b:a7:
11:9a:36:65:ab:18:f2:82:8c:f4:17:ab:51:6b:ad:
ec:97:0b:40:3a:d5:b8:77:22:d8:c8:13:82:d3:f0:
64:00:73:97:fd:d4:24:07:72:fc:26:f4:3e:46:d8:
8f:38:28:9f:13:05:98:8a:e1:be:12:0e:d6:db:6a:
42:20:58:b5:f6:48:a1:fb:8f:10:cf:8f:24:35:fd:
7f:0c:62:e3:60:bd:a6:b8:ae:dd:dd:37:9b:7a:92:
78:13:0f:2c:ee:fa:73:a4:5e:b5:0d:d0:92:a6:27:
b1:0c:d4:92:21:89:17:c4:9b:b2:8e:11:59:40:22:
6e:9a:90:fc:a0:50:80:60:52:43:41:60:3b:d6:f4:
2a:a1:38:f6:f7:b6:52:c1:8d:86:fd:6b:fe:13:67:
87:1c:ab:9b:bc:ab:c9:c1:de:e0:f0:15:f6:0f:ed:
87:d1:53:6b:57:fb:c5:02:9b:2e:cb:76:14:0d:5e:
7c:85:2f:86:b1:b2:78:a3:7f:b3:a5:27:27:65:12:
ed:f7:9b:34:37:64:5a:7e:a2:f4:63:0e:cf:db:9b:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:9E:47:1A:D1:47:CC:0D:04:B5:4F:77:DC:BB:C8:A7:7E:E4:A4
X509v3 Authority Key Identifier:
keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.60.0/23
103.125.28.0/22
IPv6:
2403:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
39:78:80:1b:72:c9:85:d3:d7:b7:17:f2:94:1a:2c:ea:6e:b4:
4f:50:85:a1:f5:64:84:85:53:d1:9a:de:b9:8f:8a:b7:cc:af:
c9:b4:83:4c:7e:41:2f:14:c5:6f:41:bb:6b:cd:9f:cc:78:d7:
cb:b3:ac:a2:a5:14:05:96:49:5c:7d:fe:12:5d:bf:d1:d0:b1:
38:1d:94:4b:44:dd:ef:ae:41:92:24:92:3a:38:b6:71:3e:bc:
d5:d1:58:64:7f:9a:5d:22:16:0a:03:50:88:e8:f5:86:49:ff:
03:3e:dd:a6:a5:eb:e1:36:d5:3c:27:00:7a:a8:d0:c7:fc:8b:
a1:34:c7:5f:09:46:af:d1:84:53:d6:4b:42:05:a7:d7:ce:c3:
ba:e0:b7:12:47:d0:5f:53:c2:98:1e:2a:f0:3f:df:de:f8:04:
10:a4:04:f1:82:47:4b:8d:c6:c8:cd:8b:02:0f:22:ac:60:ba:
aa:9b:b8:64:71:93:05:92:b1:0d:08:c8:1c:b7:7b:57:e2:00:
5b:36:59:53:d9:5d:d8:6f:d9:92:7d:f5:f4:f4:47:3b:2e:95:
c3:1d:76:8f:27:ce:5b:f4:5a:ca:af:5f:ed:a6:50:b4:c1:ea:
d6:0e:1f:32:f3:2d:ac:33:5f:17:90:23:f1:ae:35:a9:3c:fd:
f2:48:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:30 2025 by rpki-client