Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa
File: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (raw, json)
Hash identifier: pNeECebUS4J3hEM1iBzX7SkqH1/qf9UEXB4v9O169OM=
Subject key identifier: 72:66:02:13:A6:74:7C:DD:43:1D:13:38:BA:A8:D7:90:3F:16:5F:EA
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 02
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa
Signing time: Thu 16 Jan 2025 03:38:36 +0000
ROA not before: Thu 16 Jan 2025 03:38:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 206150
IP address blocks: 103.49.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jan 16 03:38:36 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67887f3c-5a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:28:b9:99:91:00:34:0b:3b:c4:b0:0d:ea:
90:14:2f:47:a5:91:d5:68:c2:10:1a:cf:2d:20:04:
bc:98:02:d0:1b:9d:11:fc:46:16:f4:d7:09:15:3f:
80:a2:fd:10:ea:02:bf:bb:c9:53:6b:56:0f:0d:f6:
b5:0e:8a:ef:b2:71:8d:c6:73:82:db:28:3c:d8:a1:
5e:5e:21:47:10:db:f4:be:8c:91:35:50:6d:8d:9a:
b1:06:dd:71:a0:50:ad:78:b2:ab:f3:75:4b:9f:f6:
cb:f7:a1:4d:c1:72:ff:d2:ca:32:8e:86:be:ea:a2:
2c:7e:31:71:a9:9d:6c:43:a2:85:22:e0:4a:f7:f3:
7a:82:a4:8e:57:0c:08:37:5c:3c:b8:17:b8:e2:aa:
a2:eb:3d:3a:9d:6a:c0:08:dd:96:5f:12:da:82:97:
e8:58:e8:6e:01:75:79:f6:5f:df:a2:98:50:6c:b9:
5a:fb:cf:85:2f:87:db:b6:dd:f1:0e:39:56:84:e1:
35:14:86:c9:65:8d:9e:75:27:61:53:cc:d3:d3:00:
e9:a0:16:45:30:2d:df:e6:f6:d9:12:c3:60:9b:f4:
70:10:a4:20:9f:0f:5f:42:a9:84:1f:59:4e:b1:09:
15:05:d5:3f:0a:5d:09:0a:9e:cf:2f:f3:85:98:ec:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:02:13:A6:74:7C:DD:43:1D:13:38:BA:A8:D7:90:3F:16:5F:EA
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:88:a5:94:b9:cc:10:71:3f:a4:fd:31:f2:d4:2f:22:76:f8:
5d:ab:f6:f5:7c:ba:0e:06:ec:9e:7a:df:de:68:2c:7b:b0:85:
63:3e:83:be:80:20:08:2e:7c:ac:e8:ee:d4:ad:e9:07:8a:2d:
67:5d:f8:fe:d8:f3:8f:9c:f3:0c:4e:cc:3c:16:92:1d:4d:41:
29:5f:bd:a9:ee:36:98:e2:cc:03:70:46:0c:3d:c6:86:a8:aa:
8c:d0:c3:25:75:27:09:36:7d:d9:bc:5b:52:52:9f:2b:6e:82:
8a:51:aa:cd:93:6a:31:b5:d2:ac:a5:e1:05:a2:b2:f9:01:66:
0a:de:e6:41:fb:43:b7:20:92:e1:71:29:cb:14:74:fb:3b:37:
27:9a:c3:1d:d1:77:31:a4:40:d0:f8:25:78:ff:d6:02:c5:70:
32:5e:a9:30:2b:94:8f:26:2a:58:77:aa:38:83:9d:63:4a:ac:
54:24:dd:a5:48:3c:d0:c9:ff:af:c7:f9:c2:b8:a8:c6:ab:1a:
05:4d:53:12:15:17:74:be:f0:cb:09:46:56:e8:d9:10:aa:69:
b2:ce:60:29:ae:7a:76:9c:48:5b:47:c4:a7:42:71:5b:c3:a6:
73:81:60:d3:d9:93:bd:fa:89:89:7a:89:0d:1e:6c:aa:2d:57:
a1:4c:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:28 2025 by rpki-client